Windows Analysis Report
https://www.wbtd.com/

Overview

General Information

Sample URL: https://www.wbtd.com/
Analysis ID: 1525654
Tags: urlscan
Infos:

Detection

Score: 48
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Antivirus detection for URL or domain
Connects to several IPs in different countries
HTML page contains hidden javascript code
HTML page contains string obfuscation

Classification

AV Detection
barindex
Antivirus detection for URL or domain
Source: http://google.com URL Reputation: Label: malware
HTML page contains hidden javascript code
Source: https://www.haoqq.com HTTP Parser: Base64 decoded: [null,null,null,3]
HTML page contains string obfuscation
Source: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html HTTP Parser: Found new string: script (function() {var u = 'https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-BmwgLlXvLBDhkYHic6fuX49VdJ25tE_0myFee4RzIpazsSanc2sDjik01ZLPn36OhmSEWoGfGPz5SXZjf1xOgwqRv4oSvkenGiaEs91mTI-JWahTZGmKo_5Nu3puY7PuQQfNWMus2BDvFwBJs_XsqYHj3OkKx8mqSukz_RaZMUZM3fKt9xy2PP_tIheV93WR_VSb5wAOnhQbaycBDCbSlTgOR-esdxTnOh5-5Xx3mbVhao-kg&cry=1&dbm_d=AKAmf-Ctkfiisw4sUKcjWsLWg6bu1FonrD_Mrehk92SJHpzkPzXReqaMsEEEjWicDM03Zn_2Wf9BGLrKSJASO3hhy6pt7YFa5IQULRtat2VuW0hhBPMqk5NcbqW9y5kQCNZrDbSDVSB7OB35RuZUMf6LC3qM9xmJTV8Fuq_TEdx-19AENel1TSyxkg1glhQBMV89eX202AQar3P63zQt2Km56Zb24BgJSNEgKIQJnBNlQWCl1xtQTM0LWhgK0Ljkcjykqj-7P0UZ5tQPPeyh8ZfEY-QZQrpXAsljhHHemCDsvKSyVJLTj1LhSr8kBGfsE4uqWGL8T5eMjmL_ISvFHy0iuhuHON-8q9qBDvu3RxwngqWA_THWQN8Mx2SWx42vTnBAQKX1OSIRSC4rSycMXmkmEQGcd8rU_HWFGsBtaTzG__G8vDFhVOR1auBW31T7Ozkexq2V83hBFUf06JksnSITmSPWt9EIs_aPFXwvkirKukZw3B8s57wqYYSbvxlV3m6z7Venw8J2MbYCwoySSQihoQ2TG11k8WADxGUcWVpZHRD0ig78UvZmEGbREYz_CEimdL8OafEikmJprO1FD6Wq8FNAe8-7sIw7PFyZrGallNX2gPNqvGWAnowVOQ1-j-c17-X2yPX2ZMQDXdueKDbcXd309WBwLZxX6oBI28u0i6o9_2Q0Z...
Source: https://www.haoqq.com HTTP Parser: No favicon
Source: https://www.haoqq.com HTTP Parser: No favicon
Source: https://www.haoqq.com HTTP Parser: No favicon
Source: https://www.haoqq.com HTTP Parser: No favicon
Source: https://www.haoqq.com HTTP Parser: No favicon
Source: https://www.haoqq.com HTTP Parser: No favicon
Source: https://www.haoqq.com HTTP Parser: No favicon
Source: https://www.haoqq.com HTTP Parser: No favicon
Source: https://www.haoqq.com HTTP Parser: No favicon
Source: https://www.haoqq.com HTTP Parser: No favicon
Source: https://www.haoqq.com HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net HTTP Parser: No favicon
Source: https://s0.2mdn.net HTTP Parser: No favicon
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50066 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50325 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50325 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:50355 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50394 version: TLS 1.2
Connects to several IPs in different countries
Source: unknown Network traffic detected: IP country count 10
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: www.wbtd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/css/plugins.css HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /pages/assets/css/styles.css HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/js/jquery.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /images/haoqq.gif HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/picture/magento.svg HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/picture/prestashop.png HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/picture/wordpress.svg HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/picture/shopify.svg HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /images/haoqq.gif HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/picture/magento.svg HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/picture/prestashop.png HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/js/jquery.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/css/css2.css HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.haoqq.com/pages/assets/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/picture/wordpress.svg HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/css/css.css HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.haoqq.com/pages/assets/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/picture/shopify.svg HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/css/css1.css HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.haoqq.com/pages/assets/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/js/popper.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/js/bootstrap.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/js/select2.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/fonts/92zatBhPNqw73oTd4g.woff2 HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.haoqq.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.haoqq.com/pages/assets/css/css2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/js/owl.carousel.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/js/ion.rangeSlider.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=soKWxluS4tuRGfA&MD=yw2KXhkV HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/js/counterup.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/js/popper.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/js/custom.js HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/fonts/themify.woff HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.haoqq.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.haoqq.com/pages/assets/css/plugins.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/js/owl.carousel.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/js/bootstrap.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/fonts/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.haoqq.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.haoqq.com/pages/assets/css/css1.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/js/select2.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pages/assets/js/ion.rangeSlider.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/js/counterup.min.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/js/custom.js HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1728042057&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.haoqq.com%2F&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aiict=1&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055414&bpp=29&bdt=9079&idt=1807&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=5260686608363&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1859 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&slotname=5424108534&adk=3166978744&adf=3025194257&pi=t.ma~as.5424108534&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055443&bpp=2&bdt=9108&idt=1840&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=3136&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEebr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1846 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055445&bpp=1&bdt=9109&idt=1853&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C1200x280&nras=2&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1856 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/image/loader.gif HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/pages/assets/css/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/adview?ai=CDNeaS9T_ZpnWAa2dvPIP7626gAyM7O2yerX2tr76ErCQHxABIOfA1G1gyQagAZu5y5wDyAEJqAMByAPLBKoEzgFP0Muz49MN5LepIXnNX2sWNLxMALjBFfUbB0OZ2Y0CJtCvkfyDGTTHkvgwdHFxHOZPYjHlSnAkfjxVHg7khwWwbSF-mOD2pnLEQM0aRU-cye1QN1svxQfKt4w1qmK1C6_lgsJpSig58jbAj5r_X7Xa2RcNQkg64BuGTdiTL6Ze5Zc8uCeSGxuJNBBw3Mos-MSRXrVt2jk195dptrpa4u92Fh3hUoYfOGkZLPzpSB6kEGmMZPHIo9hsmqYNijUzO_i8hzKhl_YCoGzyT_FAcMAE78rGuP0EiAX82IfGBaAGLoAHzca0Y6gH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwDyBwQQmMgH0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYicHTqNL0iAOaCXtodHRwczovL3d3dy5tYXJxdWlzYXB0cy5jb20vP2xmX3NvdXJjZT0xMjM1JnV0bV9jYW1wYWlnbj0xNDg5MTAzOTk2JnV0bV9zb3VyY2U9Z29vZ2xlJnV0bV9tZWRpdW09Y3BjJnV0bV90ZXJtPSZnYWRfc291cmNlPTWACgHICwHaDBAKChDQ1e2A6umXvDkSAgED2BMD0BUBgBcBshceChoIABIUcHViLTE2NzMzOTkxNjA3MTA3MTgYABgBuhcCOAGyGAkSApNOGC4iAQDQGAE&sigh=G4BK4_YU2lA&uach_m=%5BUACH%5D&ase=2&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4EYAQ&template_id=5000&nis=6 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055445&bpp=1&bdt=9109&idt=1853&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C1200x280&nras=2&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1856Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1905944345&adf=1676256590&pi=t.aa~a.3301965335~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13042&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280&nras=3&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1549&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=2024 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic HTTP traffic detected: GET /f/AGSKWxXZNRBPFFhGTePxR6V1Vq40hv67Cvsin5qeuZSjDBD85mlwe1HI4SQhunsqyCln6wwKPWmIyE2bvL_R5249nJ3PvBa1tvqv_dr8hSthcXDsPiuhzU3msSPWN6duzO7QXBomMmBGiA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYxLDM5NDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tLyIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1905944345&adf=1676256590&pi=t.aa~a.1089130404~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=1&bdt=13042&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280&nras=4&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1259&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=2042 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=3371909064&adf=397776184&pi=t.aa~a.1089127196~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13043&idt=2&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280&nras=5&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3625&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=2062 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/image/loader.gif HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg
Source: global traffic HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=2063629977&pi=t.aa~a.1836389361~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042064&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059375&bpp=1&bdt=13039&idt=1&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280%2C1200x90%2C1263x907%2C468x60&nras=8&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3475&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=6&fsb=1&dtd=4876 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic HTTP traffic detected: GET /f/AGSKWxUppim6GlhNn98Sy4cq18snKjQ7Zb0LLow_-Ky3kt084XagRObmnO6ruMYJouPgI6-o6iQUp0I2TbjrqAfTZo2XNrPYi2-cTiCIY9lCNM8wdPHyKV4jdfL3QLadzLsUWTOxmRuv2w==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYyLDc0MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuLUdCIl0sImh0dHBzOi8vd3d3Lmhhb3FxLmNvbS8iLG51bGwsW1s4LCJlc2tXWFNGSHNRZyJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /app/win?id=920622745182&ap=Zv_USgAPJr4ITwp0ACc964yYG2BsjvfLazwgjA&brid=1-EKQ74uci3ZpK6g_GPVxw&t=b HTTP/1.1Host: 8proof.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNWPqLPCeuK9miqpQiuXE3w1U1FpIl8GWlrvRuOX_pUYIBo069Thk7kxKuAxAOYnXOz_r-3C-2nGyozMuaheFJuIT7y3BVT71_CsqAMJMJ9MwPZjQG0 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=3371909064&adf=397776184&pi=t.aa~a.1089127196~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13043&idt=2&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280&nras=5&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3625&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=2062Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic HTTP traffic detected: GET /pagead/adview?ai=CmacBStT_Zr7NPPSUvPIP6_ucmQm-vcfmYdeIqO67DcCNtwEQASAAYMkGggEXY2EtcHViLTE2NzMzOTkxNjA3MTA3MTjIAQmoAwHIAwKqBMIBT9D06km8FS4J7JT2ZSJ7nsBXDLMjgaS_vobYRCDTEuxYRJpSGuVWBjQv-7xIATyrcVeji8OYABqqTSJqZtpZLYgKvSmkmx-Qu_lumE-wvy5IDGWHkQJjbdnFAbg5FcBCyL7V9EAB-wT9For-ayhyljKQx8bdTqvMJDz88CXlmBUEoWuoIrazM6RfEhzvU6MPdKqni6PSj-7JQxG5YokJtHWIh7IeSO6yG7K09oYcQ-5Ukwy2DqIF8_4hdHYde5gJ_6eABqehs8-1-siQMKAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpYxKnRqNL0iAOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMTY3MzM5OTE2MDcxMDcxOBgAGAw&sigh=j6kRbNrdK5I&uach_m=%5BUACH%5D&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8BgB HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pcs/view?xai=AKAOjssANYIaq92euECwoJBoaf_mr5m-WCHhq0GSDEfjngwhwWVrab6AspGuYTxR3PHCwn27MtROBt_BM6cXqHKRuo1oZ_CYCSK2IcoiQ2ASf2dB6ysTNiiHFnSkwvzrCYYKr-_4GoIX_Qd0wgM-9b_BViOs6mRYW_FAMzgL-2FbCj-4VKzzvqhtHn2DXKmmTKLPEVuNGyEUoESvMrJNMJg_Ts4rePjN5sAbx-M9YFMMKuHWW8Am4y4gRXwonQqMclf4u9NRTtjnc-Bzx_n9Vp6mpgg7T6lyvkp7cIPy73pcq4c6VLWjLX9k6c2EzN9U35yZzallIoSVEh8cM4iNNA7FpeIcPwrUT8HA8fWy1UkAj_Grxg6VJRFswjFZY11l-f3aOhRHOqnx9lNmFrbXt_wUbULSWxuUMlkcP8Z0JiKZ0RsKVKbR4rZsFY_kgswW_T1MpaF7QeB_ucHs3NU7hNJ41C4eHmnwOw9Gd31miU76S1sAUId2RnmRCWN1ECVtgn8WLlFE1L8HgxpJzkFZexXRy8BGoVPh2I6z4swT6TAzP_ZOkuzan7Vuq8EDZKDrRSij2o0q8MEzv6zoFhQUYfeoqNefqzyg2bFqrZUS2RdOICTzz7Rvq1_9ZlXZilNEFA5djowi5fpoZnGQFLj8w2ac62f1tHZ614V_H5CtItmOeMr728RcZXwtkb9PlWx5cVBopcB-3IYm1bvN--XnAe44FCG3iSktsGPJRtJHBEx9OI76cdP1ygTA26oxpulY7bcTLv5J8ewkrcUC6EgK7rlW0ou3xNjt89HbulEoW5_SbY6yMYyuStW8kMs-doSSOVSdxxaLoYP8N61OMmS2SNFEPXZq_L7DZNUNdZr9tnRGlgNURksTvFC-Sy4vFibw_tr1nQNT6B2ie1vbAcAy0D08IaJqmvGygGVN4scO9V5AJOVX9IpoYfSe8dwP9gmmBt_9nb3pViRIyvdjKsA6FJk0Ap8endytum64zXQkcgJpMz6FphRHEIuHEl9yDbhloOMMN3b1MIgsbpMUjU39MpjHZLdvIit1uVmTEGhLVqoEWubTYRTfBHTskXC3lBa1GJYtx2R8mSkFdsU7SaFqmy7EYzlsZ81AKqXiU1VSUYcrZAEj_bqMKdtvhhc4tuwecLV8Eun_7JcMIpGHH3JSYuM1e6VAwqCqFqbI5ysGTW4EgPpEuGHTKwNo0ERSdOLTjqTZhsf8vRpXuaQH7A0vQ9MXL_ky2ZKQiMUtusv-UYG4lVVPSExE-Kne1rONhCG91pwbKEbqPG-k759yZoPcKPwTIKKbU9cZvk7m6dktmewAZty_L4_OFl1zw7WBz04R_b-gWCJ56c42CjuDP-lta9AbrIdnpKLqgnA4ZxepWkv4ML0cDEJlMbdNK3U4plrb4gnVUh0t&sai=AMfl-YRhaXmOTGQX9jQ4eWDM3MRSUnJPzRrJlkxrjo7MHsTBZDkO_17mCp5R8g2-N5lapcVMmSECjG3C5NbL2hzW7hTUJfW5FBvEjdgM3onfWjLzdCjtxO_UqCF_Cw77hoQgzTspuLUrpf0G1Ndr43qP0YKFcdH_hS-lB6y6eFYpDi5FsnPYQqDHuiuzjpyf2Dl_P35V2cvHBxE5-tAsz5bLcGwPVGLnOqNLdG2zKHWLTA_lcBs4ocpdyqoXnaRueqFOZgrYbamSkRtHPP_pAtxhV-0EDySTvmdhtDhI9MM0Ck2kK56xLAYfvYKPwSYUWjcpiCh3930fWQn19iBspug4sZn-NX7hVPAT9ym--dXiRc4irWCxoGzHrLS9L1lY-OkCKeiSwBv67xYwRtvNip2uO0QiUW-cIexwSDpC&sig=Cg0ArKJSzCIx7rquL3v-EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20241001.82346&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: not-trigger, not-navigation-source, event-sourceReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /usersync/googleadx/?google_gid=CAESEAvzusCYvKmt2gkuBquT8pc&google_cver=1&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQSzC5C28pLStKXw6cnCDgYtDmb02nZs8CRLDZNTHqqdUV3nd42z4t072GipsN10sg314x9S-mLGUsd1gJTxb-zNADAAWLa&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /match/47/?remote_uid=CAESEGoQnRhkVqcuY7XSc-z5Mtc&c_param1=AXcoOmQDJHHlzqr4eH5ZupQ5A7svWZ67X9fEHbwsf9SwO2hQCYAZ9sh6oKH6jmYabyCKENfazFNMv_g7QlZw4fo8ZdbJprpovR1h&gdpr=%%GDPR%%&addtl_consent=%%ADDTL_CONSENT%%&google_cver=1 HTTP/1.1Host: s.uuidksinc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /r/cs?pid=3&google_gid=CAESEE-2hABbNlvCQmyOE9XNGr8&google_cver=1&google_push=AXcoOmQovd5f9-nww3m33jllHguDkNcr67y1MfGmJWvpYovBsHf2nNgx76pivAVE-PdlwLWRl53ng4jRHpGT4NCpY_NAJ_38phXupw HTTP/1.1Host: ad.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic HTTP traffic detected: GET /rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic HTTP traffic detected: GET /pixel/attr?d=AHNF13JACtVvlHwGv1kKZ8F7RBS0xG_qaVY5s6m2wTjamPBJObAKRt9MedOCqlvszxZ7x7huRaf7 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE
Source: global traffic HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQ-ZUcu7T0mvdhQ_JTm4iH4HTpbfmsP-NJ6mkTEfjYqWQ4FE3cjWLEaR7h6-LaIOaQflmL_KBIh1OpmrGXlUjRVzpYA8g HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /simgad/7138348558614381586 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sync/adx?google_gid=CAESEJyXJmH3Ccek7-QgafqrVj8&google_cver=1&google_push=AXcoOmRrukcpI3h6PezLMMUoYE8A5_O1p1n0cxhpK3ZcX1ogniTVasABBgXrEaQKZmmV6BZxNBsBtZhRkKJl4vIpcjkYcyDayZgmTA HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /usersync/googleadx/?google_cver=1&google_gid=CAESEAvzusCYvKmt2gkuBquT8pc&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=4s7FapyoS-IWC5mSxvJw
Source: global traffic HTTP traffic detected: GET /f/AGSKWxVH38ovtr9fgT8GOp4INOEd4n59XjgUwhiPYlCSyO7JSEmY6NN_96J1Ljm1M6KeUUvehDGZqHWFTnc6VmLThMAKsiqCqiaJJqEw_4cGqP_lYvCDpic4JgYonekz98kntYU4DeiNw6xrDZStRlIb0Jaqk2VS7MI_TgwbyXmfRUbs4V0M3yEkQ4YGQESz/_/ade/baloo.php/ad/index_/ads_ifr./adswidejs./tg.php?uid= HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /f/AGSKWxXZNRBPFFhGTePxR6V1Vq40hv67Cvsin5qeuZSjDBD85mlwe1HI4SQhunsqyCln6wwKPWmIyE2bvL_R5249nJ3PvBa1tvqv_dr8hSthcXDsPiuhzU3msSPWN6duzO7QXBomMmBGiA==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYxLDM5NDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tLyIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&gdpr=0&ixi=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv-UUtHM6u0AADLRAE9ESQAA; CMPS=3875; CMPRO=3875
Source: global traffic HTTP traffic detected: GET /app/win?id=920622745182&ap=Zv_USgAPJr4ITwp0ACc964yYG2BsjvfLazwgjA&brid=1-EKQ74uci3ZpK6g_GPVxw&t=b HTTP/1.1Host: 8proof.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=turn1&google_cm&google_sc&google_hm=MzQxODA4ODg1NjE3MDcwNjc1Mg==&gdpr=&gdpr_consent=&process_consent=T HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=kadam&google_push=AXcoOmQDJHHlzqr4eH5ZupQ5A7svWZ67X9fEHbwsf9SwO2hQCYAZ9sh6oKH6jmYabyCKENfazFNMv_g7QlZw4fo8ZdbJprpovR1h HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQSzC5C28pLStKXw6cnCDgYtDmb02nZs8CRLDZNTHqqdUV3nd42z4t072GipsN10sg314x9S-mLGUsd1gJTxb-zNADAAWLa&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: widget.us.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=nyn1WojFzMuWa1dDQZWnn90XtrdhhLATJ2htgUEpxlQhzOd11smQaZibcfYXKnvSl14h528x1j5XOWRrjA4lJrjzKg5ypMleIjqdgVhMR2Q.; receive-cookie-deprecation=1; uuid2=7058645915368902725
Source: global traffic HTTP traffic detected: GET /setuid?entity=101&gdpr=0&code=CAESEDP2bThm3Z2ZMBLJNUoTxTs&google_cver=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=nyn1WojFzMuWa1dDQZWnn90XtrdhhLATJ2htgUEpxlQhzOd11smQaZibcfYXKnvSl14h528x1j5XOWRrjA4lJrjzKg5ypMleIjqdgVhMR2Q.; receive-cookie-deprecation=1; uuid2=7058645915368902725
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=zemanta&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw&google_hm=NHM3RmFweW9TLUlXQzVtU3h2Snc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmRrukcpI3h6PezLMMUoYE8A5_O1p1n0cxhpK3ZcX1ogniTVasABBgXrEaQKZmmV6BZxNBsBtZhRkKJl4vIpcjkYcyDayZgmTA&google_hm=eS1GWHlJb3hsRTJwSGdGMHQyUG4yNXI4SFc1NHV1WjliQn5B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pcs/view?xai=AKAOjssANYIaq92euECwoJBoaf_mr5m-WCHhq0GSDEfjngwhwWVrab6AspGuYTxR3PHCwn27MtROBt_BM6cXqHKRuo1oZ_CYCSK2IcoiQ2ASf2dB6ysTNiiHFnSkwvzrCYYKr-_4GoIX_Qd0wgM-9b_BViOs6mRYW_FAMzgL-2FbCj-4VKzzvqhtHn2DXKmmTKLPEVuNGyEUoESvMrJNMJg_Ts4rePjN5sAbx-M9YFMMKuHWW8Am4y4gRXwonQqMclf4u9NRTtjnc-Bzx_n9Vp6mpgg7T6lyvkp7cIPy73pcq4c6VLWjLX9k6c2EzN9U35yZzallIoSVEh8cM4iNNA7FpeIcPwrUT8HA8fWy1UkAj_Grxg6VJRFswjFZY11l-f3aOhRHOqnx9lNmFrbXt_wUbULSWxuUMlkcP8Z0JiKZ0RsKVKbR4rZsFY_kgswW_T1MpaF7QeB_ucHs3NU7hNJ41C4eHmnwOw9Gd31miU76S1sAUId2RnmRCWN1ECVtgn8WLlFE1L8HgxpJzkFZexXRy8BGoVPh2I6z4swT6TAzP_ZOkuzan7Vuq8EDZKDrRSij2o0q8MEzv6zoFhQUYfeoqNefqzyg2bFqrZUS2RdOICTzz7Rvq1_9ZlXZilNEFA5djowi5fpoZnGQFLj8w2ac62f1tHZ614V_H5CtItmOeMr728RcZXwtkb9PlWx5cVBopcB-3IYm1bvN--XnAe44FCG3iSktsGPJRtJHBEx9OI76cdP1ygTA26oxpulY7bcTLv5J8ewkrcUC6EgK7rlW0ou3xNjt89HbulEoW5_SbY6yMYyuStW8kMs-doSSOVSdxxaLoYP8N61OMmS2SNFEPXZq_L7DZNUNdZr9tnRGlgNURksTvFC-Sy4vFibw_tr1nQNT6B2ie1vbAcAy0D08IaJqmvGygGVN4scO9V5AJOVX9IpoYfSe8dwP9gmmBt_9nb3pViRIyvdjKsA6FJk0Ap8endytum64zXQkcgJpMz6FphRHEIuHEl9yDbhloOMMN3b1MIgsbpMUjU39MpjHZLdvIit1uVmTEGhLVqoEWubTYRTfBHTskXC3lBa1GJYtx2R8mSkFdsU7SaFqmy7EYzlsZ81AKqXiU1VSUYcrZAEj_bqMKdtvhhc4tuwecLV8Eun_7JcMIpGHH3JSYuM1e6VAwqCqFqbI5ysGTW4EgPpEuGHTKwNo0ERSdOLTjqTZhsf8vRpXuaQH7A0vQ9MXL_ky2ZKQiMUtusv-UYG4lVVPSExE-Kne1rONhCG91pwbKEbqPG-k759yZoPcKPwTIKKbU9cZvk7m6dktmewAZty_L4_OFl1zw7WBz04R_b-gWCJ56c42CjuDP-lta9AbrIdnpKLqgnA4ZxepWkv4ML0cDEJlMbdNK3U4plrb4gnVUh0t&sai=AMfl-YRhaXmOTGQX9jQ4eWDM3MRSUnJPzRrJlkxrjo7MHsTBZDkO_17mCp5R8g2-N5lapcVMmSECjG3C5NbL2hzW7hTUJfW5FBvEjdgM3onfWjLzdCjtxO_UqCF_Cw77hoQgzTspuLUrpf0G1Ndr43qP0YKFcdH_hS-lB6y6eFYpDi5FsnPYQqDHuiuzjpyf2Dl_P35V2cvHBxE5-tAsz5bLcGwPVGLnOqNLdG2zKHWLTA_lcBs4ocpdyqoXnaRueqFOZgrYbamSkRtHPP_pAtxhV-0EDySTvmdhtDhI9MM0Ck2kK56xLAYfvYKPwSYUWjcpiCh3930fWQn19iBspug4sZn-NX7hVPAT9ym--dXiRc4irWCxoGzHrLS9L1lY-OkCKeiSwBv67xYwRtvNip2uO0QiUW-cIexwSDpC&sig=Cg0ArKJSzCIx7rquL3v-EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20241001.82346&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pcs/view?xai=AKAOjssANYIaq92euECwoJBoaf_mr5m-WCHhq0GSDEfjngwhwWVrab6AspGuYTxR3PHCwn27MtROBt_BM6cXqHKRuo1oZ_CYCSK2IcoiQ2ASf2dB6ysTNiiHFnSkwvzrCYYKr-_4GoIX_Qd0wgM-9b_BViOs6mRYW_FAMzgL-2FbCj-4VKzzvqhtHn2DXKmmTKLPEVuNGyEUoESvMrJNMJg_Ts4rePjN5sAbx-M9YFMMKuHWW8Am4y4gRXwonQqMclf4u9NRTtjnc-Bzx_n9Vp6mpgg7T6lyvkp7cIPy73pcq4c6VLWjLX9k6c2EzN9U35yZzallIoSVEh8cM4iNNA7FpeIcPwrUT8HA8fWy1UkAj_Grxg6VJRFswjFZY11l-f3aOhRHOqnx9lNmFrbXt_wUbULSWxuUMlkcP8Z0JiKZ0RsKVKbR4rZsFY_kgswW_T1MpaF7QeB_ucHs3NU7hNJ41C4eHmnwOw9Gd31miU76S1sAUId2RnmRCWN1ECVtgn8WLlFE1L8HgxpJzkFZexXRy8BGoVPh2I6z4swT6TAzP_ZOkuzan7Vuq8EDZKDrRSij2o0q8MEzv6zoFhQUYfeoqNefqzyg2bFqrZUS2RdOICTzz7Rvq1_9ZlXZilNEFA5djowi5fpoZnGQFLj8w2ac62f1tHZ614V_H5CtItmOeMr728RcZXwtkb9PlWx5cVBopcB-3IYm1bvN--XnAe44FCG3iSktsGPJRtJHBEx9OI76cdP1ygTA26oxpulY7bcTLv5J8ewkrcUC6EgK7rlW0ou3xNjt89HbulEoW5_SbY6yMYyuStW8kMs-doSSOVSdxxaLoYP8N61OMmS2SNFEPXZq_L7DZNUNdZr9tnRGlgNURksTvFC-Sy4vFibw_tr1nQNT6B2ie1vbAcAy0D08IaJqmvGygGVN4scO9V5AJOVX9IpoYfSe8dwP9gmmBt_9nb3pViRIyvdjKsA6FJk0Ap8endytum64zXQkcgJpMz6FphRHEIuHEl9yDbhloOMMN3b1MIgsbpMUjU39MpjHZLdvIit1uVmTEGhLVqoEWubTYRTfBHTskXC3lBa1GJYtx2R8mSkFdsU7SaFqmy7EYzlsZ81AKqXiU1VSUYcrZAEj_bqMKdtvhhc4tuwecLV8Eun_7JcMIpGHH3JSYuM1e6VAwqCqFqbI5ysGTW4EgPpEuGHTKwNo0ERSdOLTjqTZhsf8vRpXuaQH7A0vQ9MXL_ky2ZKQiMUtusv-UYG4lVVPSExE-Kne1rONhCG91pwbKEbqPG-k759yZoPcKPwTIKKbU9cZvk7m6dktmewAZty_L4_OFl1zw7WBz04R_b-gWCJ56c42CjuDP-lta9AbrIdnpKLqgnA4ZxepWkv4ML0cDEJlMbdNK3U4plrb4gnVUh0t&sai=AMfl-YRhaXmOTGQX9jQ4eWDM3MRSUnJPzRrJlkxrjo7MHsTBZDkO_17mCp5R8g2-N5lapcVMmSECjG3C5NbL2hzW7hTUJfW5FBvEjdgM3onfWjLzdCjtxO_UqCF_Cw77hoQgzTspuLUrpf0G1Ndr43qP0YKFcdH_hS-lB6y6eFYpDi5FsnPYQqDHuiuzjpyf2Dl_P35V2cvHBxE5-tAsz5bLcGwPVGLnOqNLdG2zKHWLTA_lcBs4ocpdyqoXnaRueqFOZgrYbamSkRtHPP_pAtxhV-0EDySTvmdhtDhI9MM0Ck2kK56xLAYfvYKPwSYUWjcpiCh3930fWQn19iBspug4sZn-NX7hVPAT9ym--dXiRc4irWCxoGzHrLS9L1lY-OkCKeiSwBv67xYwRtvNip2uO0QiUW-cIexwSDpC&sig=Cg0ArKJSzCIx7rquL3v-EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2486&vt=11&dtpt=2484&dett=2&cstd=0&cisv=r20241001.82346&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, not-trigger, not-navigation-sourceReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie:
Source: global traffic HTTP traffic detected: GET /pixel?google_hm=b3VnRks2a2lCV3lPZnlKYlU5VF9aZw%3D%3D&google_nid=appier&google_push=AXcoOmSotlzXlITazuWCK3xBXY5xuChDBGEGIjGTS0t6K3S2l6WFtyeTYa2rAqT0_BU3OMnNoZndHNO1ql6rTBknJSdrWerSLKKqMQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /f/AGSKWxUppim6GlhNn98Sy4cq18snKjQ7Zb0LLow_-Ky3kt084XagRObmnO6ruMYJouPgI6-o6iQUp0I2TbjrqAfTZo2XNrPYi2-cTiCIY9lCNM8wdPHyKV4jdfL3QLadzLsUWTOxmRuv2w==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYyLDc0MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuLUdCIl0sImh0dHBzOi8vd3d3Lmhhb3FxLmNvbS8iLG51bGwsW1s4LCJlc2tXWFNGSHNRZyJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pagead/adview?ai=CmacBStT_Zr7NPPSUvPIP6_ucmQm-vcfmYdeIqO67DcCNtwEQASAAYMkGggEXY2EtcHViLTE2NzMzOTkxNjA3MTA3MTjIAQmoAwHIAwKqBMIBT9D06km8FS4J7JT2ZSJ7nsBXDLMjgaS_vobYRCDTEuxYRJpSGuVWBjQv-7xIATyrcVeji8OYABqqTSJqZtpZLYgKvSmkmx-Qu_lumE-wvy5IDGWHkQJjbdnFAbg5FcBCyL7V9EAB-wT9For-ayhyljKQx8bdTqvMJDz88CXlmBUEoWuoIrazM6RfEhzvU6MPdKqni6PSj-7JQxG5YokJtHWIh7IeSO6yG7K09oYcQ-5Ukwy2DqIF8_4hdHYde5gJ_6eABqehs8-1-siQMKAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpYxKnRqNL0iAOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMTY3MzM5OTE2MDcxMDcxOBgAGAw&sigh=j6kRbNrdK5I&uach_m=%5BUACH%5D&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8BgB HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /f/AGSKWxVH38ovtr9fgT8GOp4INOEd4n59XjgUwhiPYlCSyO7JSEmY6NN_96J1Ljm1M6KeUUvehDGZqHWFTnc6VmLThMAKsiqCqiaJJqEw_4cGqP_lYvCDpic4JgYonekz98kntYU4DeiNw6xrDZStRlIb0Jaqk2VS7MI_TgwbyXmfRUbs4V0M3yEkQ4YGQESz/_/ade/baloo.php/ad/index_/ads_ifr./adswidejs./tg.php?uid= HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /simgad/7138348558614381586 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv-UVdHM6EAAABI2AE7Q7AAA; CMPS=512; CMPRO=512
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=Zv-UUtHM6u0AADLRAE9ESQAA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /f/AGSKWxVXyEvQ8rr_BoQhqFBmSyhHFBY8TVHaXqWthoyB0cqzuBrNmLKKWj9DvZo73bHB3Zg42zHyHtCxZLCLhMD0SVD9dQ8OYiBt_wWfDGQEiJrh-njbg3paxBCGtFSliXExuETImT-9GQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDY3LDI2MTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOSw2XSxudWxsLDIsbnVsbCwiZW4tR0IiLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tLyIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=appnexus&google_hm=NzA1ODY0NTkxNTM2ODkwMjcyNQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AQAJG877fWervgJRuHq6AQEBAQEBAQCTVlRxLgEBAJNWVHEu&expiration=1728128470&google_cver=1&is_secure=true&google_gid=CAESEBzuFVvX7Ht-61AXmEGHQ6Q&google_push=AXcoOmSP2oyq_i5tQjau2lDivP3OkqgDjjl5FOJxQ-X2F_KTj7-x4-18dN4dECcg0YTA99153bVKErWmRI9LQC3RokKFc8wlkaHi HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /r/cms/id/0/ddc/1/pid/18/uid/?gdpr=&gdpr_consent=&google_gid=CAESEE-2hABbNlvCQmyOE9XNGr8&google_cver=1 HTTP/1.1Host: r.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3418088856170706752
Source: global traffic HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv-UVdHM6EAAABI2AE7Q7AAA; CMPS=512; CMPRO=512
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQSzC5C28pLStKXw6cnCDgYtDmb02nZs8CRLDZNTHqqdUV3nd42z4t072GipsN10sg314x9S-mLGUsd1gJTxb-zNADAAWLa&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pcs/view?xai=AKAOjssANYIaq92euECwoJBoaf_mr5m-WCHhq0GSDEfjngwhwWVrab6AspGuYTxR3PHCwn27MtROBt_BM6cXqHKRuo1oZ_CYCSK2IcoiQ2ASf2dB6ysTNiiHFnSkwvzrCYYKr-_4GoIX_Qd0wgM-9b_BViOs6mRYW_FAMzgL-2FbCj-4VKzzvqhtHn2DXKmmTKLPEVuNGyEUoESvMrJNMJg_Ts4rePjN5sAbx-M9YFMMKuHWW8Am4y4gRXwonQqMclf4u9NRTtjnc-Bzx_n9Vp6mpgg7T6lyvkp7cIPy73pcq4c6VLWjLX9k6c2EzN9U35yZzallIoSVEh8cM4iNNA7FpeIcPwrUT8HA8fWy1UkAj_Grxg6VJRFswjFZY11l-f3aOhRHOqnx9lNmFrbXt_wUbULSWxuUMlkcP8Z0JiKZ0RsKVKbR4rZsFY_kgswW_T1MpaF7QeB_ucHs3NU7hNJ41C4eHmnwOw9Gd31miU76S1sAUId2RnmRCWN1ECVtgn8WLlFE1L8HgxpJzkFZexXRy8BGoVPh2I6z4swT6TAzP_ZOkuzan7Vuq8EDZKDrRSij2o0q8MEzv6zoFhQUYfeoqNefqzyg2bFqrZUS2RdOICTzz7Rvq1_9ZlXZilNEFA5djowi5fpoZnGQFLj8w2ac62f1tHZ614V_H5CtItmOeMr728RcZXwtkb9PlWx5cVBopcB-3IYm1bvN--XnAe44FCG3iSktsGPJRtJHBEx9OI76cdP1ygTA26oxpulY7bcTLv5J8ewkrcUC6EgK7rlW0ou3xNjt89HbulEoW5_SbY6yMYyuStW8kMs-doSSOVSdxxaLoYP8N61OMmS2SNFEPXZq_L7DZNUNdZr9tnRGlgNURksTvFC-Sy4vFibw_tr1nQNT6B2ie1vbAcAy0D08IaJqmvGygGVN4scO9V5AJOVX9IpoYfSe8dwP9gmmBt_9nb3pViRIyvdjKsA6FJk0Ap8endytum64zXQkcgJpMz6FphRHEIuHEl9yDbhloOMMN3b1MIgsbpMUjU39MpjHZLdvIit1uVmTEGhLVqoEWubTYRTfBHTskXC3lBa1GJYtx2R8mSkFdsU7SaFqmy7EYzlsZ81AKqXiU1VSUYcrZAEj_bqMKdtvhhc4tuwecLV8Eun_7JcMIpGHH3JSYuM1e6VAwqCqFqbI5ysGTW4EgPpEuGHTKwNo0ERSdOLTjqTZhsf8vRpXuaQH7A0vQ9MXL_ky2ZKQiMUtusv-UYG4lVVPSExE-Kne1rONhCG91pwbKEbqPG-k759yZoPcKPwTIKKbU9cZvk7m6dktmewAZty_L4_OFl1zw7WBz04R_b-gWCJ56c42CjuDP-lta9AbrIdnpKLqgnA4ZxepWkv4ML0cDEJlMbdNK3U4plrb4gnVUh0t&sai=AMfl-YRhaXmOTGQX9jQ4eWDM3MRSUnJPzRrJlkxrjo7MHsTBZDkO_17mCp5R8g2-N5lapcVMmSECjG3C5NbL2hzW7hTUJfW5FBvEjdgM3onfWjLzdCjtxO_UqCF_Cw77hoQgzTspuLUrpf0G1Ndr43qP0YKFcdH_hS-lB6y6eFYpDi5FsnPYQqDHuiuzjpyf2Dl_P35V2cvHBxE5-tAsz5bLcGwPVGLnOqNLdG2zKHWLTA_lcBs4ocpdyqoXnaRueqFOZgrYbamSkRtHPP_pAtxhV-0EDySTvmdhtDhI9MM0Ck2kK56xLAYfvYKPwSYUWjcpiCh3930fWQn19iBspug4sZn-NX7hVPAT9ym--dXiRc4irWCxoGzHrLS9L1lY-OkCKeiSwBv67xYwRtvNip2uO0QiUW-cIexwSDpC&sig=Cg0ArKJSzCIx7rquL3v-EAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2486&vt=11&dtpt=2484&dett=2&cstd=0&cisv=r20241001.82346&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=zemanta&google_push=AXcoOmTwIyt4e4yXQx9lN73aYgUXRi5oVuQcAQV3YKf4X10ZMqCKM9DTgjo4doK24yKl6PsWS6AMAM38_9Ull1QIWkEQqJOHk-6yrw&google_hm=NHM3RmFweW9TLUlXQzVtU3h2Snc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_hm=b3VnRks2a2lCV3lPZnlKYlU5VF9aZw%3D%3D&google_nid=appier&google_push=AXcoOmSotlzXlITazuWCK3xBXY5xuChDBGEGIjGTS0t6K3S2l6WFtyeTYa2rAqT0_BU3OMnNoZndHNO1ql6rTBknJSdrWerSLKKqMQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmRrukcpI3h6PezLMMUoYE8A5_O1p1n0cxhpK3ZcX1ogniTVasABBgXrEaQKZmmV6BZxNBsBtZhRkKJl4vIpcjkYcyDayZgmTA&google_hm=eS1GWHlJb3hsRTJwSGdGMHQyUG4yNXI4SFc1NHV1WjliQn5B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=kadam&google_push=AXcoOmQDJHHlzqr4eH5ZupQ5A7svWZ67X9fEHbwsf9SwO2hQCYAZ9sh6oKH6jmYabyCKENfazFNMv_g7QlZw4fo8ZdbJprpovR1h HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /setuid?entity=101&gdpr=0&code=CAESEDP2bThm3Z2ZMBLJNUoTxTs&google_cver=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=7058645915368902725; anj=dTM7k!M41.D>6NRF']wIg2GVMnpT7Q!]tbPl1M>e)ZlrFUfJ+tGXxo7N8O6<:buev?6a<NS0f6jMVqrz_/!fcx3tA.3If)y3KL9D3I?+sUpwu.
Source: global traffic HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=appnexus&google_hm=NzA1ODY0NTkxNTM2ODkwMjcyNQ%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AQAJG877fWervgJRuHq6AQEBAQEBAQCTVlRxLgEBAJNWVHEu&expiration=1728128470&google_cver=1&is_secure=true&google_gid=CAESEBzuFVvX7Ht-61AXmEGHQ6Q&google_push=AXcoOmSP2oyq_i5tQjau2lDivP3OkqgDjjl5FOJxQ-X2F_KTj7-x4-18dN4dECcg0YTA99153bVKErWmRI9LQC3RokKFc8wlkaHi HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv-UVdHM6EAAABI2AE7Q7AAA; CMPS=512; CMPRO=512
Source: global traffic HTTP traffic detected: GET /f/AGSKWxVXyEvQ8rr_BoQhqFBmSyhHFBY8TVHaXqWthoyB0cqzuBrNmLKKWj9DvZo73bHB3Zg42zHyHtCxZLCLhMD0SVD9dQ8OYiBt_wWfDGQEiJrh-njbg3paxBCGtFSliXExuETImT-9GQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDY3LDI2MTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOSw2XSxudWxsLDIsbnVsbCwiZW4tR0IiLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tLyIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv-UVdHM6EAAABI2AE7Q7AAA; CMPS=512; CMPRO=512
Source: global traffic HTTP traffic detected: GET /r/cms/id/0/ddc/1/pid/18/uid/?gdpr=&gdpr_consent=&google_gid=CAESEE-2hABbNlvCQmyOE9XNGr8&google_cver=1 HTTP/1.1Host: r.turn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=3418088856170706752
Source: global traffic HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /news/i/3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic HTTP traffic detected: GET /pages/assets/picture/tag-light.png HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.haoqq.com/news/i/3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1728042079&plat=3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&pra=5&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aifxl=29_18~30_19&aiixl=29_5~30_6&aslmct=0.7&asamct=0.7&aipecl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042079520&bpp=21&bdt=294&idt=70&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&nras=1&correlator=7979588698718&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=115 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&slotname=5424108534&adk=3166978744&adf=3025194257&pi=t.ma~as.5424108534&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042079&rafmt=1&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042079541&bpp=3&bdt=315&idt=117&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0&nras=1&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=1504&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEebr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=125 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042079&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042079544&bpp=1&bdt=318&idt=137&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280&nras=2&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=141 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pages/assets/fonts/fontawesome-webfont.woff HTTP/1.1Host: www.haoqq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.haoqq.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.haoqq.com/pages/assets/css/plugins.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pages/assets/picture/tag-light.png HTTP/1.1Host: www.haoqq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __gads=ID=2704f8406324721a:T=1728042058:RT=1728042058:S=ALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q; __gpi=UID=00000f23c94b23d1:T=1728042058:RT=1728042058:S=ALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw; __eoi=ID=b4a5e61cc765553a:T=1728042058:RT=1728042058:S=AA-AfjZfklDsV3KI35jmw7Cy6bKg; FCNEC=%5B%5B%22AKsRol_U3bDnE9erNTituJCHuFjf8TEwONusH71s59NUj9wLxp7QAM_YR3jB82G-DzJ1CbxTzE3oXjnJn3kfB7lW1WrOOJjhusV4jojPMOz1isaAcuK94m41vI-pgSCcm0xX0zeq2oD62JXI7YlExy5-qnoMrAzeOw%3D%3D%22%5D%5D
Source: global traffic HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pagead/adview?ai=CF3eTStT_Zr3NPPSUvPIP6_ucmQnLxLaNesry_oSVC2QQASDnwNRtYMkGoAGwuqHXA8gBCagDAcgDywSqBNIBT9DwTZzcreVd7WdKxYcnKcQNLegB1X7jM1Zr-u0QfT-UwlSRamFVdnwIJ2JktFCc1Qh441o2neoo3VdK4OOZOhn9tZSSrHwYnOrmYtlyRhjqeEPvZ0VA-axbUcKlZQ5cedEmjySxqCUpiBtAKW7LOLrMiChjG7QjY4W3P_Z_U4wZDUXD8_tCnFOo4pwi0SnthxUZWuRmEjGY1U_vzMyOUsLaG9PDsq6Fw235HlhwYXO4wqww3buw10Q5D3WpdG63Z6ooJtZVu5tCirxz-g6NwCGCwAT_wMCy-QGIBZatr7kGkgUECAQYAZIFBAgFGASgBi6AB62DrnaoB9m2sQKoB6a-G6gHjs4bqAeT2BuoB_DgG6gH7paxAqgH_p6xAqgHr76xAqgH98KxAtgHAPIHBRC0jMUC0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYxKnRqNL0iAOaCaUBaHR0cHM6Ly93d3cua2F5YWsuY29tL3NlbWkvZ2RudGV4dC9ob3RlbF9nZW5lcmFsL2FueS9lbi5odG1sP2FpZD02Njk0NjM0MzAzOSZ0aWQ9JmxvY3A9Mjg0MCZsb2NpPSZuPWQmZD1jJmZpZD0mY2lkPTQxNzM2NTQ1MTc1MyZwaWQ9d3d3Lmhhb3FxLmNvbSZhY2VpZD0mZ2FkX3NvdXJjZT01gAoByAsB2gwQCgoQkKPHtJrPpJw1EgIBA9gTDIgUBNAVAYAXAbIXHgoaCAASFHB1Yi0xNjczMzk5MTYwNzEwNzE4GAAYAboXAjgBshgJEgKnTxguIgEA0BgB6BgB&sigh=X_XUzysFvXU&cmd=ChdjYS1wdWItMTY3MzM5OTE2MDcxMDcxOBDuAxgB&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8BgB&template_id=494&vis=1&nis=6 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, triggerReferer: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pagead/interaction/?ai=CF9t9S9T_ZpnWAa2dvPIP7626gAyM7O2yerX2tr76ErCQHxABIOfA1G1gyQagAZu5y5wDyAEJqAMByAPLBKoE0QFP0Muz49MN5LepIXnNX2sWNLxMALjBFfUbB0OZ2Y0CJtCvkfyDGTTHkvgwdHFxHOZPYjHlSnAkfjxVHg7khwWwbSF-mOD2pnLEQM0aRU-cye1QN1svxQfKt4w1qmK1C6_lgsJpSig58jbAj5r_X7Xa2RcNQkg64BuGTdiTL6Ze5Zc8uCeSGxuJNBBw3Mos-MSRXrVt2jk195dptrpa4u92Fh3hUsQdGfv1pzrs8tjVhcOhyHP7idLok4gVELaBFlQ0MBGNjxisfmlICQGD-VcfacAE78rGuP0EiAX82IfGBaAGLoAHzca0Y6gH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WInB06jS9IgDsQmZiQGFumlbPoAKAZgLAcgLAYAMAdoMFQoKENDV7YDq6Ze8ORICAQNAAUoBJKoNAlVTyA0B2BMD0BUB-BYBgBcBshcCGAG6FwI4AbIYCRICk04YLiIBANAYAQ&sigh=u-MddZClIwg&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4E&label=window_focus&gqid=StT_ZrmHOoyI1PIPyfqEgQk&qqid=CNmn16jS9IgDFa0OTwgd75YOwA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055445&bpp=1&bdt=9109&idt=1853&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C1200x280&nras=2&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1856Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pagead/interaction/?ai=CW9SqT9T_ZuXJErmPvPIPmYyg6Qe8lYK7erW-qerjEr__uePXAhABIOfA1G1gyQagAcjHtfICyAEJqAMByAObBKoE9QFP0LdA_QtCVxOC6UdH1mV_RjR01OPBl6YIph7NQYCRLj6m1RRHTEN_IsaYLCeCkeipgYxf_DYYCKwmrnn20t63B6etYUanxrvkfUwUGpGuCDCEcwIkbcTcMYP1GgsHZ_gXC4wkPbVi4EU8TRb_cDMWTxwJ-hCsTvrI92ByxwLQqQsd-gqbWJF6_onNQ0jaAUmw26prJ99x14CcDtosYlge6ozapmLCQkpDWen9-WOPDZ8L5u-4YbJzElVx2vIKrz4l0Eb2ZKyCGWrJ4zOEvbVo5NasVQVNm_jNUkTpg4nacMYeIWk_JAegu4fGCJLzaRfUgAmvxcAEiMWN0LcE4AQDiAWy6fyESZAGAaAGTIAHoLjKjQGoB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQKoB_jCsQKoB_vCsQLYBwDSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOlim_Neq0vSIA4AKAZgLAcgLAYAMAaoNAlVTsBP-08cX0BMA2BMK2BQB0BUB-BYBgBcBshcCGALoFwSyGAkSAuVZGEwiAQA&sigh=v-kmi5WLZvs&cid=CAQSOwDpaXnfmOv4SBG4QY_5UnCklWXEdYWC3Np8BnW-7nO9_2RuSzEtrFw_9hE3gto6oqNw6mYSrKEf-Ile&label=window_focus&gqid=T9T_ZtuDDbPmx_APnKXP2Qw&qqid=CKWt3KrS9IgDFbkHTwgdGQYofQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=3371909064&adf=397776184&pi=t.aa~a.1089127196~rp.4&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042061&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059378&bpp=2&bdt=13043&idt=2&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280&nras=5&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3625&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS
Source: global traffic HTTP traffic detected: GET /pagead/interaction/?ai=CFkeFStT_Zr3NPPSUvPIP6_ucmQnLxLaNesry_oSVC2QQASDnwNRtYMkGoAGwuqHXA8gBCagDAcgDywSqBNUBT9DwTZzcreVd7WdKxYcnKcQNLegB1X7jM1Zr-u0QfT-UwlSRamFVdnwIJ2JktFCc1Qh441o2neoo3VdK4OOZOhn9tZSSrHwYnOrmYtlyRhjqeEPvZ0VA-axbUcKlZQ5cedEmjySxqCUpiBtAKW7LOLrMiChjG7QjY4W3P_Z_U4wZDUXD8_tCnFOo4pwi0SnthxUZWuRmEjGY1U_vzMyOUsLaG9PDsq6Fw235HhpyQOF0dBgRUA_vJbQhzq2FXmQzboQwlji9o1qQIp9f4sAebAAPTei8wAT_wMCy-QGIBZatr7kGoAYugAetg652qAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WMSp0ajS9IgDsQnoOb0IcHAWJ4AKAZgLAcgLAYAMAdoMEAoKEJCjx7Saz6ScNRICAQOqDQJVU8gNAdgTDIgUBNAVAfgWAYAXAbIXAhgBuhcCOAGyGAkSAqdPGC4iAQDQGAHoGAE&sigh=E8pEeiVYDmU&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8A&label=window_focus&gqid=StT_ZpzqN_fox_APxrqS4QI&qqid=CL2a1ajS9IgDFXQKTwgd6z0nkw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=731747807&adf=1645902383&pi=t.aa~a.3940796168~rp.4&w=1140&abgtt=6&fwrn=1&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1140x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&fwrattr=false&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280&nras=3&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=62&ady=1189&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=1342 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=4075358053&adf=2063629977&pi=t.aa~a.2231736124~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1140x90&nras=4&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1605&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=1354 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /f/AGSKWxVifTah-veLB2rSHOQe0IKZPYwlRiX35dRmH46TWedosDWvfXDDZ-bvXXGc0yGV8rU0PvB-mhhXDlDQU9jXsfzgZs8za28qE3AojEGnKd6WmIUV8mLyW141ijTuqwB6WzDwmtk2Ig==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQkr0JJgssmDkJ2FOoy1zXJuHY33xopr66TxI5_P2ixGa7v499Hr6UyVMO5I4JSxPUYk6JfT43GcQTJqX13u3S6Ks_78A HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaSTJhR1OewMZkk8y1BcO3CQvZVbfqSnCW9083mQ4nofBlUtk-Ozne0ZnJ-3ALD6ENYc8MiLZzQWyNz_zigWQ_sTmwCZiA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /dcm/dcmads.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /xbbe/pixel?d=CPfHxOMEEM2_2-oEGNKikZsCMAE&v=APEucNXhnXjF2sJ9tyF-VUC9xWNRJ5NC-o5pBxJKQb83I3CuqwyAcmRD3qKflRXX69i79_9PlTMDWa044gbi9Vl0jovCTNPXMg HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /google_pixel?google_gid=CAESEGEiavs7xorMj9f6JVwxzhA&google_cver=1&google_push=AXcoOmSulyuPz4s2VMwaw06B9jFvCD3Ea4zvFVN_jiFcqjgfjyvBrnsuuio5aJjQ9PpNZwTI7nE9QdVgHFylTAP5InkPiSOlbvVM-5Q HTTP/1.1Host: ads.travelaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmQCvToyhvfM6gk2vMYoxrJQZorSrtw93am8KOb5SbI2bnCwv6k0SKPOy8pZBCOmRCfwi8Bd0Z54Ptt6QOOx0dSi30UFYLO6Zm11 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /adx/user/cookie_syn?pubid=Z29vZ2xlYWR4&google_gid=CAESEMubsfg7aw9eHiY9QDqBVSA&google_cver=1&google_push=AXcoOmQ0Ne2aCV1Mlh6kz-lVa1oTUCTyGJj1orcPFFdDIkOjVJMxBKSk4nE9PC0fD6n4emS4V77hLq_syWMU1Wh8rW2O_2_MW0DbPM7t HTTP/1.1Host: gw-iad-bid.ymmobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pagead/interaction/?ai=CFkeFStT_Zr3NPPSUvPIP6_ucmQnLxLaNesry_oSVC2QQASDnwNRtYMkGoAGwuqHXA8gBCagDAcgDywSqBNUBT9DwTZzcreVd7WdKxYcnKcQNLegB1X7jM1Zr-u0QfT-UwlSRamFVdnwIJ2JktFCc1Qh441o2neoo3VdK4OOZOhn9tZSSrHwYnOrmYtlyRhjqeEPvZ0VA-axbUcKlZQ5cedEmjySxqCUpiBtAKW7LOLrMiChjG7QjY4W3P_Z_U4wZDUXD8_tCnFOo4pwi0SnthxUZWuRmEjGY1U_vzMyOUsLaG9PDsq6Fw235HhpyQOF0dBgRUA_vJbQhzq2FXmQzboQwlji9o1qQIp9f4sAebAAPTei8wAT_wMCy-QGIBZatr7kGoAYugAetg652qAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WMSp0ajS9IgDsQnoOb0IcHAWJ4AKAZgLAcgLAYAMAdoMEAoKEJCjx7Saz6ScNRICAQOqDQJVU8gNAdgTDIgUBNAVAfgWAYAXAbIXAhgBuhcCOAGyGAkSAqdPGC4iAQDQGAHoGAE&sigh=E8pEeiVYDmU&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8A&label=window_focus&gqid=StT_ZpzqN_fox_APxrqS4QI&qqid=CL2a1ajS9IgDFXQKTwgd6z0nkw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmSMzdJch9f5yspzBreHk7MkJGMkYmQ7l_CBrHUxRVaoffKY4RNI2u5YLrO2puwm_HkGYBZSRSnlykknHeXLElmJuD0t50Kx0HxNIQ HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pagead/interaction/?ai=CF9t9S9T_ZpnWAa2dvPIP7626gAyM7O2yerX2tr76ErCQHxABIOfA1G1gyQagAZu5y5wDyAEJqAMByAPLBKoE0QFP0Muz49MN5LepIXnNX2sWNLxMALjBFfUbB0OZ2Y0CJtCvkfyDGTTHkvgwdHFxHOZPYjHlSnAkfjxVHg7khwWwbSF-mOD2pnLEQM0aRU-cye1QN1svxQfKt4w1qmK1C6_lgsJpSig58jbAj5r_X7Xa2RcNQkg64BuGTdiTL6Ze5Zc8uCeSGxuJNBBw3Mos-MSRXrVt2jk195dptrpa4u92Fh3hUsQdGfv1pzrs8tjVhcOhyHP7idLok4gVELaBFlQ0MBGNjxisfmlICQGD-VcfacAE78rGuP0EiAX82IfGBaAGLoAHzca0Y6gH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WInB06jS9IgDsQmZiQGFumlbPoAKAZgLAcgLAYAMAdoMFQoKENDV7YDq6Ze8ORICAQNAAUoBJKoNAlVTyA0B2BMD0BUB-BYBgBcBshcCGAG6FwI4AbIYCRICk04YLiIBANAYAQ&sigh=u-MddZClIwg&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4E&label=window_focus&gqid=StT_ZrmHOoyI1PIPyfqEgQk&qqid=CNmn16jS9IgDFa0OTwgd75YOwA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel/attr?d=AHNF13JAzld3HP190wTQExCS7Y2g6rh8D1rl-YR7ypoQ1a9rkeuR9OA_f3v9hRwF-8cpc2HhTmCGUt4 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pagead/interaction/?ai=CW9SqT9T_ZuXJErmPvPIPmYyg6Qe8lYK7erW-qerjEr__uePXAhABIOfA1G1gyQagAcjHtfICyAEJqAMByAObBKoE9QFP0LdA_QtCVxOC6UdH1mV_RjR01OPBl6YIph7NQYCRLj6m1RRHTEN_IsaYLCeCkeipgYxf_DYYCKwmrnn20t63B6etYUanxrvkfUwUGpGuCDCEcwIkbcTcMYP1GgsHZ_gXC4wkPbVi4EU8TRb_cDMWTxwJ-hCsTvrI92ByxwLQqQsd-gqbWJF6_onNQ0jaAUmw26prJ99x14CcDtosYlge6ozapmLCQkpDWen9-WOPDZ8L5u-4YbJzElVx2vIKrz4l0Eb2ZKyCGWrJ4zOEvbVo5NasVQVNm_jNUkTpg4nacMYeIWk_JAegu4fGCJLzaRfUgAmvxcAEiMWN0LcE4AQDiAWy6fyESZAGAaAGTIAHoLjKjQGoB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQKoB_jCsQKoB_vCsQLYBwDSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOlim_Neq0vSIA4AKAZgLAcgLAYAMAaoNAlVTsBP-08cX0BMA2BMK2BQB0BUB-BYBgBcBshcCGALoFwSyGAkSAuVZGEwiAQA&sigh=v-kmi5WLZvs&cid=CAQSOwDpaXnfmOv4SBG4QY_5UnCklWXEdYWC3Np8BnW-7nO9_2RuSzEtrFw_9hE3gto6oqNw6mYSrKEf-Ile&label=window_focus&gqid=T9T_ZtuDDbPmx_APnKXP2Qw&qqid=CKWt3KrS9IgDFbkHTwgdGQYofQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /f/AGSKWxVkOjNjJJKLKXvuqNrKTy8XeDRyBbVLvvzydWOUHoM4r_wYL4b4XxqUaWzbfgIYs1sXg3V8ofBDzWlbP2zmN-y2YZTKZlcdB_g-1OSRGY73RPSCizozY6nsIrD183r4qJf9tO5CMQ==?fccs=W1siQUtzUm9sX1UzYkRuRTllck5UaXR1SkNIdUZqZjhURXdPTnVzSDcxczU5TlVqOXdMeHA3UUFNX1lSM2pCODJHLUR6SjFDYnhUekUzb1hqbkpuM2tmQjdsVzFXck9PSmpodXNWNGpvalBNT3oxaXNhQWN1Szk0bTQxdkktcGdTQ2NtMHhYMHplcTJvRDYySlhJN1lsRXh5NS1xbm9NckF6ZU93PT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MjgwNDIwODQsNzIyMDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbNyw5XSxudWxsLDIsbnVsbCwiZW4tR0IiXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tL25ld3MvaS8zQjlDODNFMC01OUJBLTZFQ0ItREY3MS02N0M2NTg1QjBFMjguaHRtbCIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /f/AGSKWxVifTah-veLB2rSHOQe0IKZPYwlRiX35dRmH46TWedosDWvfXDDZ-bvXXGc0yGV8rU0PvB-mhhXDlDQU9jXsfzgZs8za28qE3AojEGnKd6WmIUV8mLyW141ijTuqwB6WzDwmtk2Ig==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /gp_match?google_gid=CAESEFi9PqLuqTCfmE2lDk5eZnw&google_cver=1&google_push=AXcoOmShV-Jtc0RSd1rbHkgI_Eyj-B0DmnvvLixLb2rNvHzkMf38HLb3pMjATPv7RlVFZyU8Y1Mcjw32FWGNm0ehaP1l1kshMV69yV9W HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmRbtMccDxJg2BjT3wnvT1aepLpjWQ_QuS-yRl_uN-efUYE_YqPR6ef0-7Yh5T8BxoQ4rpvAjuN3vlHpI_ROEJWbBvpxn8ySqG3c HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /google_pixel?google_gid=CAESEGEiavs7xorMj9f6JVwxzhA&google_cver=1&google_push=AXcoOmTyFCDwwx6UNnlLcmSN88RNjshcmNS5SmS2VOGMiQ0qsij0fWvXW6TkZOtmWF9T9iQmuHoMbQj8LlPgnZacn2DENsWg7qpOZYs HTTP/1.1Host: ads.travelaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _tracker=%7B%22UUID%22%3A%22B84BC440-1A69-41D3-077A-EED82B6DB51D%22%7D
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=teadstv_dbm&google_cm&google_dbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /track/cmb/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmQCvToyhvfM6gk2vMYoxrJQZorSrtw93am8KOb5SbI2bnCwv6k0SKPOy8pZBCOmRCfwi8Bd0Z54Ptt6QOOx0dSi30UFYLO6Zm11 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=e335e2e1-b80f-4249-b64b-19f1016b75ba; TDCPM=CAEYBSgCMgsI-qmH3oadsj0QBTgB
Source: global traffic HTTP traffic detected: GET /v1/api/sync/AdxPixel?google_gid=CAESEAmTNgM_-pcFL5ffd_dk1kc&google_cver=1&google_push=AXcoOmTV2KSAc1N-m2G0xNU9LFPb6GLXMBggU8DeWZNW3cTP-vpAbscLRbseese_6eze5rzy_lCdZGSYwuDmUn2pmEk6Mpac1tSMy6k HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmQqDjvbOg9mh9Ke-eHDgTeGGYCzmctbUZo85ZhML4SeTOLGHbGXAx5LKbO3n6hKn0Nm2gEy5TVP3y-GOpx_XkUXiy4RoIvYa_o HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=e335e2e1-b80f-4249-b64b-19f1016b75ba; TDCPM=CAEYBSgCMgsI-qmH3oadsj0QBTgB
Source: global traffic HTTP traffic detected: GET /adx/user/cookie_syn?pubid=Z29vZ2xlYWR4&google_gid=CAESEMubsfg7aw9eHiY9QDqBVSA&google_cver=1&google_push=AXcoOmTIr8seDQb_z6tw0YfTB36eULzlKSYmdeIO-RpgGl--1XRNf-DwqS-nBR9_-efeOV0xQL6nfUgai4DG0LXt7AK1rclHwHo31WXT HTTP/1.1Host: gw-iad-bid.ymmobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pcs/view?xai=AKAOjsvxYDsb__THUaY0R_4hEJClqTq60nsvnmUsuOvXD9kOk5IONGUjuMUywcV68vM4JfFFmhDfqQjgYGYy9qXp0lqbiDjviQGHzn9DydUL0BLMh061MKtRuQpvktto14K7ShTxrR3v1cwsbFi1AVSPCfvpGbdUVUkHKLuVvrloI2UxoOver-GnBpXgTvkNqRXXVOoBo0WE48_5KH18AIPRSHbAXOjb6NuVsGd4KVVDJJ2skKKpLubqXna2puUz47ca6zHerZzabTjmUgTa1rtyR7qjbQD7-Eeuii8SVp7W-MRsFUW8Zl_4IcF_QlJMPeh_MIvWEsZaprLhHnpTO2csXiP_W2zQR2wY_LwWepKdoHSyItVcowtLN-0896TATHux5z_C6DJacdT6gASN0yA8BUfIKZT-L0Pd5aDI8DV_ePzinLtws5F_OIhKxz8PZr4s5EgA3ksBnn38wNOnDzY-rcPr2rmJB5n7WLTB9yBfCwP4JM_Y65RsIw1gFj6TEfytjO3qFw8egQX0c1khOZz64rn31kfsQDSUJjdgGFQEfMehRMvmjhQnZiQQ92fbwYP-YBhT365muwcPr8KzB9n-_4gHUyCBG4vQHu4cGOipcB6o7favllQr12hcBzJlRxtg-iIiBc0jEUeNPFzfpGbNdTnuFoDq0eOPoosAWuD0LjeJ_TFQDsTqxShBEVeOpqqVGnUVfVVOh0KgY9315o7HIxUGx2UAwyvRtySE8jSmq5cAFrlte2ES5zErW2t1AgeQC2BS4zspuAxp43AkLKSheTNcgIA04JQzA94pYp481jWtr4-0GfokeRjuZbU5fFb49SG0HnM-wYDvr6DwadnOwuJP1ZSB5IbCuHFoAlD62alklOiy0g-jakLku9qP1bmH739Qn8IBGL71mBi1Ej3SYyAJjcBRn3vm2QHzdP4mGX-nGJISEPADY3v7NlNIPYeYXVOm5MUAdhkb00u-FIfFVeKz0XxbjRrAsEqDC06YRq7UTB96mqI3fc09KDVVigNkHJFOu4oRoErRcpBDenZlsWv_VCR4qTGBRq4oIq3idJoF3r2d6VzXrMPJP3R6FP3W3Ew1hte9eCuyWBRxv1ERwU3FDlirEhByh7AuBIAhbA9KMnaNrOmG4mWeLjYHhzv0IMx32QQPG7PeAHxfaqukeq9VgrCEyUp98BBbOFZAa8ZRvSQpO_rM3d1yl-SZA5cgRNYp28i0RYHgztcjjbehTEXsj_cs-9OSBsxd8xnYGnJQZUozk7Ydl3kjaSrdqvtidfyWYWyLEP9Kp1QEEsBGFqRzqzci7H-VGLxQJ7NpEwTrrQphT2OGwMiEw4HiHPE8rRnr0vOyz09HoIVwoUHMlc6hy2dn6g4y4mW9DshDds6evQ5re_ow1LUk-dxcQA&sai=AMfl-YTZxJ2Gyk7hXc2lVbJspSVACpbIcM50ZEG5oMSFhSivhYpOLlmzR-uy5NuYfU4MeGPzF7yMPB0j28uBTnlOvPs9z90FXKtU8WQ2zwNtwICIebA49c5qNgvEhlkinfK68tIE_hHOGRHXdSQW7wY8r2P-WWIuDA-KnJj76BsfUd4pODrx3EXBN-bgO_36K0CX8PNcH4g6ynlm0v2vpVpK3Vk_Ciy3SplHRi8KQrQRo-K4UK2GDBsq6EJJ3SyqhhCEL775xS-zCaEUfFmNsM2LzLmYce1rmLpSTwN1c43aE4zKg_HIsSNqKcAx-6scL-xh036ylBYb0-km77qnXgajBhEOBDsNMznDso9-bu23P3jT4FTGmGN0F7kGLKp4NP_E58WBMGFmduqgKRl7EZ5uCjf85XPOPs6XKsh2&sig=Cg0ArKJSzIvdSSM8R1wLEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4&cbvp=2&dett=2&cstd=1&cisv=r20241001.86318&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, not-triggerReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /google_pixel?google_gid=CAESEGEiavs7xorMj9f6JVwxzhA&google_cver=1&google_push=AXcoOmS_qwRyX3whO3xQLvSc2JgBrDnO1X6pF86whMgAw7VSZjEYKco6wzHdQ5JwZcDLi1z2zEFLH-9drso1Sc7wUKmGo6svitaLdac HTTP/1.1Host: ads.travelaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _tracker=%7B%22UUID%22%3A%22B84BC440-1A69-41D3-077A-EED82B6DB51D%22%7D
Source: global traffic HTTP traffic detected: GET /xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNWY-6eV-PamxnzS1IYVwACNrpTeCLFv0-YchtE3vR9t2wema9vG5z1iKaHit8wKiP_Fm7slvYlC4NPq7_TYrYF4LywVeWXrrF864smd7v7SXzepVaA HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=4075358053&adf=2063629977&pi=t.aa~a.2231736124~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1140x90&nras=4&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1605&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=1354Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmSulyuPz4s2VMwaw06B9jFvCD3Ea4zvFVN_jiFcqjgfjyvBrnsuuio5aJjQ9PpNZwTI7nE9QdVgHFylTAP5InkPiSOlbvVM-5Q HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNW0uDA7eulVQo62CO4fVaRDsljOIJWFDirYM-cKSquXh-s5PzT4pRuWgb8AH5Qo-aVZYddkP-uvlT149X22qRIcfZDD1bWCJ37Y7L4SNA_rQgcdA-U HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=731747807&adf=1645902383&pi=t.aa~a.3940796168~rp.4&w=1140&abgtt=6&fwrn=1&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1140x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&fwrattr=false&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280&nras=3&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=62&ady=1189&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=1342Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pcs/view?xai=AKAOjssczs0X-KB6qYP2KlivIqRJ99DIQD1UwVoZBOQNyJSMchHZUm_LOkMvlEHlRAmsBrk4MPryuOx_x2GbHD2CoVZp5GKZDonXWYm3MoumJZlTzzJZYohLFLUV8nh9uJATzOfH9kc-uRMjzLf5WqB3mexrRpd0QSPgLU9fgZ21vsoWRYG4pegpnLPHaYnD6M5cE4Vc13QMOq4SVWXJS15lUH2Sa3sAIs7dZ7eNS96hHVLPoiTLGLyMeMwg2yc8co__iXwlCz77ocS_v3e2EZ7FYrQqZTOrZRUhHVbCxOm371lrOVR1A0xiX9heWbeypHLLTJOJmXJbcsFT_GFafBzi1rwkV7Z3qHceQh9BDMWYne68NHJ-bhEN-2Zn-NkBsfYC-TtALOEfWVQe-x0DIRw1CPuRtOoVFO9qxsVC5fr0OhLMrh2yjzQ4Zcp6eOk9r3W7o_vX7pQax5cDy4nj2Mt_32saH3c4s9Lz14k6_bqvI_knfE_rBQ-ORDazhFho5It82kMCwmx4xGvgSpT9fespgqObJhhDO7pXcdeAOJnXX-_y8sbH3Gcv0yZEsoGsdcgozYCEp8ayp86y2fLBuUjsfvgqygMYJqdXaHRmoQpUEeWrzeY4myyDoBdI-dBb8K2FhclGqEMCcTGe-lImKrxna6lcmVDXdRpGIBReN6AgsN5wmrC7Z8ouHm-iK3m-u08UXsCWHhysG09iPtX7NwhCWFj7AzO4M1BHGa58ReaBJ_PSZiGdgMeVTTIGVo5l8cF3JJXaOy0QnDT-wPNqdvZAvMyeYpGknIM4nys0dfl1LJwiuvaFLc-vgkIzNyLOpx-Z8Ew_F6q65gb8ywcVlogTQj95gPFjPg-ILTcc7AfdaOzvSrVZnNJw5_iMSaeqSfeJFuIJ9qKygeb1PxEBskwkcNDFyWw3gRV8_YlK6pkz2mCpkGuhM0DEIogpAL71sxeWdNVYksNkBoGlBXLtq99W2wheuWlArL6hjOy6NMXD7CiH66H6qAEH_b8SU18jyCawVQsyhQHgQtaJFTVa1NaZCgm6bzhtj0Cw_iadx7Pzp8RK6KCw7LZWGqjBo5XkK6BTEZFS5rj7M5qU26z47A3fZmLMW25TMAM7lF1xqmQwXvDV-O7oBV_id1QMLdrkw6tiW4uCAEHvhJP0PbA0oz2P9RgTEBoBLWJ14cD3vfrGawg6BRqAhNfG6RxAYdD0FE_aX_vBnSr8XltGF1fLvJrHJy26n3hCqyGiBSE-3CcTvEebZ5tkNr15PQPY56NmbLXQhL5KMFKOzbRHRM-O2A0MX4iJR0kcsNswlav8NPIKL6VOY8pdk4N5Gt7UYqY46GBh59iFvr1-Mj5iHr22EyPQqgaS4Mdb4EvR5IidBDlnjTJkkYdNgZo2jXb2olGXPQ&sai=AMfl-YQuGsdX2J4rx848wRgIc57LJSFq768n9kCajIqaG7jX8XTfUvgkjIG5TqrWvzPJ2RaBrCZ0T5fvOOklbFDdPwtIfdE44pkdsmSUH8sGVS6bfVIpbst11pDEHAskJYkYRlqDusUOSZ6Tknjl7ZyjcPk8RApyj9X9usScvoBMdAKOY8PAzzAuYEisVcqiUVSyyZp5cZIQyXA1IAylAamCAeMib3P2mwXh118Ht9_YzIEdMqn48cvsGtAWzeNm3ByGyJFNrEGum7FrG3XFcnjxuOMse0M6fJyl7wG5QU4Wy9nvJO5fl2IlJXvU8XWzXdl3LnrFG76-0CPfBZXmG5CdWD6JkiVYKfzaqCHhu5AvYbZa7121CgcaJe_FDGQAAU3OeC0v1hFClTRQVR03hJmw6Fr66r7CZ7C4U09t&sig=Cg0ArKJSzFCam7cFjlUvEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=2&dett=2&cstd=0&cisv=r20241001.37687&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source=triggerReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmSMzdJch9f5yspzBreHk7MkJGMkYmQ7l_CBrHUxRVaoffKY4RNI2u5YLrO2puwm_HkGYBZSRSnlykknHeXLElmJuD0t50Kx0HxNIQ&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=1D6xnsGMXasXsu6Ji6uj_1728042086362; ts=1728042086
Source: global traffic HTTP traffic detected: GET /ul_cb/sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=286fbcaf-c685-43ee-8bde-74ddd673711e; c=1728042086; tuuid_lu=1728042086
Source: global traffic HTTP traffic detected: GET /api/adx/cm/pixel?google_gid=CAESEPv97O-fbD076H-t7qpclug&google_cver=1&google_push=AXcoOmTs1_ll0D_RCewYKHbjcou2C-D9XigwEMKV_u-aZD-O41ML3SE9fdZH5w_1zibbiRxTdKUAFgAe8aWsnlS_ljhlXIAw66tm7YJT HTTP/1.1Host: www.temu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /api/adx/cm/pixel?google_gid=CAESEPv97O-fbD076H-t7qpclug&google_cver=1&google_push=AXcoOmSG2y2CKSsJHjNe49B23UO6-5g3bFSL2LYXX_GQWIMBaewczfO2x8EyvksJW-qUf0IyZLinmX_ctJGlnpQh0UG90kQ-Di98fpQn HTTP/1.1Host: www.temu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel/attr?d=AHNF13IUKnPygisc1SVSIAl_6VxOJ9jS4uztRUM4KTV9FLgRkGCpljYd8R2BKcK-9j-nq2UoEmmmCQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmRCSlMPxwQTtRY0srsvhVQKth5iLYF47d3btKbG_d_3IsMyUKNQADdrnqdCg6DLNPZUT840YBHlR4IVAe5fcGcCAepXLko1F3A HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=286fbcaf-c685-43ee-8bde-74ddd673711e; c=1728042086; tuuid_lu=1728042086
Source: global traffic HTTP traffic detected: GET /gp_match?google_gid=CAESEFi9PqLuqTCfmE2lDk5eZnw&google_cver=1&google_push=AXcoOmRuShbATQDatQq4sJWhdwSrBaGF1h8JWd189LN0U19evDjkxqz6PEo6NN4Cmk1GaEawPQp5AY2xig2e6DaJALkaVLbrCocgGg HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /gp_match?google_gid=CAESEFi9PqLuqTCfmE2lDk5eZnw&google_cver=1&google_push=AXcoOmQnNLICDQEa3vo6G_jaTp0NK-2q-MGnmoNPYU3Aa2sIj7Rxn0cU26cd4a8b_IFvGN63TwpI48Ce2Jhn1M-z_WPNWRTnZv5PfbI HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmRy4LztOfvutfEIQqeamY70sMjqOCzGEp04PRMa584VqdOYtMt116yfAa_MYRTxcDQqTgSXjjxfVMmSapNlh1rX65TKi5Q-N1I HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=e335e2e1-b80f-4249-b64b-19f1016b75ba; TDCPM=CAEYBSgCMgsI-qmH3oadsj0QBTgB
Source: global traffic HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaS8gCQFP0o1eus7-AihtczXrA7yuF7mCvHGueJU_LMl5dYEN5zMJwL72QmFQlpXYbgd_zSsqmxxKea2m55Wivzm6oo8YA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel/attr?d=AHNF13L4GvAS5ilSZs0f2MWid2THf2dPYje2EVLYnqkR4AkOHvwpPTTV0XE7TKY0O6A6Ow6XfaFA6NI HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmT4o063xBBQDu0z4njujpW3iMXyySg6RrAn0VBLP2vry8QG1govK7gCAyoaJNfaM1IIP-17W1aBlEfY617IxoiLn9u3SbkN4a0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQY3seh0MpD2DAPZGWcGa0eyeMaZjmKJbAzbZ4sjiZYrM2JP-bBS2iYVMfW3q26Xl_E5QUiCXpV3673kLeQEChXLoCWfg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=D463160B91F546D383A1AF8385A1B33A&google_push=AXcoOmShV-Jtc0RSd1rbHkgI_Eyj-B0DmnvvLixLb2rNvHzkMf38HLb3pMjATPv7RlVFZyU8Y1Mcjw32FWGNm0ehaP1l1kshMV69yV9W HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmRbtMccDxJg2BjT3wnvT1aepLpjWQ_QuS-yRl_uN-efUYE_YqPR6ef0-7Yh5T8BxoQ4rpvAjuN3vlHpI_ROEJWbBvpxn8ySqG3c&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic HTTP traffic detected: GET /dbm/ad?dbm_c=AKAmf-BmwgLlXvLBDhkYHic6fuX49VdJ25tE_0myFee4RzIpazsSanc2sDjik01ZLPn36OhmSEWoGfGPz5SXZjf1xOgwqRv4oSvkenGiaEs91mTI-JWahTZGmKo_5Nu3puY7PuQQfNWMus2BDvFwBJs_XsqYHj3OkKx8mqSukz_RaZMUZM3fKt9xy2PP_tIheV93WR_VSb5wAOnhQbaycBDCbSlTgOR-esdxTnOh5-5Xx3mbVhao-kg&cry=1&dbm_d=AKAmf-Ctkfiisw4sUKcjWsLWg6bu1FonrD_Mrehk92SJHpzkPzXReqaMsEEEjWicDM03Zn_2Wf9BGLrKSJASO3hhy6pt7YFa5IQULRtat2VuW0hhBPMqk5NcbqW9y5kQCNZrDbSDVSB7OB35RuZUMf6LC3qM9xmJTV8Fuq_TEdx-19AENel1TSyxkg1glhQBMV89eX202AQar3P63zQt2Km56Zb24BgJSNEgKIQJnBNlQWCl1xtQTM0LWhgK0Ljkcjykqj-7P0UZ5tQPPeyh8ZfEY-QZQrpXAsljhHHemCDsvKSyVJLTj1LhSr8kBGfsE4uqWGL8T5eMjmL_ISvFHy0iuhuHON-8q9qBDvu3RxwngqWA_THWQN8Mx2SWx42vTnBAQKX1OSIRSC4rSycMXmkmEQGcd8rU_HWFGsBtaTzG__G8vDFhVOR1auBW31T7Ozkexq2V83hBFUf06JksnSITmSPWt9EIs_aPFXwvkirKukZw3B8s57wqYYSbvxlV3m6z7Venw8J2MbYCwoySSQihoQ2TG11k8WADxGUcWVpZHRD0ig78UvZmEGbREYz_CEimdL8OafEikmJprO1FD6Wq8FNAe8-7sIw7PFyZrGallNX2gPNqvGWAnowVOQ1-j-c17-X2yPX2ZMQDXdueKDbcXd309WBwLZxX6oBI28u0i6o9_2Q0Z7NqdNfuiSuMHeQGmxSCcEff21Y6J4mhbpqJvGvJaZkiH8OgNOlORjasj2yIwDZban8I1l5IKFrhJt98OI-L3Qh2R9m4deu7r8pXMX_-D9izQV4dxQoXCH4V27SOz9wPcL0AbtcFHBjZff9wP4DHbFj4mw3EyGYfVbU7sWSNjjl7hAAYbfplbOrbWg1tsYHn2hwwcGLK4rndm3KY6Qms2M7cw7gpgBjgxezy2sAddP_snFQ629jqygLOSyivKCOBbHeyRHQSzaOa8TnO0_kA5AV0ESmnsyEws9RVfa254xEVF-TcE0LwXX0qu-Z82PsDjf25-g5zv28ond5nJPq7kDGYXkz4MRwvayh7lxezcH0IejNdSlyZ-oT6qUOJNf1Fk8xMySZj5UkaK9t9mUMxQ3Hxsj7TvKnwd7ykJJddAe_4Fgj2woslc0QYe2nE0tzjl6XdT5yENmmWFMmcFYm0OK-9S8i1ow6VIsQGmV0d5LhnldQHAcU_9w4GnEHUpProslXx3NRAKfoXvUGKngThQq6fVKaL8Z9JhROzbgvVmAxMkl9wAVxG0GEhY4rwJpSpVcWsUwg3-G21g_PYWJow8EjqK9hAxKWOz6x8UaT4CU4Ugri6XtfwMNucL8LVegMkgq3ALOMyjXWi6qboviCPqk9kd1YXXoVrkqXxAs8woRGQvPh7vUJCzEewQpOrxpJkJ0UFPmRwZXRLMZFA94AK44MMI07cRedaSZkNyFQYEuLcdMjlE70u0TLaXltuQezYRMdiN5MH2bsnoIvq7fDQJuL-xr2jkFO2z2TxKGGW8uQ_9Hu12z_S9COMJNFhHryNaDEdM1iJq_QcI5MMuCkFz9zR6a3fzeHYQiciDvIIbE74OEmXzhWs1655tp3WNlvSMcK22PTQKzGuvuJk9C4HrFhqAljUWZ_jL-nCVJrIaRcdPiGXUfHz-qTXS2AU5iy12p_gCQFM_CziKOVmLaOpfmITGNA5efmPeZWhNW7cwoAr3Umh9cIO4Lmu5gWr0p8oWVoHZWy0c52wi1bswa_6u8b5WNxPdmcT1dfh72KZa5BCul-VAsbJ74W8AgthMMi5stZ5UflEiMQmaDyIudTocqKSo0IOROF7EWvCk7j1_-mbnQI6iQASrJVpK_O0pozZbo93wvmGkONMI1nQKq0ZvJm30RqG33RJSkrr60yAi4dJSaEZKVDH4EusvWooFzh8cZ44nglsQ3RM8c65_LhzWfPz8EFDk3HhdDl5pITxQ0COSXhIqus6M47GVEFE728ePpylgqL5875kTp8-hW_ut7w603H1wgmcPssvagFWWzLlQS-5EFBuwA7cjknL5hqTvvv6tybAIBGyilaWWoNQ-jWep6IlmhDBpK1yorJ38Ndo7iqQjWcoEvX7kjsMHbvYXpbbgmCOB5ld-4TMM5sG8D_BYp0rZLboADKUrWqIKmaBAG7ZcjEm-i_x7ANSYxUsaun4ULE0Ize7kyxEyqj6kZtfGEEbzTZjSz8HBaFuSWPFDHjK6Yjn5RlYeClgeoH6JCshr7DXo_5AQYEWZ-0MGwMvT8wpb3-GUMFLlO3u-eqHkxxYFOl67Wov67q1mwBMyg6b27Nu1qvYAcGPdaBqb6-n-5izwo0epC86uIYqsQEC7mO13ZfGcYubuzOSlyBP-Frbn-xyCvDmD0lBp_5tOhmsPUzM-zP81fpm3xwhLIqFYvY3mKxhba7Jzuym3ZMwe6J1thCHSAcguRTgRZ0qJzRT1VVmr_rdx5EI1ijv8HJbZcH1DUg6F1cX723wW0x71rCr0dOaz0nxaL2h4EOJePq0jI84dT4F1lKFCP-pQ9fzu9mstlvt8ewg_Oh6pXSuGZHmQVKo8a-owFWWQhmxZ3DDrS9ULrzIu6z5U1IfgNUL9Civvecv0QXW3N82Zrvu-HAdQ1oZU2RvqJnJUv41UcbkmfQF8DKLiqtsm1QIZboNqAhLkoyfMwh81EAexeL3B7nEHbGuJMwSjEdIta6rWdSzL-5djcol8FmvxCdViFh6cv
Source: global traffic HTTP traffic detected: GET /w/1.0/cm?cc=1&id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=b9a15fbb-fda0-4fbe-a342-d928a6585a12|1728042086
Source: global traffic HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEMkjFLMM811MJvGQ6HGZDCc&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=b9a15fbb-fda0-4fbe-a342-d928a6585a12|1728042086
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=teadstv_dbm&google_hm=ZWVlZjQxZTItYjIzYy00MTFmLTljNjQtNzk3ZDNkYzAzNzQy HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=tremor_video_dbm&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /ul_cb/sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid_lu=1728042087; google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b; tuuid=4a7a769d-5c1b-4c0b-8955-8bf06fc08476; c=1728042087
Source: global traffic HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic HTTP traffic detected: GET /cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmT4o063xBBQDu0z4njujpW3iMXyySg6RrAn0VBLP2vry8QG1govK7gCAyoaJNfaM1IIP-17W1aBlEfY617IxoiLn9u3SbkN4a0&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic HTTP traffic detected: GET /f/AGSKWxXIoFUECk4FNvCkloFhmBS2oxXCceKSam1esjWsJ0AtzzJXf6WEQfZj9CpxO3jSIRzerEvGRgArgeB-6xT1bWrHGL2lbouxguHuQLmvlFOUyN6QS-KH7VPj6WNJ4ksUBlOXuyq2x_QC8xWGD-qYu-Qksm8uU2ncCyX5VHLlAeFhAacxIZGPoRiQo0aG/__300x250px./writelayerad._468x80./ads/proximic./ad12. HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=spotxchange_dbm&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /sync?ssp=bidswitch&bidswitch_ssp_id=google&bsw_custom_parameter=286fbcaf-c685-43ee-8bde-74ddd673711e HTTP/1.1Host: pool.admedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=stickyxchange_dbm&google_cm&google_dbm&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=NDY2MmIzMjgtOWQ1MC0yZWVkLWVjNzQtNGI3OTA4OWRhNzhm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmTyFCDwwx6UNnlLcmSN88RNjshcmNS5SmS2VOGMiQ0qsij0fWvXW6TkZOtmWF9T9iQmuHoMbQj8LlPgnZacn2DENsWg7qpOZYs HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /ups/58269/sync?_origin=1&gdpr=0&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFPU_2YCEMHQmkWA5FtJWDYVa9d9mmIFEgEBAQElAWcJZwAAAAAA_eMAAA&S=AQAAAnQ3ncZmf4JPQPHh-7KC5OM
Source: global traffic HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic HTTP traffic detected: GET /dcm/impl_v102.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEMkjFLMM811MJvGQ6HGZDCc&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=b9a15fbb-fda0-4fbe-a342-d928a6585a12|1728042086
Source: global traffic HTTP traffic detected: GET /f/AGSKWxVkOjNjJJKLKXvuqNrKTy8XeDRyBbVLvvzydWOUHoM4r_wYL4b4XxqUaWzbfgIYs1sXg3V8ofBDzWlbP2zmN-y2YZTKZlcdB_g-1OSRGY73RPSCizozY6nsIrD183r4qJf9tO5CMQ==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pcs/view?xai=AKAOjsvxYDsb__THUaY0R_4hEJClqTq60nsvnmUsuOvXD9kOk5IONGUjuMUywcV68vM4JfFFmhDfqQjgYGYy9qXp0lqbiDjviQGHzn9DydUL0BLMh061MKtRuQpvktto14K7ShTxrR3v1cwsbFi1AVSPCfvpGbdUVUkHKLuVvrloI2UxoOver-GnBpXgTvkNqRXXVOoBo0WE48_5KH18AIPRSHbAXOjb6NuVsGd4KVVDJJ2skKKpLubqXna2puUz47ca6zHerZzabTjmUgTa1rtyR7qjbQD7-Eeuii8SVp7W-MRsFUW8Zl_4IcF_QlJMPeh_MIvWEsZaprLhHnpTO2csXiP_W2zQR2wY_LwWepKdoHSyItVcowtLN-0896TATHux5z_C6DJacdT6gASN0yA8BUfIKZT-L0Pd5aDI8DV_ePzinLtws5F_OIhKxz8PZr4s5EgA3ksBnn38wNOnDzY-rcPr2rmJB5n7WLTB9yBfCwP4JM_Y65RsIw1gFj6TEfytjO3qFw8egQX0c1khOZz64rn31kfsQDSUJjdgGFQEfMehRMvmjhQnZiQQ92fbwYP-YBhT365muwcPr8KzB9n-_4gHUyCBG4vQHu4cGOipcB6o7favllQr12hcBzJlRxtg-iIiBc0jEUeNPFzfpGbNdTnuFoDq0eOPoosAWuD0LjeJ_TFQDsTqxShBEVeOpqqVGnUVfVVOh0KgY9315o7HIxUGx2UAwyvRtySE8jSmq5cAFrlte2ES5zErW2t1AgeQC2BS4zspuAxp43AkLKSheTNcgIA04JQzA94pYp481jWtr4-0GfokeRjuZbU5fFb49SG0HnM-wYDvr6DwadnOwuJP1ZSB5IbCuHFoAlD62alklOiy0g-jakLku9qP1bmH739Qn8IBGL71mBi1Ej3SYyAJjcBRn3vm2QHzdP4mGX-nGJISEPADY3v7NlNIPYeYXVOm5MUAdhkb00u-FIfFVeKz0XxbjRrAsEqDC06YRq7UTB96mqI3fc09KDVVigNkHJFOu4oRoErRcpBDenZlsWv_VCR4qTGBRq4oIq3idJoF3r2d6VzXrMPJP3R6FP3W3Ew1hte9eCuyWBRxv1ERwU3FDlirEhByh7AuBIAhbA9KMnaNrOmG4mWeLjYHhzv0IMx32QQPG7PeAHxfaqukeq9VgrCEyUp98BBbOFZAa8ZRvSQpO_rM3d1yl-SZA5cgRNYp28i0RYHgztcjjbehTEXsj_cs-9OSBsxd8xnYGnJQZUozk7Ydl3kjaSrdqvtidfyWYWyLEP9Kp1QEEsBGFqRzqzci7H-VGLxQJ7NpEwTrrQphT2OGwMiEw4HiHPE8rRnr0vOyz09HoIVwoUHMlc6hy2dn6g4y4mW9DshDds6evQ5re_ow1LUk-dxcQA&sai=AMfl-YTZxJ2Gyk7hXc2lVbJspSVACpbIcM50ZEG5oMSFhSivhYpOLlmzR-uy5NuYfU4MeGPzF7yMPB0j28uBTnlOvPs9z90FXKtU8WQ2zwNtwICIebA49c5qNgvEhlkinfK68tIE_hHOGRHXdSQW7wY8r2P-WWIuDA-KnJj76BsfUd4pODrx3EXBN-bgO_36K0CX8PNcH4g6ynlm0v2vpVpK3Vk_Ciy3SplHRi8KQrQRo-K4UK2GDBsq6EJJ3SyqhhCEL775xS-zCaEUfFmNsM2LzLmYce1rmLpSTwN1c43aE4zKg_HIsSNqKcAx-6scL-xh036ylBYb0-km77qnXgajBhEOBDsNMznDso9-bu23P3jT4FTGmGN0F7kGLKp4NP_E58WBMGFmduqgKRl7EZ5uCjf85XPOPs6XKsh2&sig=Cg0ArKJSzIvdSSM8R1wLEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4&cbvp=2&dett=2&cstd=1&cisv=r20241001.86318&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmSulyuPz4s2VMwaw06B9jFvCD3Ea4zvFVN_jiFcqjgfjyvBrnsuuio5aJjQ9PpNZwTI7nE9QdVgHFylTAP5InkPiSOlbvVM-5Q HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /dbm/ad?dbm_c=AKAmf-BmwgLlXvLBDhkYHic6fuX49VdJ25tE_0myFee4RzIpazsSanc2sDjik01ZLPn36OhmSEWoGfGPz5SXZjf1xOgwqRv4oSvkenGiaEs91mTI-JWahTZGmKo_5Nu3puY7PuQQfNWMus2BDvFwBJs_XsqYHj3OkKx8mqSukz_RaZMUZM3fKt9xy2PP_tIheV93WR_VSb5wAOnhQbaycBDCbSlTgOR-esdxTnOh5-5Xx3mbVhao-kg&cry=1&dbm_d=AKAmf-Ctkfiisw4sUKcjWsLWg6bu1FonrD_Mrehk92SJHpzkPzXReqaMsEEEjWicDM03Zn_2Wf9BGLrKSJASO3hhy6pt7YFa5IQULRtat2VuW0hhBPMqk5NcbqW9y5kQCNZrDbSDVSB7OB35RuZUMf6LC3qM9xmJTV8Fuq_TEdx-19AENel1TSyxkg1glhQBMV89eX202AQar3P63zQt2Km56Zb24BgJSNEgKIQJnBNlQWCl1xtQTM0LWhgK0Ljkcjykqj-7P0UZ5tQPPeyh8ZfEY-QZQrpXAsljhHHemCDsvKSyVJLTj1LhSr8kBGfsE4uqWGL8T5eMjmL_ISvFHy0iuhuHON-8q9qBDvu3RxwngqWA_THWQN8Mx2SWx42vTnBAQKX1OSIRSC4rSycMXmkmEQGcd8rU_HWFGsBtaTzG__G8vDFhVOR1auBW31T7Ozkexq2V83hBFUf06JksnSITmSPWt9EIs_aPFXwvkirKukZw3B8s57wqYYSbvxlV3m6z7Venw8J2MbYCwoySSQihoQ2TG11k8WADxGUcWVpZHRD0ig78UvZmEGbREYz_CEimdL8OafEikmJprO1FD6Wq8FNAe8-7sIw7PFyZrGallNX2gPNqvGWAnowVOQ1-j-c17-X2yPX2ZMQDXdueKDbcXd309WBwLZxX6oBI28u0i6o9_2Q0Z7NqdNfuiSuMHeQGmxSCcEff21Y6J4mhbpqJvGvJaZkiH8OgNOlORjasj2yIwDZban8I1l5IKFrhJt98OI-L3Qh2R9m4deu7r8pXMX_-D9izQV4dxQoXCH4V27SOz9wPcL0AbtcFHBjZff9wP4DHbFj4mw3EyGYfVbU7sWSNjjl7hAAYbfplbOrbWg1tsYHn2hwwcGLK4rndm3KY6Qms2M7cw7gpgBjgxezy2sAddP_snFQ629jqygLOSyivKCOBbHeyRHQSzaOa8TnO0_kA5AV0ESmnsyEws9RVfa254xEVF-TcE0LwXX0qu-Z82PsDjf25-g5zv28ond5nJPq7kDGYXkz4MRwvayh7lxezcH0IejNdSlyZ-oT6qUOJNf1Fk8xMySZj5UkaK9t9mUMxQ3Hxsj7TvKnwd7ykJJddAe_4Fgj2woslc0QYe2nE0tzjl6XdT5yENmmWFMmcFYm0OK-9S8i1ow6VIsQGmV0d5LhnldQHAcU_9w4GnEHUpProslXx3NRAKfoXvUGKngThQq6fVKaL8Z9JhROzbgvVmAxMkl9wAVxG0GEhY4rwJpSpVcWsUwg3-G21g_PYWJow8EjqK9hAxKWOz6x8UaT4CU4Ugri6XtfwMNucL8LVegMkgq3ALOMyjXWi6qboviCPqk9kd1YXXoVrkqXxAs8woRGQvPh7vUJCzEewQpOrxpJkJ0UFPmRwZXRLMZFA94AK44MMI07cRedaSZkNyFQYEuLcdMjlE70u0TLaXltuQezYRMdiN5MH2bsnoIvq7fDQJuL-xr2jkFO2z2TxKGGW8uQ_9Hu12z_S9COMJNFhHryNaDEdM1iJq_QcI5MMuCkFz9zR6a3fzeHYQiciDvIIbE74OEmXzhWs1655tp3WNlvSMcK22PTQKzGuvuJk9C4HrFhqAljUWZ_jL-nCVJrIaRcdPiGXUfHz-qTXS2AU5iy12p_gCQFM_CziKOVmLaOpfmITGNA5efmPeZWhNW7cwoAr3Umh9cIO4Lmu5gWr0p8oWVoHZWy0c52wi1bswa_6u8b5WNxPdmcT1dfh72KZa5BCul-VAsbJ74W8AgthMMi5stZ5UflEiMQmaDyIudTocqKSo0IOROF7EWvCk7j1_-mbnQI6iQASrJVpK_O0pozZbo93wvmGkONMI1nQKq0ZvJm30RqG33RJSkrr60yAi4dJSaEZKVDH4EusvWooFzh8cZ44nglsQ3RM8c65_LhzWfPz8EFDk3HhdDl5pITxQ0COSXhIqus6M47GVEFE728ePpylgqL5875kTp8-hW_ut7w603H1wgmcPssvagFWWzLlQS-5EFBuwA7cjknL5hqTvvv6tybAIBGyilaWWoNQ-jWep6IlmhDBpK1yorJ38Ndo7iqQjWcoEvX7kjsMHbvYXpbbgmCOB5ld-4TMM5sG8D_BYp0rZLboADKUrWqIKmaBAG7ZcjEm-i_x7ANSYxUsaun4ULE0Ize7kyxEyqj6kZtfGEEbzTZjSz8HBaFuSWPFDHjK6Yjn5RlYeClgeoH6JCshr7DXo_5AQYEWZ-0MGwMvT8wpb3-GUMFLlO3u-eqHkxxYFOl67Wov67q1mwBMyg6b27Nu1qvYAcGPdaBqb6-n-5izwo0epC86uIYqsQEC7mO13ZfGcYubuzOSlyBP-Frbn-xyCvDmD0lBp_5tOhmsPUzM-zP81fpm3xwhLIqFYvY3mKxhba7Jzuym3ZMwe6J1thCHSAcguRTgRZ0qJzRT1VVmr_rdx5EI1ijv8HJbZcH1DUg6F1cX723wW0x71rCr0dOaz0nxaL2h4EOJePq0jI84dT4F1lKFCP-pQ9fzu9mstlvt8ewg_Oh6pXSuGZHmQVKo8a-owFWWQhmxZ3DDrS9ULrzIu6z5U1IfgNUL9Civvecv0QXW3N82Zrvu-HAdQ1oZU2RvqJnJUv41UcbkmfQF8DKLiqtsm1QIZboNqAhLkoyfMwh81EAexeL3B7nEHbGuJMwSjEdIta6rWdSzL-5djcol8FmvxCdViFh6cv
Source: global traffic HTTP traffic detected: GET /pcs/view?xai=AKAOjssczs0X-KB6qYP2KlivIqRJ99DIQD1UwVoZBOQNyJSMchHZUm_LOkMvlEHlRAmsBrk4MPryuOx_x2GbHD2CoVZp5GKZDonXWYm3MoumJZlTzzJZYohLFLUV8nh9uJATzOfH9kc-uRMjzLf5WqB3mexrRpd0QSPgLU9fgZ21vsoWRYG4pegpnLPHaYnD6M5cE4Vc13QMOq4SVWXJS15lUH2Sa3sAIs7dZ7eNS96hHVLPoiTLGLyMeMwg2yc8co__iXwlCz77ocS_v3e2EZ7FYrQqZTOrZRUhHVbCxOm371lrOVR1A0xiX9heWbeypHLLTJOJmXJbcsFT_GFafBzi1rwkV7Z3qHceQh9BDMWYne68NHJ-bhEN-2Zn-NkBsfYC-TtALOEfWVQe-x0DIRw1CPuRtOoVFO9qxsVC5fr0OhLMrh2yjzQ4Zcp6eOk9r3W7o_vX7pQax5cDy4nj2Mt_32saH3c4s9Lz14k6_bqvI_knfE_rBQ-ORDazhFho5It82kMCwmx4xGvgSpT9fespgqObJhhDO7pXcdeAOJnXX-_y8sbH3Gcv0yZEsoGsdcgozYCEp8ayp86y2fLBuUjsfvgqygMYJqdXaHRmoQpUEeWrzeY4myyDoBdI-dBb8K2FhclGqEMCcTGe-lImKrxna6lcmVDXdRpGIBReN6AgsN5wmrC7Z8ouHm-iK3m-u08UXsCWHhysG09iPtX7NwhCWFj7AzO4M1BHGa58ReaBJ_PSZiGdgMeVTTIGVo5l8cF3JJXaOy0QnDT-wPNqdvZAvMyeYpGknIM4nys0dfl1LJwiuvaFLc-vgkIzNyLOpx-Z8Ew_F6q65gb8ywcVlogTQj95gPFjPg-ILTcc7AfdaOzvSrVZnNJw5_iMSaeqSfeJFuIJ9qKygeb1PxEBskwkcNDFyWw3gRV8_YlK6pkz2mCpkGuhM0DEIogpAL71sxeWdNVYksNkBoGlBXLtq99W2wheuWlArL6hjOy6NMXD7CiH66H6qAEH_b8SU18jyCawVQsyhQHgQtaJFTVa1NaZCgm6bzhtj0Cw_iadx7Pzp8RK6KCw7LZWGqjBo5XkK6BTEZFS5rj7M5qU26z47A3fZmLMW25TMAM7lF1xqmQwXvDV-O7oBV_id1QMLdrkw6tiW4uCAEHvhJP0PbA0oz2P9RgTEBoBLWJ14cD3vfrGawg6BRqAhNfG6RxAYdD0FE_aX_vBnSr8XltGF1fLvJrHJy26n3hCqyGiBSE-3CcTvEebZ5tkNr15PQPY56NmbLXQhL5KMFKOzbRHRM-O2A0MX4iJR0kcsNswlav8NPIKL6VOY8pdk4N5Gt7UYqY46GBh59iFvr1-Mj5iHr22EyPQqgaS4Mdb4EvR5IidBDlnjTJkkYdNgZo2jXb2olGXPQ&sai=AMfl-YQuGsdX2J4rx848wRgIc57LJSFq768n9kCajIqaG7jX8XTfUvgkjIG5TqrWvzPJ2RaBrCZ0T5fvOOklbFDdPwtIfdE44pkdsmSUH8sGVS6bfVIpbst11pDEHAskJYkYRlqDusUOSZ6Tknjl7ZyjcPk8RApyj9X9usScvoBMdAKOY8PAzzAuYEisVcqiUVSyyZp5cZIQyXA1IAylAamCAeMib3P2mwXh118Ht9_YzIEdMqn48cvsGtAWzeNm3ByGyJFNrEGum7FrG3XFcnjxuOMse0M6fJyl7wG5QU4Wy9nvJO5fl2IlJXvU8XWzXdl3LnrFG76-0CPfBZXmG5CdWD6JkiVYKfzaqCHhu5AvYbZa7121CgcaJe_FDGQAAU3OeC0v1hFClTRQVR03hJmw6Fr66r7CZ7C4U09t&sig=Cg0ArKJSzFCam7cFjlUvEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9maXZlcnIuY29t&pr=missingexchangepricemacro&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=2&dett=2&cstd=0&cisv=r20241001.37687&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /dcm/dcmads.js HTTP/1.1Host: www.googletagservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=stickyxchange_dbm&google_hm=NWEyMmVhYzRhZTcxY2MwZjBiMzU1YzQ5ODYzZDZkNQ==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=D463160B91F546D383A1AF8385A1B33A&google_push=AXcoOmShV-Jtc0RSd1rbHkgI_Eyj-B0DmnvvLixLb2rNvHzkMf38HLb3pMjATPv7RlVFZyU8Y1Mcjw32FWGNm0ehaP1l1kshMV69yV9W HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=oath_dbm&google_hm=eS11UWJiX0FSRTJ1SGUwTHVCQ0dkY294Z0hGZ1FtM3h1bn5B&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /sync?UIGL=CAESEIIccipiv8K1-sAAbtkuC5Q&google_cver=1&gdpr=0 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=teadstv_dbm&google_hm=ZWVlZjQxZTItYjIzYy00MTFmLTljNjQtNzk3ZDNkYzAzNzQy HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmS_qwRyX3whO3xQLvSc2JgBrDnO1X6pF86whMgAw7VSZjEYKco6wzHdQ5JwZcDLi1z2zEFLH-9drso1Sc7wUKmGo6svitaLdac HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=google&bsw_custom_parameter=286fbcaf-c685-43ee-8bde-74ddd673711e HTTP/1.1Host: pool.admedo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=6a9b00ba-4e5d-4254-abd4-416f7b5c6c1d; c=1728042088; tuuid_lu=1728042088
Source: global traffic HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b&google_hm=KG-8r8aFQ-6L3nTd1nNxHg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=-z20fGN5LACZeLZYrDY8vS4U4B8dNNgPSRxJ0GTSSlI&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmSMzdJch9f5yspzBreHk7MkJGMkYmQ7l_CBrHUxRVaoffKY4RNI2u5YLrO2puwm_HkGYBZSRSnlykknHeXLElmJuD0t50Kx0HxNIQ&tc=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmTyFCDwwx6UNnlLcmSN88RNjshcmNS5SmS2VOGMiQ0qsij0fWvXW6TkZOtmWF9T9iQmuHoMbQj8LlPgnZacn2DENsWg7qpOZYs HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=NDY2MmIzMjgtOWQ1MC0yZWVkLWVjNzQtNGI3OTA4OWRhNzhm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /f/AGSKWxXIoFUECk4FNvCkloFhmBS2oxXCceKSam1esjWsJ0AtzzJXf6WEQfZj9CpxO3jSIRzerEvGRgArgeB-6xT1bWrHGL2lbouxguHuQLmvlFOUyN6QS-KH7VPj6WNJ4ksUBlOXuyq2x_QC8xWGD-qYu-Qksm8uU2ncCyX5VHLlAeFhAacxIZGPoRiQo0aG/__300x250px./writelayerad._468x80./ads/proximic./ad12. HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /v1/api/sync/AdxPixel?google_gid=CAESEAmTNgM_-pcFL5ffd_dk1kc&google_cver=1&google_push=AXcoOmQ9LWzOZX_W7ZE8MEuN6TtpvUxlswkb4ZYnGUx6uHdHBQtMz2EZHVoYNfztAT4ZT3vkqDhrk-8T4eqsTAD75Ut35hK3ikYD7g HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b=66FFD4661E49E037747341E4BLIS
Source: global traffic HTTP traffic detected: GET /gp_match?google_gid=CAESEFi9PqLuqTCfmE2lDk5eZnw&google_cver=1&google_push=AXcoOmSdWHq4-e5JyuA-tIqiieYbVsQelGc07_N0LXqw6gPc5m_Q3M_32aCfbB6iWUy_u2v8p8v2B9jmEPWMukD8RaQ4pG1We68zaaA HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=32B60805DE8843869CBAC4833A2F49DB
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTAclBd83KAvnaABRyrRCf7yt7MOk-96fMjSy57xseyO8ttKEsYmU6H_0tsjTuI3BaYTkkxRTzWz_-2Ki9ETn3rAqtToDamDQs&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmQM0a1_7HN4Aa2vmAopd9Qoj-gK-nSr9daJS2E11Gzxb00FrltUC4NxWKD_CvkFqetecjTmapofswe8yPzUovSWnlGf14SZi62B HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=1D6xnsGMXasXsu6Ji6uj_1728042086362; ts=1728042086
Source: global traffic HTTP traffic detected: GET /sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmT9EAPl8E48z0eEQF1Gw4M_8iQBOO4CuTrZ6xalCQ4vHxvtzD3c7FOKiAx6UAozNPvJ76sC3ENu9H-tNK5pXhBkeUF-wHPFqQ HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a7a769d-5c1b-4c0b-8955-8bf06fc08476; c=1728042087; tuuid_lu=1728042088; google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ
Source: global traffic HTTP traffic detected: GET /api/adx/cm/pixel?google_gid=CAESEPv97O-fbD076H-t7qpclug&google_cver=1&google_push=AXcoOmTkkplSMNuUbwG3x2NG_dbKePuR3T5dWVXLXR_LDUR7zhwNuwEjGQXutwym9n4q2yYewtOiyWndix7PHun4T90HitF2kpvTEpV8 HTTP/1.1Host: www.temu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /dcm/impl_v102.js HTTP/1.1Host: www.googletagservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ddm/adj/N5949.4624185PMPRECISION-DV360/B32374903.402688320;dc_ver=102.299;dc_eid=40004000;sz=728x90;u_sd=1;gdpr=0;nel=1;dsp_bidurl_0_=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html;dsp_campaignid_0_=1018246531;dsp_chanid_0_=1;dsp_id_0_=3;dsp_impid_0_=v4~~ABAjH0i9hZc-8y6MO2Hpn_Nm9X38;dsp_placementid_0_=21626961814;dsp_publisherid_0_=pub-1673399160710718;dc_adk=2515327493;ord=i4o504;click=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCaPy8YdT_ZtWwGfzEvPIP4dmvsAqsuKLgeaDP2t-oE5rT0_rHPBABIOfA1G1gyQagAYa8z90pyAEJqAMByAObBKoE9wFP0EWgCNsR6eleUlqz_k0VM78gpeNEj7AfLw9XXGL0OoLRM6fWevKyfAlDNSEZeV5b8kE6sM_GlweNK3opoB6Cu6b8pwmKngOydkqegOfK_w0H8bJfl7GrSjZxU00R8KaD5sh6m16CXcfSLS_m5FJTJkSFVAoyp0oDU5--_9CFxM6FWM9Y1t4BSfdWSFl5kawLy0IxdpSGMVPXlVYyfNGDRHmMOtgPgOnT4WaD_7iO8l9Pk9cvb4DxHBIuGJ5bpmIGFlRCRjB-mY6VXLkK1WwBu5A8U6lm_qeNkYUxOSFNZagaXrpOOR0tVb1yvSE_lrHhmX74H4cJwASu8u2p-gTgBAOIBZb_xMhQkAYBoAZNgAeG9J-9BKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WNfuqbPS9IgDgAoBmAsByAsBgAwBqg0CVVOwE_GDtRnYEw3YFAHQFQH4FgGAFwGyFwIYArIYCRICu08YTSIBAA%26ae%3D1%26num%3D1%26cid%3DCAQSOwDpaXnfkS-bbuqP9x9QQyyOD2GRAoZdyeO5F5pGbPV0L8uEDBKTZo5XfOkU--scFfZXG7ofltUbClvTGAE%26sig%3DAOD64_0Vc8reaXw4shiVFJfB1e3wd0kKcQ%26client%3Dca-pub-1673399160710718%26dbm_c%3DAKAmf-CjBKcSzP2EhMT-P8pZ4DJZ5XvidxAh4dJvdiP-lgN2U6sLXGJGEcDdTb3jTwWxwc0a_IMOhDpM88SrdF0P9OvU_BIbBYRbrWrerzm-8n8vG34ylYOP1VTFO2CkrqyphG2PeJqNPzKC_Kgghbdhjps6s4-b1XIGqtQWsuxoaFkH_YeCDcDpRAfuXL6izGfZEc5c9wWoO1lJqnTo3RBMKnWeKMGkq1V1iyWHvdnraDZN4gTPVnQ%26cry%3D1%26dbm_d%3DAKAmf-CigrglGbo65n8NWkBJpRAbuqXTttSR5nfAqVDMArQA9qxRGIwYWaeDuVGjVgoxNVjxIGorjBApmk8yq82iuRh0ezadBosHp_He9Cm9dJui78YQuebymQxja_69Lajkwb5KoWtcq6hzdYMN67sl8WoFBNQpHAJQXowFJf9W-6T8NkJTvmkOZvTWyNfWsDmXIZXIcpdnOKAqrpbOAbsnhSjVB4NRsUPmFvRl9Gfym6QolBvimVl7eniMSZ2VPmSwalMwrcggv_5osgtN-Ehr9tQoqybAfyEiHY1EbQxoCnPo3wLi5GXkgixodBTrS3B1NAbZ-6yiWQfZav-TdvuBNh-lSd4C6IAsBQV3JmciWYeY864epNMb05Jx3ABnu1qrbIo5aFixO3FBzJKvPOHf_b6wRKPop19qo2sIBLnpgADkJkjE0e_EUJSwj4yM8VpP7t-x5VYt76dCtLxrBW-hJLzVyOd6nDXPDj9VQed0z8hW81_pALV4xYaT6lBu-GXyL2Y5xFo7hrVqrpqj7Hs9vKHS7WeUMyBM-PkMrXBYsVWiqfJNTdFFgbSbraXq7rzJrOFEIYaLBriwO16B61e2q1CY9a8_QI0JamL5dUJOqgSLTzYdViBu6Bp704NuWb1ddpbTw9lvFtvAsCByuQKhMypPx8hp-epMW_y7Lpby8q4ck26Qfyg%26adurl%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.;dc_rfl=2,https%3A%2F%2Fwww.haoqq.com%2F$0;xdt=1;dc_omid_p=Google2;dc_sdk_apis=7;crlt=Fc(KI5OQPr;cmpl=8;gcsr=a;stc=1;asnm=1;chaa=1;sttr=1198;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe
Source: global traffic HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmR11UtxP_Ii637T9zKReutj2apnPx_WJF0oR9Zyaxhm5KL_Jouop6HQU1PHA5OC-ZWLUGj4Sjy_JRbrXm-aS9qTfkX793Y7_a4 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=e335e2e1-b80f-4249-b64b-19f1016b75ba; TDCPM=CAESFQoGZ29vZ2xlEgsI6p-uuvCcsj0QBRgFIAEoAjILCPqph96GnbI9EAU4AQ..
Source: global traffic HTTP traffic detected: GET /sync?UIGL=CAESEIIccipiv8K1-sAAbtkuC5Q&google_cver=1&gdpr=0 HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=stickyxchange_dbm&google_hm=NWEyMmVhYzRhZTcxY2MwZjBiMzU1YzQ5ODYzZDZkNQ==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=oath_dbm&google_hm=eS11UWJiX0FSRTJ1SGUwTHVCQ0dkY294Z0hGZ1FtM3h1bn5B&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=FF57ED73B11F42F1BF9D7A824A85EB0E&google_push=AXcoOmQnNLICDQEa3vo6G_jaTp0NK-2q-MGnmoNPYU3Aa2sIj7Rxn0cU26cd4a8b_IFvGN63TwpI48Ce2Jhn1M-z_WPNWRTnZv5PfbI HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmSG2y2CKSsJHjNe49B23UO6-5g3bFSL2LYXX_GQWIMBaewczfO2x8EyvksJW-qUf0IyZLinmX_ctJGlnpQh0UG90kQ-Di98fpQn HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /f/AGSKWxVF1WVknfajFSvSyNXrJnzl2B-mha6FQQi4nnoFF1mWNowc8MGoU1E2B_3c4NWn5J87On0Jwr0QBJVJYoVMiY9AtIpKcrMGQ5NF25vYOWxztazCq03EhKygdfL9bAylFwqTCk67uA==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /sync?dsp_id=23&expires=14&user_id=6a9b00ba-4e5d-4254-abd4-416f7b5c6c1d&user_group=1&ssp=google&bsw_param=286fbcaf-c685-43ee-8bde-74ddd673711e HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=4a7a769d-5c1b-4c0b-8955-8bf06fc08476; c=1728042087; tuuid_lu=1728042088; google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmTs1_ll0D_RCewYKHbjcou2C-D9XigwEMKV_u-aZD-O41ML3SE9fdZH5w_1zibbiRxTdKUAFgAe8aWsnlS_ljhlXIAw66tm7YJT HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmS_qwRyX3whO3xQLvSc2JgBrDnO1X6pF86whMgAw7VSZjEYKco6wzHdQ5JwZcDLi1z2zEFLH-9drso1Sc7wUKmGo6svitaLdac HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmRuShbATQDatQq4sJWhdwSrBaGF1h8JWd189LN0U19evDjkxqz6PEo6NN4Cmk1GaEawPQp5AY2xig2e6DaJALkaVLbrCocgGg HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCVjVrN05fNmtBQUJWQVNGSWo2UQ&google_push=AXcoOmRbtMccDxJg2BjT3wnvT1aepLpjWQ_QuS-yRl_uN-efUYE_YqPR6ef0-7Yh5T8BxoQ4rpvAjuN3vlHpI_ROEJWbBvpxn8ySqG3c&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTAclBd83KAvnaABRyrRCf7yt7MOk-96fMjSy57xseyO8ttKEsYmU6H_0tsjTuI3BaYTkkxRTzWz_-2Ki9ETn3rAqtToDamDQs&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: widget.us.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b&google_hm=KG-8r8aFQ-6L3nTd1nNxHg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_280.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCMXlVN05fNmtBQUJlN3dNeFYyZw&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFFTlQwN05fNmtBQUJXeDRZMEJRUQ&google_push=AXcoOmT4o063xBBQDu0z4njujpW3iMXyySg6RrAn0VBLP2vry8QG1govK7gCAyoaJNfaM1IIP-17W1aBlEfY617IxoiLn9u3SbkN4a0&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=-z20fGN5LACZeLZYrDY8vS4U4B8dNNgPSRxJ0GTSSlI&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmSMzdJch9f5yspzBreHk7MkJGMkYmQ7l_CBrHUxRVaoffKY4RNI2u5YLrO2puwm_HkGYBZSRSnlykknHeXLElmJuD0t50Kx0HxNIQ&tc=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTAclBd83KAvnaABRyrRCf7yt7MOk-96fMjSy57xseyO8ttKEsYmU6H_0tsjTuI3BaYTkkxRTzWz_-2Ki9ETn3rAqtToDamDQs&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rjss/st/2197957/82023115/skeleton.js?bundleId=${BUNDLE_ID}&ias_dspID=3&ias_campId=1018246531&ias_pubId=pub-1673399160710718&ias_chanId=1&ias_placementId=21626961814&bidurl=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&ias_dealId=&ias_xappb=&adsafe_par&ias_impId=v4~~ABAjH0i9hZc-8y6MO2Hpn_Nm9X38 HTTP/1.1Host: fw.adsafeprotected.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ddm/adj/N5949.4624185PMPRECISION-DV360/B32374903.402688320;dc_ver=102.299;dc_eid=40004000;sz=728x90;u_sd=1;gdpr=0;nel=1;dsp_bidurl_0_=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html;dsp_campaignid_0_=1018246531;dsp_chanid_0_=1;dsp_id_0_=3;dsp_impid_0_=v4~~ABAjH0i9hZc-8y6MO2Hpn_Nm9X38;dsp_placementid_0_=21626961814;dsp_publisherid_0_=pub-1673399160710718;dc_adk=2515327493;ord=i4o504;click=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fdbm%2Fclk%3Fsa%3DL%26ai%3DCaPy8YdT_ZtWwGfzEvPIP4dmvsAqsuKLgeaDP2t-oE5rT0_rHPBABIOfA1G1gyQagAYa8z90pyAEJqAMByAObBKoE9wFP0EWgCNsR6eleUlqz_k0VM78gpeNEj7AfLw9XXGL0OoLRM6fWevKyfAlDNSEZeV5b8kE6sM_GlweNK3opoB6Cu6b8pwmKngOydkqegOfK_w0H8bJfl7GrSjZxU00R8KaD5sh6m16CXcfSLS_m5FJTJkSFVAoyp0oDU5--_9CFxM6FWM9Y1t4BSfdWSFl5kawLy0IxdpSGMVPXlVYyfNGDRHmMOtgPgOnT4WaD_7iO8l9Pk9cvb4DxHBIuGJ5bpmIGFlRCRjB-mY6VXLkK1WwBu5A8U6lm_qeNkYUxOSFNZagaXrpOOR0tVb1yvSE_lrHhmX74H4cJwASu8u2p-gTgBAOIBZb_xMhQkAYBoAZNgAeG9J-9BKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WNfuqbPS9IgDgAoBmAsByAsBgAwBqg0CVVOwE_GDtRnYEw3YFAHQFQH4FgGAFwGyFwIYArIYCRICu08YTSIBAA%26ae%3D1%26num%3D1%26cid%3DCAQSOwDpaXnfkS-bbuqP9x9QQyyOD2GRAoZdyeO5F5pGbPV0L8uEDBKTZo5XfOkU--scFfZXG7ofltUbClvTGAE%26sig%3DAOD64_0Vc8reaXw4shiVFJfB1e3wd0kKcQ%26client%3Dca-pub-1673399160710718%26dbm_c%3DAKAmf-CjBKcSzP2EhMT-P8pZ4DJZ5XvidxAh4dJvdiP-lgN2U6sLXGJGEcDdTb3jTwWxwc0a_IMOhDpM88SrdF0P9OvU_BIbBYRbrWrerzm-8n8vG34ylYOP1VTFO2CkrqyphG2PeJqNPzKC_Kgghbdhjps6s4-b1XIGqtQWsuxoaFkH_YeCDcDpRAfuXL6izGfZEc5c9wWoO1lJqnTo3RBMKnWeKMGkq1V1iyWHvdnraDZN4gTPVnQ%26cry%3D1%26dbm_d%3DAKAmf-CigrglGbo65n8NWkBJpRAbuqXTttSR5nfAqVDMArQA9qxRGIwYWaeDuVGjVgoxNVjxIGorjBApmk8yq82iuRh0ezadBosHp_He9Cm9dJui78YQuebymQxja_69Lajkwb5KoWtcq6hzdYMN67sl8WoFBNQpHAJQXowFJf9W-6T8NkJTvmkOZvTWyNfWsDmXIZXIcpdnOKAqrpbOAbsnhSjVB4NRsUPmFvRl9Gfym6QolBvimVl7eniMSZ2VPmSwalMwrcggv_5osgtN-Ehr9tQoqybAfyEiHY1EbQxoCnPo3wLi5GXkgixodBTrS3B1NAbZ-6yiWQfZav-TdvuBNh-lSd4C6IAsBQV3JmciWYeY864epNMb05Jx3ABnu1qrbIo5aFixO3FBzJKvPOHf_b6wRKPop19qo2sIBLnpgADkJkjE0e_EUJSwj4yM8VpP7t-x5VYt76dCtLxrBW-hJLzVyOd6nDXPDj9VQed0z8hW81_pALV4xYaT6lBu-GXyL2Y5xFo7hrVqrpqj7Hs9vKHS7WeUMyBM-PkMrXBYsVWiqfJNTdFFgbSbraXq7rzJrOFEIYaLBriwO16B61e2q1CY9a8_QI0JamL5dUJOqgSLTzYdViBu6Bp704NuWb1ddpbTw9lvFtvAsCByuQKhMypPx8hp-epMW_y7Lpby8q4ck26Qfyg%26adurl%3D;uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.;dc_rfl=2,https%3A%2F%2Fwww.haoqq.com%2F$0;xdt=1;dc_omid_p=Google2;dc_sdk_apis=7;crlt=Fc(KI5OQPr;cmpl=8;gcsr=a;stc=1;asnm=1;chaa=1;sttr=1198;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQE
Source: global traffic HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel/attr?d=AHNF13KZyqIKoftLE_njit3bvfDK5zr4-Qbcbp3ChKE8NLq2bYy2_HgvtCgqtwro7DB5Q6q_Zhps9Bg HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmSG2y2CKSsJHjNe49B23UO6-5g3bFSL2LYXX_GQWIMBaewczfO2x8EyvksJW-qUf0IyZLinmX_ctJGlnpQh0UG90kQ-Di98fpQn HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=blismobile&google_push=AXcoOmQ9LWzOZX_W7ZE8MEuN6TtpvUxlswkb4ZYnGUx6uHdHBQtMz2EZHVoYNfztAT4ZT3vkqDhrk-8T4eqsTAD75Ut35hK3ikYD7g&google_hm=hmb_1GYeSeA3dHNB5A&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D66FFD4661E49E037747341E4BLIS HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=FF57ED73B11F42F1BF9D7A824A85EB0E&google_push=AXcoOmQnNLICDQEa3vo6G_jaTp0NK-2q-MGnmoNPYU3Aa2sIj7Rxn0cU26cd4a8b_IFvGN63TwpI48Ce2Jhn1M-z_WPNWRTnZv5PfbI HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /f/AGSKWxVF1WVknfajFSvSyNXrJnzl2B-mha6FQQi4nnoFF1mWNowc8MGoU1E2B_3c4NWn5J87On0Jwr0QBJVJYoVMiY9AtIpKcrMGQ5NF25vYOWxztazCq03EhKygdfL9bAylFwqTCk67uA==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmTs1_ll0D_RCewYKHbjcou2C-D9XigwEMKV_u-aZD-O41ML3SE9fdZH5w_1zibbiRxTdKUAFgAe8aWsnlS_ljhlXIAw66tm7YJT HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmRuShbATQDatQq4sJWhdwSrBaGF1h8JWd189LN0U19evDjkxqz6PEo6NN4Cmk1GaEawPQp5AY2xig2e6DaJALkaVLbrCocgGg HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCVjVrN05fNmtBQUJWQVNGSWo2UQ&google_push=AXcoOmRbtMccDxJg2BjT3wnvT1aepLpjWQ_QuS-yRl_uN-efUYE_YqPR6ef0-7Yh5T8BxoQ4rpvAjuN3vlHpI_ROEJWbBvpxn8ySqG3c&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=-z20fGN5LACZeLZYrDY8vS4U4B8dNNgPSRxJ0GTSSlI&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmQM0a1_7HN4Aa2vmAopd9Qoj-gK-nSr9daJS2E11Gzxb00FrltUC4NxWKD_CvkFqetecjTmapofswe8yPzUovSWnlGf14SZi62B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmT9EAPl8E48z0eEQF1Gw4M_8iQBOO4CuTrZ6xalCQ4vHxvtzD3c7FOKiAx6UAozNPvJ76sC3ENu9H-tNK5pXhBkeUF-wHPFqQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmSdWHq4-e5JyuA-tIqiieYbVsQelGc07_N0LXqw6gPc5m_Q3M_32aCfbB6iWUy_u2v8p8v2B9jmEPWMukD8RaQ4pG1We68zaaA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmTkkplSMNuUbwG3x2NG_dbKePuR3T5dWVXLXR_LDUR7zhwNuwEjGQXutwym9n4q2yYewtOiyWndix7PHun4T90HitF2kpvTEpV8 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /sadbundle/1535206504467815149/index.html?ev=01_252 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pcs/view?xai=AKAOjsuvtIqzVY3ggWg3jVmRPkf4eU6UofNdZmU2iGH8lgkVsKG3xfGxi6O2lRHyOKn50YBLBiTc8MMX9QSagI6L5CaNPQZpEjxADTDWPZWTdYuONI2U1vduc5l9pQ31kaQgrLrKET67tDYUaF0Svqh8GOaRqwMkSqhfD5mOtOVYjQRCAJaHG0B81WmKbF0EQd7FZKUG_JFvsnTI&sai=AMfl-YQZJKu8l0SQ73izwOFHJYrUwCpfXmwD_G4vHiwb17J1h1X9KlyR2k-yockDal06uaYx0oPeQxsppA_IEe0q9zFenHZBh3kRRRI&sig=Cg0ArKJSzAcRQsGeMpwpEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9rYXkuY29tLGh0dHBzOi8vZG90b21pLmNvbQ&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1206&cbvp=1&cstd=1198&cisv=r20241001.96553&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source;navigation-sourceReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_280.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCMXlVN05fNmtBQUJlN3dNeFYyZw&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFFTlQwN05fNmtBQUJXeDRZMEJRUQ&google_push=AXcoOmT4o063xBBQDu0z4njujpW3iMXyySg6RrAn0VBLP2vry8QG1govK7gCAyoaJNfaM1IIP-17W1aBlEfY617IxoiLn9u3SbkN4a0&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=blismobile&google_push=AXcoOmQ9LWzOZX_W7ZE8MEuN6TtpvUxlswkb4ZYnGUx6uHdHBQtMz2EZHVoYNfztAT4ZT3vkqDhrk-8T4eqsTAD75Ut35hK3ikYD7g&google_hm=hmb_1GYeSeA3dHNB5A&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D66FFD4661E49E037747341E4BLIS HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmT9EAPl8E48z0eEQF1Gw4M_8iQBOO4CuTrZ6xalCQ4vHxvtzD3c7FOKiAx6UAozNPvJ76sC3ENu9H-tNK5pXhBkeUF-wHPFqQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pcs/view?xai=AKAOjsuvtIqzVY3ggWg3jVmRPkf4eU6UofNdZmU2iGH8lgkVsKG3xfGxi6O2lRHyOKn50YBLBiTc8MMX9QSagI6L5CaNPQZpEjxADTDWPZWTdYuONI2U1vduc5l9pQ31kaQgrLrKET67tDYUaF0Svqh8GOaRqwMkSqhfD5mOtOVYjQRCAJaHG0B81WmKbF0EQd7FZKUG_JFvsnTI&sai=AMfl-YQZJKu8l0SQ73izwOFHJYrUwCpfXmwD_G4vHiwb17J1h1X9KlyR2k-yockDal06uaYx0oPeQxsppA_IEe0q9zFenHZBh3kRRRI&sig=Cg0ArKJSzAcRQsGeMpwpEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9rYXkuY29tLGh0dHBzOi8vZG90b21pLmNvbQ&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1206&cbvp=1&cstd=1198&cisv=r20241001.96553&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /sadbundle/1535206504467815149/b959f22280157e2c555913dccd91372b.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmSdWHq4-e5JyuA-tIqiieYbVsQelGc07_N0LXqw6gPc5m_Q3M_32aCfbB6iWUy_u2v8p8v2B9jmEPWMukD8RaQ4pG1We68zaaA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_ula=5153224&google_hm=-z20fGN5LACZeLZYrDY8vS4U4B8dNNgPSRxJ0GTSSlI&pi=adx&tdc=ams&pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmQM0a1_7HN4Aa2vmAopd9Qoj-gK-nSr9daJS2E11Gzxb00FrltUC4NxWKD_CvkFqetecjTmapofswe8yPzUovSWnlGf14SZi62B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi5ap1b28-Z7uE-6kxeZBLcL_pRGozp0mZ3w2VZovNSPMSqoRw
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=whaleco_services_llc&google_push=AXcoOmTkkplSMNuUbwG3x2NG_dbKePuR3T5dWVXLXR_LDUR7zhwNuwEjGQXutwym9n4q2yYewtOiyWndix7PHun4T90HitF2kpvTEpV8 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ&google_hm=Snp2nVwbTAuJVYvwb8CEdg==&gdpr=&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /sync/stickyads/834c591d97ba1180d18da6e4f93f46f9?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFPU_2YCEMHQmkWA5FtJWDYVa9d9mmIFEgEBAQElAWcJZwAAAAAA_eMAAA&S=AQAAAnQ3ncZmf4JPQPHh-7KC5OM
Source: global traffic HTTP traffic detected: GET /sadbundle/1535206504467815149/media/6fc2d839f7cf510e00c9f5bd1132889f.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sadbundle/1535206504467815149/media/a3a0e34ff72c160c1b186677f13e0128.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sadbundle/1535206504467815149/b959f22280157e2c555913dccd91372b.js HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sadbundle/1535206504467815149/media/25fcc0797a2837d2f439c5a924fd40a6.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sadbundle/1535206504467815149/media/db3df4cf961c8d56e246db246f4d6dc6.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=soKWxluS4tuRGfA&MD=yw2KXhkV HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZTMzNWUyZTEtYjgwZi00MjQ5LWI2NGItMTlmMTAxNmI3NWJh&google_push&gdpr=0&gdpr_consent=&ttd_tdid=e335e2e1-b80f-4249-b64b-19f1016b75ba HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkvYhLIXZSCYjm6v-BtRYFFIMD9dY2ElEd_GK58gGTn0qdnnrBQ4dJoXM96uKE; ar_debug=1; APC=AfxxVi6sxW-u8XfqJFOEroJ1FSC6gpiHfhkgfgyjOCzfYSUp_LDL4Q
Source: global traffic HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /sadbundle/1535206504467815149/media/6fc2d839f7cf510e00c9f5bd1132889f.jpg HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic DNS traffic detected: DNS query: www.wbtd.com
Source: global traffic DNS traffic detected: DNS query: www.haoqq.com
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic DNS traffic detected: DNS query: 8proof.com
Source: global traffic DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic DNS traffic detected: DNS query: ad.turn.com
Source: global traffic DNS traffic detected: DNS query: dclk-match.dotomi.com
Source: global traffic DNS traffic detected: DNS query: a.c.appier.net
Source: global traffic DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic DNS traffic detected: DNS query: s.uuidksinc.net
Source: global traffic DNS traffic detected: DNS query: b1sync.zemanta.com
Source: global traffic DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic DNS traffic detected: DNS query: s0.2mdn.net
Source: global traffic DNS traffic detected: DNS query: widget.us.criteo.com
Source: global traffic DNS traffic detected: DNS query: r.turn.com
Source: global traffic DNS traffic detected: DNS query: www.googletagservices.com
Source: global traffic DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic DNS traffic detected: DNS query: ads.travelaudience.com
Source: global traffic DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic DNS traffic detected: DNS query: creativecdn.com
Source: global traffic DNS traffic detected: DNS query: gw-iad-bid.ymmobi.com
Source: global traffic DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic DNS traffic detected: DNS query: sync.teads.tv
Source: global traffic DNS traffic detected: DNS query: tr.blismedia.com
Source: global traffic DNS traffic detected: DNS query: www.temu.com
Source: global traffic DNS traffic detected: DNS query: pool.admedo.com
Source: global traffic DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic DNS traffic detected: DNS query: ads.stickyadstv.com
Source: global traffic DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic DNS traffic detected: DNS query: fw.adsafeprotected.com
Source: global traffic DNS traffic detected: DNS query: 1f2e7.v.fwmrm.net
Source: global traffic DNS traffic detected: DNS query: tpt.dotomi.com
Source: global traffic DNS traffic detected: DNS query: tpt.mediaplex.com
Source: global traffic DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic DNS traffic detected: DNS query: image8.pubmatic.com
Source: global traffic DNS traffic detected: DNS query: image2.pubmatic.com
Source: unknown HTTP traffic detected: POST /el/AGSKWxWEbiabbLcNoqCZt7wzcCVppA1KKQMW-PianScEZ6BnlzNeqGt1pTIKPngiL0rWzyofm4KJEWllWCzqOLNodixwAwx9j3df6SN3r6QXQ3jwstxLWDZM7EXCM-1k0x4BwvQS7B2icQ== HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveContent-Length: 247sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.haoqq.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.haoqq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: chromecache_338.2.dr, chromecache_195.2.dr String found in binary or memory: http://ad.doubleclick.net/viewad/817-grey.gif
Source: chromecache_317.2.dr, chromecache_306.2.dr String found in binary or memory: http://gambit.ph
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: http://google.com
Source: chromecache_352.2.dr, chromecache_267.2.dr, chromecache_345.2.dr, chromecache_276.2.dr String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_401.2.dr, chromecache_294.2.dr String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_352.2.dr, chromecache_267.2.dr, chromecache_345.2.dr, chromecache_276.2.dr String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_214.2.dr String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_214.2.dr String found in binary or memory: https://ad.doubleclick.net/
Source: chromecache_222.2.dr String found in binary or memory: https://ads.stickyadstv.com/user-matching?id=11
Source: chromecache_251.2.dr, chromecache_285.2.dr String found in binary or memory: https://adsense.com.
Source: chromecache_396.2.dr, chromecache_267.2.dr, chromecache_330.2.dr, chromecache_276.2.dr String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_396.2.dr, chromecache_330.2.dr String found in binary or memory: https://cdn.ampproject.org/rtv/
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_278.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0
Source: chromecache_278.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0
Source: chromecache_350.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm
Source: chromecache_286.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_dbm&gdpr=0
Source: chromecache_222.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_cm&google_dbm&gdpr=0
Source: chromecache_350.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_cm&google_dbm
Source: chromecache_286.2.dr String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=tremor_video_dbm&google_cm&google_dbm&gdpr=0
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_425.2.dr, chromecache_244.2.dr String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_278.2.dr String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.ne
Source: chromecache_354.2.dr, chromecache_427.2.dr, chromecache_231.2.dr String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_354.2.dr String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231
Source: chromecache_427.2.dr, chromecache_231.2.dr String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_354.2.dr String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231
Source: chromecache_427.2.dr, chromecache_231.2.dr String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_231.2.dr String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_427.2.dr, chromecache_231.2.dr String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_220.2.dr, chromecache_341.2.dr String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_276.2.dr String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_276.2.dr String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_220.2.dr String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_341.2.dr String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2)
Source: chromecache_341.2.dr String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv79oQ.woff2)
Source: chromecache_341.2.dr String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvD9oS_a.woff2)
Source: chromecache_341.2.dr String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2)
Source: chromecache_341.2.dr String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2)
Source: chromecache_341.2.dr String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB77TKx9.woff2
Source: chromecache_341.2.dr String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBD7TA.woff2)
Source: chromecache_341.2.dr String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBP7TKx9.woff2
Source: chromecache_341.2.dr String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBT7TKx9.woff2
Source: chromecache_341.2.dr String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB_7TKx9.woff2
Source: chromecache_205.2.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_205.2.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_205.2.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_205.2.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_205.2.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_205.2.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_205.2.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_436.2.dr, chromecache_326.2.dr, chromecache_389.2.dr String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_404.2.dr, chromecache_304.2.dr String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: chromecache_372.2.dr, chromecache_214.2.dr String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_436.2.dr, chromecache_326.2.dr, chromecache_389.2.dr String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_436.2.dr, chromecache_389.2.dr String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_345.2.dr, chromecache_276.2.dr String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_214.2.dr String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_278.2.dr String found in binary or memory: https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=$
Source: chromecache_276.2.dr, chromecache_285.2.dr, chromecache_407.2.dr, chromecache_408.2.dr, chromecache_423.2.dr, chromecache_256.2.dr, chromecache_263.2.dr String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_354.2.dr, chromecache_427.2.dr, chromecache_231.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-fallback2
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-later2
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-pagehide2
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-start2
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_197.2.dr, chromecache_199.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_251.2.dr, chromecache_285.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_352.2.dr, chromecache_372.2.dr, chromecache_214.2.dr, chromecache_345.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_399.2.dr, chromecache_374.2.dr, chromecache_312.2.dr, chromecache_433.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss
Source: chromecache_354.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=231
Source: chromecache_427.2.dr, chromecache_231.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_396.2.dr, chromecache_330.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_257.2.dr, chromecache_423.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=urind
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_388.2.dr, chromecache_434.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: chromecache_276.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_352.2.dr, chromecache_267.2.dr, chromecache_345.2.dr, chromecache_276.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_302.2.dr, chromecache_417.2.dr, chromecache_242.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-1673399160710718
Source: chromecache_352.2.dr, chromecache_257.2.dr, chromecache_267.2.dr, chromecache_251.2.dr, chromecache_345.2.dr, chromecache_276.2.dr, chromecache_285.2.dr, chromecache_423.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_267.2.dr, chromecache_251.2.dr, chromecache_276.2.dr, chromecache_285.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_285.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_214.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_276.2.dr, chromecache_285.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_246.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_354.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231
Source: chromecache_427.2.dr, chromecache_231.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_338.2.dr, chromecache_195.2.dr String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_338.2.dr, chromecache_195.2.dr String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_286.2.dr String found in binary or memory: https://sync.search.spotxchange.com/partner?adv_id=7025&gdpr=0&redir=https%3A%2F%2Fcm.g.doubleclick.
Source: chromecache_350.2.dr String found in binary or memory: https://sync.teads.tv/um?eid=3&uid=&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dtea
Source: chromecache_231.2.dr String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_427.2.dr, chromecache_231.2.dr String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_222.2.dr String found in binary or memory: https://ups.analytics.yahoo.com/ups/58269/sync?_origin=1&gdpr=0&redir=true
Source: chromecache_350.2.dr String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doublec
Source: chromecache_231.2.dr String found in binary or memory: https://www.google.com
Source: chromecache_251.2.dr, chromecache_285.2.dr String found in binary or memory: https://www.google.com/adsense
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_354.2.dr, chromecache_267.2.dr, chromecache_276.2.dr, chromecache_427.2.dr, chromecache_231.2.dr String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_188.2.dr, chromecache_255.2.dr, chromecache_320.2.dr, chromecache_376.2.dr String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_276.2.dr String found in binary or memory: https://www.gstatic.com
Source: chromecache_267.2.dr, chromecache_276.2.dr String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50509
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50515
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50517
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50519
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50518
Source: unknown Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50544 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50524
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50525
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50529
Source: unknown Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown Network traffic detected: HTTP traffic on port 50524 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50535
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50537
Source: unknown Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50539
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50538
Source: unknown Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50531
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50533
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50547
Source: unknown Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50542
Source: unknown Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50544
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50543
Source: unknown Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50515 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50458 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50066 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50325 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50325 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.6:50355 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:50394 version: TLS 1.2
Source: classification engine Classification label: mal48.win@24/418@155/56
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2292,i,14619693789837683360,10101700089954709903,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.wbtd.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 --field-trial-handle=2292,i,14619693789837683360,10101700089954709903,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1525654 URL: https://www.wbtd.com/ Startdate: 04/10/2024 Architecture: WINDOWS Score: 48 15 sync.search.spotxchange.com 2->15 17 pr-bh.ybp.yahoo.com 2->17 19 2 other IPs or domains 2->19 33 Antivirus detection for URL or domain 2->33 7 chrome.exe 1 2->7         started        10 chrome.exe 2->10         started        signatures3 process4 dnsIp5 21 192.168.2.5 unknown unknown 7->21 23 192.168.2.6, 443, 49698, 49704 unknown unknown 7->23 25 239.255.255.250 unknown Reserved 7->25 12 chrome.exe 7->12         started        process6 dnsIp7 27 presentation-ams1.turn.com 46.228.164.11 TURNGB United Kingdom 12->27 29 wbtd.com 15.197.225.128, 443, 49704, 49705 TANDEMUS United States 12->29 31 90 other IPs or domains 12->31
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
15.197.225.128
 wbtd.com United States
7430 TANDEMUS false
37.252.171.149
 unknown European Union
29990 ASN-APPNEXUS false
35.190.0.66
 ads.travelaudience.com United States
15169 GOOGLEUS false
142.250.185.226
 unknown United States
15169 GOOGLEUS false
63.34.85.210
 ds-pr-bh.ybp.gysm.yahoodns.net United States
16509 AMAZON-02US false
46.137.57.71
 match.prod.bidr.io Ireland
16509 AMAZON-02US false
20.157.217.65
 gw-c-eu-isp.temu.com United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
142.250.186.70
 unknown United States
15169 GOOGLEUS false
198.47.127.205
 pug-ams-bc.pubmnet.com United States
62713 AS-PUBMATICUS false
3.77.232.241
 cdn.w55c.net United States
16509 AMAZON-02US false
3.209.57.129
 unknown United States
14618 AMAZON-AESUS false
142.250.184.198
 unknown United States
15169 GOOGLEUS false
142.250.184.194
 unknown United States
15169 GOOGLEUS false
172.217.18.6
 s0.2mdn.net United States
15169 GOOGLEUS false
52.48.108.123
 unknown United States
16509 AMAZON-02US false
104.18.36.155
 unknown United States
13335 CLOUDFLARENETUS false
47.238.94.14
 www.haoqq.com United States
20115 CHARTER-20115US false
185.184.8.90
 creativecdn.com Poland
204995 RTB-HOUSE-AMSNL false
239.255.255.250
 unknown Reserved
unknown unknown false
198.47.127.18
 imgsync-amsfpairbc.pubmnet.com United States
62713 AS-PUBMATICUS false
35.206.140.87
 adizio-stable-europe-west1.pumpkin.uverse.iponweb.net United States
19527 GOOGLE-2US false
34.243.210.180
 unknown United States
16509 AMAZON-02US false
142.250.186.142
 www3.l.google.com United States
15169 GOOGLEUS false
47.253.61.56
 bid-iad-static.yeahtargeter.com United States
45102 CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC false
172.217.16.194
 www.googletagservices.com United States
15169 GOOGLEUS false
52.223.40.198
 match.adsrvr.org United States
8987 AMAZONEXPANSIONGB false
142.250.186.102
 unknown United States
15169 GOOGLEUS false
50.31.142.31
 chidc2.outbrain.org United States
22075 AS-OUTBRAINUS false
52.116.53.150
 8proof.com United States
36351 SOFTLAYERUS false
35.214.136.108
 user-data-eu.bidswitch.net United States
19527 GOOGLE-2US false
35.204.74.118
 um.simpli.fi United States
15169 GOOGLEUS false
185.89.210.212
 ib.anycast.adnxs.com Germany
29990 ASN-APPNEXUS false
142.250.186.130
 googleads.g.doubleclick.net United States
15169 GOOGLEUS false
3.71.149.231
 ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud United States
16509 AMAZON-02US false
172.64.151.101
 dsum-sec.casalemedia.com United States
13335 CLOUDFLARENETUS false
142.250.185.166
 unknown United States
15169 GOOGLEUS false
216.58.206.38
 unknown United States
15169 GOOGLEUS false
216.58.206.36
 www.google.com United States
15169 GOOGLEUS false
35.244.159.8
 us-u.openx.net United States
15169 GOOGLEUS false
46.228.164.11
 presentation-ams1.turn.com United Kingdom
56396 TURNGB false
185.98.54.153
 s.uuidksinc.net Netherlands
39572 ADVANCEDHOSTERS-ASNL false
52.214.60.119
 firewall-external-2134955858.eu-west-1.elb.amazonaws.com United States
16509 AMAZON-02US false
142.250.186.134
 ad.doubleclick.net United States
15169 GOOGLEUS false
172.217.18.110
 unknown United States
15169 GOOGLEUS false
34.96.105.8
 tr.blismedia.com United States
15169 GOOGLEUS false
142.250.186.98
 unknown United States
15169 GOOGLEUS false
76.223.111.18
 eu-eb2.3lift.com United States
16509 AMAZON-02US false
178.250.1.9
 widget.nl3.vip.prod.criteo.com France
44788 ASN-CRITEO-EUROPEFR false
74.119.117.16
 widget.us5.vip.prod.criteo.com United States
19750 AS-CRITEOUS false
142.250.185.132
 unknown United States
15169 GOOGLEUS false
34.197.42.150
 partners-alb-1113315349.us-east-1.elb.amazonaws.com United States
14618 AMAZON-AESUS false
142.250.181.226
 cm.g.doubleclick.net United States
15169 GOOGLEUS false
34.98.64.218
 unknown United States
15169 GOOGLEUS false
142.250.186.166
 unknown United States
15169 GOOGLEUS false

Private

IP
192.168.2.6
192.168.2.5

Contacted Domains

Name IP Active
um.simpli.fi 35.204.74.118 true
tr.blismedia.com 34.96.105.8 true
www.googletagservices.com 172.217.16.194 true
user-data-eu.bidswitch.net 35.214.136.108 true
eu-eb2.3lift.com 76.223.111.18 true
cdn.w55c.net 3.77.232.241 true
bid-iad-static.yeahtargeter.com 47.253.61.56 true
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud 3.71.149.231 true
wbtd.com 15.197.225.128 true
widget.nl3.vip.prod.criteo.com 178.250.1.9 true
cm.g.doubleclick.net 142.250.181.226 true
ds-pr-bh.ybp.gysm.yahoodns.net 63.34.85.210 true
www.google.com 216.58.206.36 true
match.adsrvr.org 52.223.40.198 true
www.haoqq.com 47.238.94.14 true
match.prod.bidr.io 46.137.57.71 true
chidc2.outbrain.org 50.31.142.31 true
creativecdn.com 185.184.8.90 true
us-u.openx.net 35.244.159.8 true
ad.doubleclick.net 142.250.186.134 true
s.uuidksinc.net 185.98.54.153 true
gw-c-eu-isp.temu.com 20.157.217.65 true
8proof.com 52.116.53.150 true
imgsync-amsfpairbc.pubmnet.com 198.47.127.18 true
adizio-stable-europe-west1.pumpkin.uverse.iponweb.net 35.206.140.87 true
firewall-external-2134955858.eu-west-1.elb.amazonaws.com 52.214.60.119 true
googleads.g.doubleclick.net 142.250.186.130 true
www3.l.google.com 142.250.186.142 true
dsum-sec.casalemedia.com 172.64.151.101 true
ads.travelaudience.com 35.190.0.66 true
presentation-ams1.turn.com 46.228.164.11 true
pug-ams-bc.pubmnet.com 198.47.127.205 true
partners-alb-1113315349.us-east-1.elb.amazonaws.com 34.197.42.150 true
ib.anycast.adnxs.com 185.89.210.212 true
s0.2mdn.net 172.217.18.6 true
widget.us5.vip.prod.criteo.com 74.119.117.16 true
gw-iad-bid.ymmobi.com unknown unknown
sync.teads.tv unknown unknown
pm.w55c.net unknown unknown
image8.pubmatic.com unknown unknown
ups.analytics.yahoo.com unknown unknown
ads.stickyadstv.com unknown unknown
fundingchoicesmessages.google.com unknown unknown
fw.adsafeprotected.com unknown unknown
a.c.appier.net unknown unknown
image2.pubmatic.com unknown unknown
www.temu.com unknown unknown
tpt.dotomi.com unknown unknown
dis.criteo.com unknown unknown
widget.us.criteo.com unknown unknown
pr-bh.ybp.yahoo.com unknown unknown
x.bidswitch.net unknown unknown
r.turn.com unknown unknown
ad.turn.com unknown unknown
1f2e7.v.fwmrm.net unknown unknown
www.wbtd.com unknown unknown
tpt.mediaplex.com unknown unknown
pool.admedo.com unknown unknown
ib.adnxs.com unknown unknown
sync.search.spotxchange.com unknown unknown
partners.tremorhub.com unknown unknown
dclk-match.dotomi.com unknown unknown
eb2.3lift.com unknown unknown
b1sync.zemanta.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://s0.2mdn.net/sadbundle/1535206504467815149/media/25fcc0797a2837d2f439c5a924fd40a6.svg false
    		unknown
    https://fundingchoicesmessages.google.com/el/AGSKWxV6CAa4i_hGLyfG1GnmyIhZkPBqPlM7CBxhH2w4IdeExZAX8XuwQAnorMaRmmliMCzFNLP-d5iDo1fLxc_pO299VdTZEguoS_01RdcrFouyYIo13DPfG_rWFtoxbXv9519Gagfqkw== false
      		unknown
      https://www.haoqq.com/pages/assets/picture/prestashop.png false
        		unknown
        https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D false
          		unknown
          https://www.haoqq.com/pages/assets/css/css2.css false
            		unknown
            https://match.adsrvr.org/track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmQCvToyhvfM6gk2vMYoxrJQZorSrtw93am8KOb5SbI2bnCwv6k0SKPOy8pZBCOmRCfwi8Bd0Z54Ptt6QOOx0dSi30UFYLO6Zm11 false
              		unknown
              https://cm.g.doubleclick.net/pixel/attr?d=AHNF13IUKnPygisc1SVSIAl_6VxOJ9jS4uztRUM4KTV9FLgRkGCpljYd8R2BKcK-9j-nq2UoEmmmCQ false
                		unknown
                https://www.haoqq.com/pages/assets/image/loader.gif false
                  		unknown
                  https://fundingchoicesmessages.google.com/i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F6ACA8904-9C3D-4681-60D6-67C6447ECD99.html&ers=2 false
                    		unknown
                    https://googleads.g.doubleclick.net/pagead/adview?ai=CDNeaS9T_ZpnWAa2dvPIP7626gAyM7O2yerX2tr76ErCQHxABIOfA1G1gyQagAZu5y5wDyAEJqAMByAPLBKoEzgFP0Muz49MN5LepIXnNX2sWNLxMALjBFfUbB0OZ2Y0CJtCvkfyDGTTHkvgwdHFxHOZPYjHlSnAkfjxVHg7khwWwbSF-mOD2pnLEQM0aRU-cye1QN1svxQfKt4w1qmK1C6_lgsJpSig58jbAj5r_X7Xa2RcNQkg64BuGTdiTL6Ze5Zc8uCeSGxuJNBBw3Mos-MSRXrVt2jk195dptrpa4u92Fh3hUoYfOGkZLPzpSB6kEGmMZPHIo9hsmqYNijUzO_i8hzKhl_YCoGzyT_FAcMAE78rGuP0EiAX82IfGBaAGLoAHzca0Y6gH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwDyBwQQmMgH0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYicHTqNL0iAOaCXtodHRwczovL3d3dy5tYXJxdWlzYXB0cy5jb20vP2xmX3NvdXJjZT0xMjM1JnV0bV9jYW1wYWlnbj0xNDg5MTAzOTk2JnV0bV9zb3VyY2U9Z29vZ2xlJnV0bV9tZWRpdW09Y3BjJnV0bV90ZXJtPSZnYWRfc291cmNlPTWACgHICwHaDBAKChDQ1e2A6umXvDkSAgED2BMD0BUBgBcBshceChoIABIUcHViLTE2NzMzOTkxNjA3MTA3MTgYABgBuhcCOAGyGAkSApNOGC4iAQDQGAE&sigh=G4BK4_YU2lA&uach_m=%5BUACH%5D&ase=2&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4EYAQ&template_id=5000&nis=6 false
                      		unknown
                      https://fundingchoicesmessages.google.com/f/AGSKWxVXyEvQ8rr_BoQhqFBmSyhHFBY8TVHaXqWthoyB0cqzuBrNmLKKWj9DvZo73bHB3Zg42zHyHtCxZLCLhMD0SVD9dQ8OYiBt_wWfDGQEiJrh-njbg3paxBCGtFSliXExuETImT-9GQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDY3LDI2MTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOSw2XSxudWxsLDIsbnVsbCwiZW4tR0IiLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly93d3cuaGFvcXEuY29tLyIsbnVsbCxbWzgsImVza1dYU0ZIc1FnIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d false
                        		unknown
                        https://www.haoqq.com/ false
                          		unknown
                          https://s0.2mdn.net/sadbundle/1535206504467815149/media/a3a0e34ff72c160c1b186677f13e0128.svg false
                            		unknown
                            https://googleads.g.doubleclick.net/pagead/interaction/?ai=CFeTcZdT_ZruhHKGYvPIP3ZakyAi8lYK7erW-qerjEr__uePXAhABIOfA1G1gyQagAcjHtfICyAEJqAMByAObBKoE8QFP0HSpQqtnowi4TpehjfUpfte8xmgk_70lAxf2K4jBJ-M2kttU3TVSeQPcXsgks3irtvstgv5XG8KUnld0ln0ne99Kk3AhmGJjpxVNBrSn7oFvqItbw9sBg2pvC7odKaCgGtEQ-Lk-5Ic97fTc7OvyNFlDu1csPYBPdyNiuJ9Zcqd-JO1gE8Ay7uXeRuG8jXckMLiHJ8bmGiAEXIRQsId7mD_lL4Fsh_YRFf1J38J2nB5vWTxa99oGxqjd4Z5CwUEUcYyuDM6z0xAGDOy8yqHsT9sMJqusrCiQ2k1QicQ0HunnJZsI3d_lTho5anFiMtEWwASIxY3QtwTgBAOIBbLp_IRJkAYBoAZMgAeguMqNAagH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WPzHoLXS9IgDgAoBmAsByAsBgAwBqg0CVVOwE_7TxxfQEwDYEwrYFAHQFQH4FgGAFwGyFwIYAugXBLIYCRIC5VkYTCIBAA&sigh=x1PVMGzSakY&cid=CAQSOwDpaXnfBGovcYskwqgVvps6VtpgJx16c7xxIUJWjoxmbGJab6wfNPHPSHQCIM-v6pdL9r3kYjLayhAp&label=window_focus&gqid=ZdT_ZuTmFpDp1PIPsoGZmQ0&qqid=CPvnpLXS9IgDFSEMTwgdXQsJiQ&fg=1 false
                              		unknown
                              https://um.simpli.fi/gp_match?google_gid=CAESEFi9PqLuqTCfmE2lDk5eZnw&google_cver=1&google_push=AXcoOmSdWHq4-e5JyuA-tIqiieYbVsQelGc07_N0LXqw6gPc5m_Q3M_32aCfbB6iWUy_u2v8p8v2B9jmEPWMukD8RaQ4pG1We68zaaA false
                                		unknown
                                https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0 false
                                  		unknown
                                  https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_hm=NWEyMmVhYzRhZTcxY2MwZjBiMzU1YzQ5ODYzZDZkNQ==&gdpr=&gdpr_consent= false
                                    		unknown
                                    https://cm.g.doubleclick.net/pixel/attr?d=AHNF13JACtVvlHwGv1kKZ8F7RBS0xG_qaVY5s6m2wTjamPBJObAKRt9MedOCqlvszxZ7x7huRaf7 false
                                      		unknown
                                      https://googleads.g.doubleclick.net/pagead/html/r20241001/r20190131/zrt_lookup_fy2021.html false
                                        		unknown
                                        https://s0.2mdn.net/sadbundle/1535206504467815149/media/6fc2d839f7cf510e00c9f5bd1132889f.jpg false
                                          		unknown
                                          https://x.bidswitch.net/sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQxuYB9T0MrxCVyup9i4f7mTKhXqB8yZiF1igUAyjU3WOayS_I3g-GE5uhNIiPgfC4rdzvOOtEjhP0gBfGuokmNO7MCYohrXU5b false
                                            		unknown
                                            https://www.haoqq.com/news/i/3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html false
                                              		unknown
                                              https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_dbm&gdpr=0 false
                                                		unknown
                                                https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0 false
                                                  		unknown
                                                  https://www.haoqq.com/pages/assets/fonts/fontawesome-webfont.woff false
                                                    		unknown
                                                    https://8proof.com/app/win?id=920623656406&ap=Zv_UeQADk10DohnmADzIxH8u-xlCsN8A3zSWxw&brid=g3FunpztdQ2ZStgF4wamsw&t=b false
                                                      		unknown
                                                      https://www.haoqq.com/pages/assets/picture/magento.svg false
                                                        		unknown
                                                        https://googleads.g.doubleclick.net/pagead/adview?ai=CmacBStT_Zr7NPPSUvPIP6_ucmQm-vcfmYdeIqO67DcCNtwEQASAAYMkGggEXY2EtcHViLTE2NzMzOTkxNjA3MTA3MTjIAQmoAwHIAwKqBMIBT9D06km8FS4J7JT2ZSJ7nsBXDLMjgaS_vobYRCDTEuxYRJpSGuVWBjQv-7xIATyrcVeji8OYABqqTSJqZtpZLYgKvSmkmx-Qu_lumE-wvy5IDGWHkQJjbdnFAbg5FcBCyL7V9EAB-wT9For-ayhyljKQx8bdTqvMJDz88CXlmBUEoWuoIrazM6RfEhzvU6MPdKqni6PSj-7JQxG5YokJtHWIh7IeSO6yG7K09oYcQ-5Ukwy2DqIF8_4hdHYde5gJ_6eABqehs8-1-siQMKAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpYxKnRqNL0iAOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMTY3MzM5OTE2MDcxMDcxOBgAGAw&sigh=j6kRbNrdK5I&uach_m=%5BUACH%5D&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8BgB false
                                                          		unknown
                                                          https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1 false
                                                            		unknown
                                                            https://cm.g.doubleclick.net/pixel?google_nid=oath_dbm&google_hm=eS11UWJiX0FSRTJ1SGUwTHVCQ0dkY294Z0hGZ1FtM3h1bn5B&gdpr=0 false
                                                              		unknown
                                                              https://match.prod.bidr.io/cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmT4o063xBBQDu0z4njujpW3iMXyySg6RrAn0VBLP2vry8QG1govK7gCAyoaJNfaM1IIP-17W1aBlEfY617IxoiLn9u3SbkN4a0 false
                                                                		unknown
                                                                https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmTyFCDwwx6UNnlLcmSN88RNjshcmNS5SmS2VOGMiQ0qsij0fWvXW6TkZOtmWF9T9iQmuHoMbQj8LlPgnZacn2DENsWg7qpOZYs false
                                                                  		unknown
                                                                  https://ad.doubleclick.net/pcs/view?xai=AKAOjsuvtIqzVY3ggWg3jVmRPkf4eU6UofNdZmU2iGH8lgkVsKG3xfGxi6O2lRHyOKn50YBLBiTc8MMX9QSagI6L5CaNPQZpEjxADTDWPZWTdYuONI2U1vduc5l9pQ31kaQgrLrKET67tDYUaF0Svqh8GOaRqwMkSqhfD5mOtOVYjQRCAJaHG0B81WmKbF0EQd7FZKUG_JFvsnTI&sai=AMfl-YQZJKu8l0SQ73izwOFHJYrUwCpfXmwD_G4vHiwb17J1h1X9KlyR2k-yockDal06uaYx0oPeQxsppA_IEe0q9zFenHZBh3kRRRI&sig=Cg0ArKJSzAcRQsGeMpwpEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9rYXkuY29tLGh0dHBzOi8vZG90b21pLmNvbQ&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5377&vt=11&dtpt=4171&dett=3&cstd=1198&cisv=r20241001.96553&vwbs=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl= false
                                                                    		unknown
                                                                    https://gw-iad-bid.ymmobi.com/adx/user/cookie_syn?pubid=Z29vZ2xlYWR4&google_gid=CAESEMubsfg7aw9eHiY9QDqBVSA&google_cver=1&google_push=AXcoOmTIr8seDQb_z6tw0YfTB36eULzlKSYmdeIO-RpgGl--1XRNf-DwqS-nBR9_-efeOV0xQL6nfUgai4DG0LXt7AK1rclHwHo31WXT false
                                                                      		unknown
                                                                      https://ads.travelaudience.com/google_pixel?google_gid=CAESEGEiavs7xorMj9f6JVwxzhA&google_cver=1&google_push=AXcoOmSulyuPz4s2VMwaw06B9jFvCD3Ea4zvFVN_jiFcqjgfjyvBrnsuuio5aJjQ9PpNZwTI7nE9QdVgHFylTAP5InkPiSOlbvVM-5Q false
                                                                        		unknown
                                                                        https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEO3o-dzrpHmCNhpaZvjzMH4&google_cver=1&gdpr=0&C=1 false
                                                                          		unknown
                                                                          https://www.haoqq.com/pages/assets/css/plugins.css false
                                                                            		unknown
                                                                            https://x.bidswitch.net/sync?ssp=google&google_gid=CAESEARoOq1I9E9A1tGLSs3wVGM&google_cver=1&google_push=AXcoOmQlNuKXVW9fBpgD-siEiVtBt4LuexHwI4ExChPK2qIXWgdBwX3zFr_LzncagEJVe_tGfNLvz0mcQplVS-eeS1RrBBZxrLawZQ false
                                                                              		unknown
                                                                              https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=731747807&adf=1645902383&pi=t.aa~a.3940796168~rp.4&w=1140&abgtt=6&fwrn=1&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1140x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&fwrattr=false&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280&nras=3&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=62&ady=1189&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=1342 false
                                                                                		unknown
                                                                                https://match.adsrvr.org/track/cmf/google?google_gid=CAESEDMpI2rSDFhjnqZvZHU1y7E&google_cver=1&google_push=AXcoOmQqDjvbOg9mh9Ke-eHDgTeGGYCzmctbUZo85ZhML4SeTOLGHbGXAx5LKbO3n6hKn0Nm2gEy5TVP3y-GOpx_XkUXiy4RoIvYa_o false
                                                                                  		unknown
                                                                                  https://match.prod.bidr.io/cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmRbtMccDxJg2BjT3wnvT1aepLpjWQ_QuS-yRl_uN-efUYE_YqPR6ef0-7Yh5T8BxoQ4rpvAjuN3vlHpI_ROEJWbBvpxn8ySqG3c&_bee_ppp=1 false
                                                                                    		unknown
                                                                                    https://googleads.g.doubleclick.net/pagead/interaction/?ai=CaPy8YdT_ZtWwGfzEvPIP4dmvsAqsuKLgeaDP2t-oE5rT0_rHPBABIOfA1G1gyQagAYa8z90pyAEJqAMByAObBKoE9wFP0EWgCNsR6eleUlqz_k0VM78gpeNEj7AfLw9XXGL0OoLRM6fWevKyfAlDNSEZeV5b8kE6sM_GlweNK3opoB6Cu6b8pwmKngOydkqegOfK_w0H8bJfl7GrSjZxU00R8KaD5sh6m16CXcfSLS_m5FJTJkSFVAoyp0oDU5--_9CFxM6FWM9Y1t4BSfdWSFl5kawLy0IxdpSGMVPXlVYyfNGDRHmMOtgPgOnT4WaD_7iO8l9Pk9cvb4DxHBIuGJ5bpmIGFlRCRjB-mY6VXLkK1WwBu5A8U6lm_qeNkYUxOSFNZagaXrpOOR0tVb1yvSE_lrHhmX74H4cJwASu8u2p-gTgBAOIBZb_xMhQkAYBoAZNgAeG9J-9BKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WNfuqbPS9IgDgAoBmAsByAsBgAwBqg0CVVOwE_GDtRnYEw3YFAHQFQH4FgGAFwGyFwIYArIYCRICu08YTSIBAA&sigh=kZv22eBEv80&cid=CAQSOwDpaXnfkS-bbuqP9x9QQyyOD2GRAoZdyeO5F5pGbPV0L8uEDBKTZo5XfOkU--scFfZXG7ofltUbClvT&label=window_focus&gqid=YdT_Zu7QFO_ox_APn8qF-Q4&qqid=CJXlrbPS9IgDFXwiTwgd4ewLpg&fg=1 false
                                                                                      		unknown
                                                                                      https://cm.g.doubleclick.net/pixel?google_nid=whaleco_services_llc&google_push=AXcoOmSG2y2CKSsJHjNe49B23UO6-5g3bFSL2LYXX_GQWIMBaewczfO2x8EyvksJW-qUf0IyZLinmX_ctJGlnpQh0UG90kQ-Di98fpQn false
                                                                                        		unknown
                                                                                        https://www.temu.com/api/adx/cm/pixel?google_gid=CAESEPv97O-fbD076H-t7qpclug&google_cver=1&google_push=AXcoOmTs1_ll0D_RCewYKHbjcou2C-D9XigwEMKV_u-aZD-O41ML3SE9fdZH5w_1zibbiRxTdKUAFgAe8aWsnlS_ljhlXIAw66tm7YJT false
                                                                                          		unknown
                                                                                          https://us-u.openx.net/w/1.0/cm?cc=1&id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D false
                                                                                            		unknown
                                                                                            https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=RTI4NTQ5ODgtQkYwMy00NkVBLTkzMDMtNTIzRDEyQjdFREZG&gdpr=-1&gdpr_consent= false
                                                                                              		unknown
                                                                                              https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=32B60805DE8843869CBAC4833A2F49DB&google_push=AXcoOmRuShbATQDatQq4sJWhdwSrBaGF1h8JWd189LN0U19evDjkxqz6PEo6NN4Cmk1GaEawPQp5AY2xig2e6DaJALkaVLbrCocgGg false
                                                                                                		unknown
                                                                                                https://googleads.g.doubleclick.net/xbbe/pixel?d=CLbFxQEQq9bcARio-uKYAjAB&v=APEucNWY-6eV-PamxnzS1IYVwACNrpTeCLFv0-YchtE3vR9t2wema9vG5z1iKaHit8wKiP_Fm7slvYlC4NPq7_TYrYF4LywVeWXrrF864smd7v7SXzepVaA false
                                                                                                  		unknown
                                                                                                  https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_cm&google_dbm false
                                                                                                    		unknown
                                                                                                    https://www.haoqq.com/pages/assets/fonts/92zatBhPNqw73oTd4g.woff2 false
                                                                                                      		unknown
                                                                                                      https://dis.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQSzC5C28pLStKXw6cnCDgYtDmb02nZs8CRLDZNTHqqdUV3nd42z4t072GipsN10sg314x9S-mLGUsd1gJTxb-zNADAAWLa&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 false
                                                                                                        		unknown
                                                                                                        https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=4075358053&adf=2063629977&pi=t.aa~a.2231736124~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042083&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042081828&bpp=1&bdt=2602&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1140x90&nras=4&correlator=7979588698718&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=1605&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31084127%2C44795922%2C95341936%2C95343328%2C95339678&oid=2&pvsid=2188456680695935&tmod=532925844&uas=3&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=1354 false
                                                                                                          		unknown
                                                                                                          https://8proof.com/app/win?id=920623517540&ap=Zv_UdQACjdoDog1KADJifyJCFfEqU75jO_Fshg&brid=cKo0JViAJj3Wq6Yup4JCNA&t=b false
                                                                                                            		unknown
                                                                                                            https://www.haoqq.com/pages/assets/js/custom.js false
                                                                                                              		unknown
                                                                                                              https://googleads.g.doubleclick.net/xbbe/pixel?d=CPfHxOMEEM2_2-oEGNKikZsCMAE&v=APEucNXhnXjF2sJ9tyF-VUC9xWNRJ5NC-o5pBxJKQb83I3CuqwyAcmRD3qKflRXX69i79_9PlTMDWa044gbi9Vl0jovCTNPXMg false
                                                                                                                		unknown
                                                                                                                https://googleads.g.doubleclick.net/pagead/interaction/?ai=CDzdqYdT_ZtOwGfzEvPIP4dmvsArLxLaNesry_oSVC4OT8KqMExABIOfA1G1gyQagAbC6odcDyAEJqAMByAPLBKoE_gFP0OS0SB8S7h4bYKBhphZMnxEFwCIVh9nc7Ok4gpTNZFpIWRlPc3fw-D8Yxy5LnVMSX3S0UIhvJwP9whCUQvpxqPBRn8AplAZPgPLhxC5O_2OZQfpWZp5cMC46gNHGSVRrZuw9IzpfufHWbvT2-EMM8JS4jYwuFTe0FoXNt8EQkisKlvU7ULC4BYNtNTsTCX4CDI8OzKpARKcwuymIrphptFkiaB1cRY1BwEvDvobpzzNYbNJk4EBY9xmlxSQB7SHImnHyrinxC5ga5edGYELOce7kKD8vnTep5owrMQl_Icz2d0MdJk7GOodLM9IPsnbA_YabW7wo-EwglWHO2cAE_8DAsvkBiAWWra-5BqAGLoAHrYOudqgH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB-C9sQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQKoB-qxsQKoB5m1sQKoB763sQKoB_jCsQKoB_vCsQLYBwDSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOljX7qmz0vSIA7EJ6Dm9CHBwFieACgGYCwHICwGADAHaDBEKCxDAwKKVlMy5heMBEgIBA6oNAlVTyA0B2BMMiBQE0BUB-BYBgBcBshcCGAG6FwI4AbIYCRICp08YLiIBANAYAegYAQ&sigh=gLV85-XVEJA&cid=CAQSOwDpaXnfkS-bbuqP9x9QQyyOD2GRAoZdyeO5F5pGbPV0L8uEDBKTZo5XfOkU--scFfZXG7ofltUbClvT&label=window_focus&gqid=YdT_Zu7QFO_ox_APn8qF-Q4&qqid=CJPlrbPS9IgDFXwiTwgd4ewLpg&fg=1 false
                                                                                                                  		unknown
                                                                                                                  https://creativecdn.com/cm-notify?pi=adxab&google_nid=rtb_house_us&google_gid=CAESEM_4e_-PjCsiqNDdDlZcgmU&google_cver=1&google_push=AXcoOmSMzdJch9f5yspzBreHk7MkJGMkYmQ7l_CBrHUxRVaoffKY4RNI2u5YLrO2puwm_HkGYBZSRSnlykknHeXLElmJuD0t50Kx0HxNIQ false
                                                                                                                    		unknown
                                                                                                                    https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=884246868&pi=t.aa~a.3958040794~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055445&bpp=1&bdt=9109&idt=1853&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C1200x280&nras=2&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=89&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1856 false
                                                                                                                      		unknown
                                                                                                                      https://www.haoqq.com/pages/assets/js/jquery.min.js false
                                                                                                                        		unknown
                                                                                                                        https://fundingchoicesmessages.google.com/el/AGSKWxWEbiabbLcNoqCZt7wzcCVppA1KKQMW-PianScEZ6BnlzNeqGt1pTIKPngiL0rWzyofm4KJEWllWCzqOLNodixwAwx9j3df6SN3r6QXQ3jwstxLWDZM7EXCM-1k0x4BwvQS7B2icQ== false
                                                                                                                          		unknown
                                                                                                                          https://pool.admedo.com/ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=google&bsw_custom_parameter=286fbcaf-c685-43ee-8bde-74ddd673711e false
                                                                                                                            		unknown
                                                                                                                            https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=90&adk=4075358053&adf=2063629977&pi=t.aa~a.2231736124~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042103&rafmt=1&to=qs&pwprc=7942162476&format=1200x90&url=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F6ACA8904-9C3D-4681-60D6-67C6447ECD99.html&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042101163&bpp=1&bdt=2065&idt=-M&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280&nras=3&correlator=8774979011906&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=796&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31087423%2C44798934%2C95343329%2C95335246&oid=2&pvsid=1792413502876461&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2075 false
                                                                                                                              		unknown
                                                                                                                              https://googleads.g.doubleclick.net/pagead/adview?ai=CF3eTStT_Zr3NPPSUvPIP6_ucmQnLxLaNesry_oSVC2QQASDnwNRtYMkGoAGwuqHXA8gBCagDAcgDywSqBNIBT9DwTZzcreVd7WdKxYcnKcQNLegB1X7jM1Zr-u0QfT-UwlSRamFVdnwIJ2JktFCc1Qh441o2neoo3VdK4OOZOhn9tZSSrHwYnOrmYtlyRhjqeEPvZ0VA-axbUcKlZQ5cedEmjySxqCUpiBtAKW7LOLrMiChjG7QjY4W3P_Z_U4wZDUXD8_tCnFOo4pwi0SnthxUZWuRmEjGY1U_vzMyOUsLaG9PDsq6Fw235HlhwYXO4wqww3buw10Q5D3WpdG63Z6ooJtZVu5tCirxz-g6NwCGCwAT_wMCy-QGIBZatr7kGkgUECAQYAZIFBAgFGASgBi6AB62DrnaoB9m2sQKoB6a-G6gHjs4bqAeT2BuoB_DgG6gH7paxAqgH_p6xAqgHr76xAqgH98KxAtgHAPIHBRC0jMUC0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYxKnRqNL0iAOaCaUBaHR0cHM6Ly93d3cua2F5YWsuY29tL3NlbWkvZ2RudGV4dC9ob3RlbF9nZW5lcmFsL2FueS9lbi5odG1sP2FpZD02Njk0NjM0MzAzOSZ0aWQ9JmxvY3A9Mjg0MCZsb2NpPSZuPWQmZD1jJmZpZD0mY2lkPTQxNzM2NTQ1MTc1MyZwaWQ9d3d3Lmhhb3FxLmNvbSZhY2VpZD0mZ2FkX3NvdXJjZT01gAoByAsB2gwQCgoQkKPHtJrPpJw1EgIBA9gTDIgUBNAVAYAXAbIXHgoaCAASFHB1Yi0xNjczMzk5MTYwNzEwNzE4GAAYAboXAjgBshgJEgKnTxguIgEA0BgB6BgB&sigh=X_XUzysFvXU&cmd=ChdjYS1wdWItMTY3MzM5OTE2MDcxMDcxOBDuAxgB&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgDpaXnfboqX4X_9rsqqHEEhQJnIT-6Qi_rPYbhoXaoKOEjva4ImuT4TosKBR7_MO7zHK86s9xctm5mG2Xcykyr4Zftb-54g5GSKlz4s8BgB&template_id=494&vis=1&nis=6 false
                                                                                                                                		unknown
                                                                                                                                https://widget.us.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmTAclBd83KAvnaABRyrRCf7yt7MOk-96fMjSy57xseyO8ttKEsYmU6H_0tsjTuI3BaYTkkxRTzWz_-2Ki9ETn3rAqtToDamDQs&google_gid=CAESEJqj2-HQrekGoW8FECk1TfQ&google_cver=1 false
                                                                                                                                  		unknown
                                                                                                                                  https://s0.2mdn.net/sadbundle/1535206504467815149/index.html?ev=01_252 false
                                                                                                                                    		unknown
                                                                                                                                    https://fundingchoicesmessages.google.com/i/ca-pub-1673399160710718?href=https%3A%2F%2Fwww.haoqq.com%2Fnews%2Fi%2F3B9C83E0-59BA-6ECB-DF71-67C6585B0E28.html&ers=2 false
                                                                                                                                      		unknown
                                                                                                                                      https://match.adsrvr.org/track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1 false
                                                                                                                                        		unknown
                                                                                                                                        https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} false
                                                                                                                                          		unknown
                                                                                                                                          https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCMXlVN05fNmtBQUJlN3dNeFYyZw&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw&bee_sync_partners=&bee_sync_current_partner=adx&bee_sync_hop_count=1 false
                                                                                                                                            		unknown
                                                                                                                                            https://googleads.g.doubleclick.net/pagead/interaction/?ai=CF9t9S9T_ZpnWAa2dvPIP7626gAyM7O2yerX2tr76ErCQHxABIOfA1G1gyQagAZu5y5wDyAEJqAMByAPLBKoE0QFP0Muz49MN5LepIXnNX2sWNLxMALjBFfUbB0OZ2Y0CJtCvkfyDGTTHkvgwdHFxHOZPYjHlSnAkfjxVHg7khwWwbSF-mOD2pnLEQM0aRU-cye1QN1svxQfKt4w1qmK1C6_lgsJpSig58jbAj5r_X7Xa2RcNQkg64BuGTdiTL6Ze5Zc8uCeSGxuJNBBw3Mos-MSRXrVt2jk195dptrpa4u92Fh3hUsQdGfv1pzrs8tjVhcOhyHP7idLok4gVELaBFlQ0MBGNjxisfmlICQGD-VcfacAE78rGuP0EiAX82IfGBaAGLoAHzca0Y6gH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH4L2xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAqgH6rGxAqgHmbWxAqgHvrexAqgH-MKxAqgH-8KxAtgHANIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_cE6WInB06jS9IgDsQmZiQGFumlbPoAKAZgLAcgLAYAMAdoMFQoKENDV7YDq6Ze8ORICAQNAAUoBJKoNAlVTyA0B2BMD0BUB-BYBgBcBshcCGAG6FwI4AbIYCRICk04YLiIBANAYAQ&sigh=u-MddZClIwg&cid=CAQSTwDpaXnfveAUNmBW3DIP4C91nkml_SMN3Hg2AHSGSs7Ftop1asYQtYb9NO9VmWgne4QnS7GY0ln__zk75HuRrRfdwuTWEC3iNDnMml_kF4E&label=window_focus&gqid=StT_ZrmHOoyI1PIPyfqEgQk&qqid=CNmn16jS9IgDFa0OTwgd75YOwA&fg=1 false
                                                                                                                                              		unknown
                                                                                                                                              https://ups.analytics.yahoo.com/ups/58269/sync?_origin=1&gdpr=0&redir=true false
                                                                                                                                                		unknown
                                                                                                                                                https://r.turn.com/r/cms/id/0/ddc/1/pid/18/uid/?gdpr=&gdpr_consent=&google_gid=CAESEE-2hABbNlvCQmyOE9XNGr8&google_cver=1 false
                                                                                                                                                  		unknown
                                                                                                                                                  https://ad.doubleclick.net/pcs/view?xai=AKAOjsuvtIqzVY3ggWg3jVmRPkf4eU6UofNdZmU2iGH8lgkVsKG3xfGxi6O2lRHyOKn50YBLBiTc8MMX9QSagI6L5CaNPQZpEjxADTDWPZWTdYuONI2U1vduc5l9pQ31kaQgrLrKET67tDYUaF0Svqh8GOaRqwMkSqhfD5mOtOVYjQRCAJaHG0B81WmKbF0EQd7FZKUG_JFvsnTI&sai=AMfl-YQZJKu8l0SQ73izwOFHJYrUwCpfXmwD_G4vHiwb17J1h1X9KlyR2k-yockDal06uaYx0oPeQxsppA_IEe0q9zFenHZBh3kRRRI&sig=Cg0ArKJSzAcRQsGeMpwpEAE&uach_m=%5BUACH%5D&crd=aHR0cHM6Ly9rYXkuY29tLGh0dHBzOi8vZG90b21pLmNvbQ&cry=1&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1206&cbvp=1&cstd=1198&cisv=r20241001.96553&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&arae=1&ftch=1&adurl= false
                                                                                                                                                    		unknown
                                                                                                                                                    https://cm.g.doubleclick.net/pixel?google_nid=ta&google_hm=uEvEQBppQdMHeu7YK221HQ&google_push=AXcoOmSulyuPz4s2VMwaw06B9jFvCD3Ea4zvFVN_jiFcqjgfjyvBrnsuuio5aJjQ9PpNZwTI7nE9QdVgHFylTAP5InkPiSOlbvVM-5Q false
                                                                                                                                                      		unknown
                                                                                                                                                      https://match.prod.bidr.io/cookie-sync/adx?google_gid=CAESEBRveydk5eFLhieKEjDnekk&google_cver=1&google_push=AXcoOmREUFDoKt58WD4hhRsoVeOseZi1I0Ys1Qg0n7KxI_pZydHReAj6Hp0QmeOAuXJg_Zb7NJCvbxXGTTcS7koVHG-ASIrh08pMxw&_bee_ppp=1 false
                                                                                                                                                        		unknown
                                                                                                                                                        https://cm.g.doubleclick.net/pixel?google_hm=b3VnRks2a2lCV3lPZnlKYlU5VF9aZw%3D%3D&google_nid=appier&google_push=AXcoOmSotlzXlITazuWCK3xBXY5xuChDBGEGIjGTS0t6K3S2l6WFtyeTYa2rAqT0_BU3OMnNoZndHNO1ql6rTBknJSdrWerSLKKqMQ false
                                                                                                                                                          		unknown
                                                                                                                                                          https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-1673399160710718&output=html&h=280&adk=1234807076&adf=2063629977&pi=t.aa~a.1836389361~rp.1&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042064&rafmt=1&to=qs&pwprc=7942162476&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042059375&bpp=1&bdt=13039&idt=1&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D2704f8406324721a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MboI7ICpcUqb3GYV7mnteyNH3631Q&gpic=UID%3D00000f23c94b23d1%3AT%3D1728042058%3ART%3D1728042058%3AS%3DALNI_MZ-hSD0IzVT1wUUiLYGumUziEHQrw&eo_id_str=ID%3Db4a5e61cc765553a%3AT%3D1728042058%3ART%3D1728042058%3AS%3DAA-AfjZfklDsV3KI35jmw7Cy6bKg&prev_fmts=0x0%2C1200x280%2C1200x280%2C1200x280%2C1200x280%2C1200x90%2C1263x907%2C468x60&nras=8&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=3475&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&psts=AOrYGsnWNeP75MdEBAfmYBN9W6xWnGSZ41PWiITiP14m81H9xmfuL_qWo11fMzbBf2s72c2fn72D870bhr-Ib76rS0E&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=6&fsb=1&dtd=4876 false
                                                                                                                                                            		unknown
                                                                                                                                                            https://fundingchoicesmessages.google.com/f/AGSKWxXIoFUECk4FNvCkloFhmBS2oxXCceKSam1esjWsJ0AtzzJXf6WEQfZj9CpxO3jSIRzerEvGRgArgeB-6xT1bWrHGL2lbouxguHuQLmvlFOUyN6QS-KH7VPj6WNJ4ksUBlOXuyq2x_QC8xWGD-qYu-Qksm8uU2ncCyX5VHLlAeFhAacxIZGPoRiQo0aG/__300x250px./writelayerad._468x80./ads/proximic./ad12. false
                                                                                                                                                              		unknown
                                                                                                                                                              https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1673399160710718&output=html&h=280&slotname=5424108534&adk=3166978744&adf=3025194257&pi=t.ma~as.5424108534&w=1200&abgtt=6&fwrn=4&fwrnh=100&lmt=1728042057&rafmt=1&format=1200x280&url=https%3A%2F%2Fwww.haoqq.com%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1728042055443&bpp=2&bdt=9108&idt=1840&shv=r20241001&mjsv=m202410010101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=5260686608363&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=0&ady=3136&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C95343329%2C95339679&oid=2&pvsid=2307661656001176&tmod=532925844&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEebr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1846 false
                                                                                                                                                                		unknown
                                                                                                                                                                https://fundingchoicesmessages.google.com/f/AGSKWxUppim6GlhNn98Sy4cq18snKjQ7Zb0LLow_-Ky3kt084XagRObmnO6ruMYJouPgI6-o6iQUp0I2TbjrqAfTZo2XNrPYi2-cTiCIY9lCNM8wdPHyKV4jdfL3QLadzLsUWTOxmRuv2w==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzI4MDQyMDYyLDc0MDAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOV0sbnVsbCwyLG51bGwsImVuLUdCIl0sImh0dHBzOi8vd3d3Lmhhb3FxLmNvbS8iLG51bGwsW1s4LCJlc2tXWFNGSHNRZyJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ false
                                                                                                                                                                  		unknown