Play interactive tourEdit tour

Windows Analysis Report
https://link.canada.mcdonalds.com/f/a/-7HbFTsbsJPCM-E6mcdGUA~~/AAQRxQA~/RgRo_Oy7P0QxaHR0cHM6Ly9zbWFydC5saW5rL3ZuNWN1b2xzd3lrcmM_bGlkPWJ2cGxicjIzZnF5dFcDc3BjQgpnErtnGmfgymqeUiN2cXh5eGhyNmRxQHByaXZhdGVyZWxheS5hcHBsZWlkLmNvbVgEAAAAsw~~

Overview

General Information

Sample URL:	https://link.canada.mcdonalds.com/f/a/-7HbFTsbsJPCM-E6mcdGUA~~/AAQRxQA~/RgRo_Oy7P0QxaHR0cHM6Ly9zbWFydC5saW5rL3ZuNWN1b2xzd3lrcmM_bGlkPWJ2cGxicjIzZnF5dFcDc3BjQgpnErtnGmfgymqeUiN2cXh5eGhyNmRxQHByaXZhdGVy
Analysis ID:	1541370
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Phishing

HTML page is missing a favicon

Source: https://www.mcdonalds.com/ca/en-ca/getmoremcds/mcdonaldsapp.html	HTTP Parser: No favicon
Source: https://www.mcdonalds.com/ca/en-ca/getmoremcds/mcdonaldsapp.html	HTTP Parser: No favicon
Source: https://www.mcdonalds.com/ca/en-ca/getmoremcds/mcdonaldsapp.html	HTTP Parser: No favicon
Source: https://www.mcdonalds.com/ca/en-ca/contact-us/faqs/faq-faqs/linked-payment.html	HTTP Parser: No favicon
Source: https://www.mcdonalds.com/ca/en-ca/contact-us/faqs/faq-faqs/linked-payment.html	HTTP Parser: No favicon

Compliance

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.17:58301 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:58364 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:58369 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:58466 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.64:443 -> 192.168.2.17:58467 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:58468 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.130:443 -> 192.168.2.17:58469 version: TLS 1.2

Networking

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.17:58279 -> 1.1.1.1:53

Detected suspicious crossdomain redirect

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: smart.link to https://www.mcdonalds.com/ca/en-ca/getmoremcds/mcdonaldsapp.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: smart.link to https://www.mcdonalds.com/ca/en-ca/contact-us/faqs/faq-faqs/linked-payment.html

HTTP GET or POST without a user agent

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /vn5cuolswykrc?lid=bvplbr23fqyt HTTP/1.1Host: smart.linkConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/api/js?v=3.43&libraries=geometry&client=gme-mcdonaldscorporation2&channel=USRWD-DEP-ProdChannel HTTP/1.1Host: maps.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/api/js?v=3.43&libraries=geometry&client=gme-mcdonaldscorporation2&channel=USRWD-DEP-ProdChannel HTTP/1.1Host: maps.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=vR3v4AUeK9O6Kav&MD=azyFgOgY HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=786ABB6B55C1DA777F000101%40AdobeOrg&d_nsid=0&ts=1729787732333 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://www.mcdonalds.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=786ABB6B55C1DA777F000101%40AdobeOrg&d_nsid=0&ts=1729787732333 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=54157055321002007103011052357242976248
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=786ABB6B55C1DA777F000101%40AdobeOrg&mid=54153988059080108413010172372882426279&ts=1729787733450 HTTP/1.1Host: smetrics.mcdonalds.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://www.mcdonalds.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=7BBD2AFCAF93C2B5DD05491FC3FDD742~-1~YAAQS7MUAgC9+K+SAQAA+whivwzMom3d2UiEqcH108E6D+I3QmpAXSoVbS07Cv62yLxKwcNHgm+cAxDrGNe48jGVoy5n/9AO2Ae2uYAIB3pOUDk+2Q7jq7JvIqP9gnGutFnXdsLfR9bfsDB7NnOdYO+OKehNcY7AfHuf6K39wPyjxa/CgCRWobTNMA6wHPAInBoX7vLt9XtMtRGXBNyC24fTj9gOXWGpWd0r/lk9Ectn+a5Ot+bh+Gz4NWOiWNcwyu0+/EBetfRWCv+xFiGksGTmtak0vuvHgbFeoVz7xXupCR7ajC4WwtFm13Y2Cv7HjV530L0oUPTgAGkT3LREVwWD4W6ojjvGhWlKVeZImR4bdiKZ7SVf5j7ZlV9Ofox64Ay9lDXkSsH1AX11UCbXLgCY66ye/2XGIQ214hwuvrg=~-1~-1~-1; bm_sz=248FAC21829CE881EC1639691ECBAB32~YAAQS7MUAgG9+K+SAQAA+whivxkLbmkIM2lAE9DP3wtE/3u3w4esq68OrKTXRfYERG8P903JK/jk5WCixa1vmJsBthWfMnyR0W6WyN968Vij2uajzIBEI7d01DyFf3IKvPzeT0ycWxUQC+JTXNQnqHfaHm4cPptNxz3nPMw2irOC/eVYLD3IvfUW9cTFEi6yQ1KX7CaKcfOvGO5Y7Bfg4sC1ENi6tyaVgy+BJRcrjjJzkBxxhbRosPah+SeKDLYfmi1LZKcDwr19tcu+XjYuwHdYoMts/PmP51lcEVWngQTugtOB2QyZdF7WskOhITwXcjzzJzApaBexYDdGTlrYf0nVGPVeWklZg+7yVzW0atjSC7cWUZTO3Gf6eZ4r3HzKBi2VprbebQ==~3556931~3162676; RT="z=1&dm=mcdonalds.com&si=k2ggx96ftfl&ss=m2niya34&sl=0&tt=0"; AMCVS_786ABB6B55C1DA777F000101%40AdobeOrg=1; AMCV_786ABB6B55C1DA777F000101%40AdobeOrg=179643557%7CMCIDTS%7C20021%7CMCMID%7C54153988059080108413010172372882426279%7CMCAAMLH-1730392533%7C6%7CMCAAMB-1730392533%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729794933s%7CNONE%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=786ABB6B55C1DA777F000101%40AdobeOrg&mid=54153988059080108413010172372882426279&ts=1729787733450 HTTP/1.1Host: smetrics.mcdonalds.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=248FAC21829CE881EC1639691ECBAB32~YAAQS7MUAgG9+K+SAQAA+whivxkLbmkIM2lAE9DP3wtE/3u3w4esq68OrKTXRfYERG8P903JK/jk5WCixa1vmJsBthWfMnyR0W6WyN968Vij2uajzIBEI7d01DyFf3IKvPzeT0ycWxUQC+JTXNQnqHfaHm4cPptNxz3nPMw2irOC/eVYLD3IvfUW9cTFEi6yQ1KX7CaKcfOvGO5Y7Bfg4sC1ENi6tyaVgy+BJRcrjjJzkBxxhbRosPah+SeKDLYfmi1LZKcDwr19tcu+XjYuwHdYoMts/PmP51lcEVWngQTugtOB2QyZdF7WskOhITwXcjzzJzApaBexYDdGTlrYf0nVGPVeWklZg+7yVzW0atjSC7cWUZTO3Gf6eZ4r3HzKBi2VprbebQ==~3556931~3162676; RT="z=1&dm=mcdonalds.com&si=k2ggx96ftfl&ss=m2niya34&sl=0&tt=0"; AMCVS_786ABB6B55C1DA777F000101%40AdobeOrg=1; _abck=7BBD2AFCAF93C2B5DD05491FC3FDD742~-1~YAAQXrMUAhRpQbGSAQAAHShivwzL3wGYSvmspSxCrYkepOyyU7q+t7wYV3BmiYBSxjPbcPDH+pGlCN52tElDRa2wjbcPddMi64dYQIC8jnQFAzffcJS6oI99pzJJztaIe/i49cdGaRw1hpZmhfHDXrCAmMIBhx5CD3rjgS1Tg10I5Dr3tKBQ2nnY555ORm7208Zb/3WYIXdYKWyp+LJtiqIMAa+KFhuFYFuEDaGl2IOb2dKV12ADA9UZ3RMGZkCm60+rhBSkv+fPQ5gA8dpV8nUAKrJmQDCf46W3g8b0KnGtws/AABHIQNwDbEPyNZEW52jY8waIIY5XjyB92DVB2Dpt1E9F3aoHpFF5lff4oaVdktt6V6/H91wIBsiH1rdshNZ5qAKChA9hJ5ucMsWyAjiJpQXF7JU2U9fRdHQwKSSn5IHfigAmSz5zvi21Cg==~-1~-1~-1; s_ecid=MCMID%7C54153988059080108413010172372882426279; AMCV_786ABB6B55C1DA777F000101%40AdobeOrg=179643557%7CMCIDTS%7C20021%7CMCMID%7C54153988059080108413010172372882426279%7CMCAAMLH-1730392533%7C6%7CMCAAMB-1730392533%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729794933s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /maps-api-v3/api/js/57/13/common.js HTTP/1.1Host: maps.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps-api-v3/api/js/57/13/util.js HTTP/1.1Host: maps.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=947571;type=mcms;cat=sitew0;ord=2302935901250;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=186755020;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=947571;type=mcms;cat=sitew0;ord=2302935901250;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=186755020;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html? HTTP/1.1Host: 947571.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /maps-api-v3/api/js/57/13/common.js HTTP/1.1Host: maps.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=947571;type=mcms;cat=sitew0;ord=2302935901250;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=186755020;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps-api-v3/api/js/57/13/util.js HTTP/1.1Host: maps.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=947571;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=764685887;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html? HTTP/1.1Host: 947571.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=947571;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=764685887;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CPiy8L25p4kDFRnsEQgdQiU7bA;src=947571;type=mcms;cat=sitew0;ord=2302935901250;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=186755020;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html? HTTP/1.1Host: 947571.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=947571;type=mcms;cat=sitew0;ord=2302935901250;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=186755020;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CLqlor65p4kDFWzZEQgd-G8gtg;src=947571;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=764685887;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html? HTTP/1.1Host: 947571.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3Dbf3aafda-9263-8b0c-9aea-5a44c2ac1186%26type%3D55%26m%3D7&ex-fch=416613&ex-src=https://www.mcdonalds.com&ex-hargs=v%3D1.0%3Bc%3D3793746130001%3Bp%3DBF3AAFDA-9263-8B0C-9AEA-5A44C2AC1186 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/evnt/?adv=ilj0whd&ct=0:974z969&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10114904 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CPiy8L25p4kDFRnsEQgdQiU7bA;src=947571;type=mcms;cat=sitew0;ord=2302935901250;npa=0;auiddc=*;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=186755020;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=947571;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=764685887;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkKI-fK8s7-xeL_swlW52f9y2BVUqcHnY5ySJ26uTcuc2Q_zf_Aii17OdwV
Source: global traffic	HTTP traffic detected: GET /td/rul/780971155?random=1729787740318&cv=11&fst=1729787740318&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html&hn=www.googleadservices.com&frm=0&tiba=McDonald%27s%20App%20%7C%20McDonald%27s%20Canada&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkKI-fK8s7-xeL_swlW52f9y2BVUqcHnY5ySJ26uTcuc2Q_zf_Aii17OdwV
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3Dbf3aafda-9263-8b0c-9aea-5a44c2ac1186%26type%3D55%26m%3D7&ex-fch=416613&ex-src=https://www.mcdonalds.com&ex-hargs=v%3D1.0%3Bc%3D3793746130001%3Bp%3DBF3AAFDA-9263-8B0C-9AEA-5A44C2AC1186&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A995QE8aZEXiqEOia3NHUoI|t
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/780971155/?random=1729787740318&cv=11&fst=1729787740318&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html&hn=www.googleadservices.com&frm=0&tiba=McDonald%27s%20App%20%7C%20McDonald%27s%20Canada&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkKI-fK8s7-xeL_swlW52f9y2BVUqcHnY5ySJ26uTcuc2Q_zf_Aii17OdwV
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLqlor65p4kDFWzZEQgd-G8gtg;src=947571;npa=0;auiddc=*;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=764685887;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=23209d90-b0b9-45e0-b3ee-f70045040457&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=54157055321002007103011052357242976248
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10114904 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF13GmcCEOlvs8YsQmL1eXt9Xv3DN_sFEgEBAQHIG2ckZ9xS0iMA_eMAAA&S=AQAAAvT1xXes2gpjbV5xMWI6NeU
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CPiy8L25p4kDFRnsEQgdQiU7bA;src=947571;type=mcms;cat=sitew0;ord=2302935901250;npa=0;auiddc=*;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=186755020;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3Dbf3aafda-9263-8b0c-9aea-5a44c2ac1186%26type%3D55%26m%3D7&ex-fch=416613&ex-src=https://www.mcdonalds.com&ex-hargs=v%3D1.0%3Bc%3D3793746130001%3Bp%3DBF3AAFDA-9263-8B0C-9AEA-5A44C2AC1186&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A995QE8aZEXiqEOia3NHUoI; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=947571;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=764685887;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/780971155/?random=1729787740318&cv=11&fst=1729785600000&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html&hn=www.googleadservices.com&frm=0&tiba=McDonald%27s%20App%20%7C%20McDonald%27s%20Canada&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfldk2q9QQUD7da9swj2DS63fPQVcY5YmtGM08GjQ-PSOJP8OM&random=492649134&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/780971155/?random=1729787740318&cv=11&fst=1729787740318&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html&hn=www.googleadservices.com&frm=0&tiba=McDonald%27s%20App%20%7C%20McDonald%27s%20Canada&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLqlor65p4kDFWzZEQgd-G8gtg;src=947571;npa=0;auiddc=*;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html;ps=1;pcor=764685887;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=23209d90-b0b9-45e0-b3ee-f70045040457; TDCPM=CAESEgoDYWFtEgsImOHSi8Tirj0QBRgFKAEyCwjGv6uYlJW6PRAFOAFCHSIbCAESFwoTWGF4aXNDb29raWVQYXJ0bmVycxAAWgdpbGowd2hkYAFyA2FhbQ..
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044009591/?random=1512053858&cv=9&fst=1729787741202&num=1&npa=1&label=7ad7CIHLntABEPek6fED&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F947571.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPiy8L25p4kDFRnsEQgdQiU7bA%3Bsrc%3D947571%3Btype%3Dmcms%3Bcat%3Dsitew0%3Bord%3D2302935901250%3Bnpa%3D0%3Bauiddc%3D1899262850.1729787737%3Bu1%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fgetmoremcds%252Fmcdonaldsapp.html%3Bps%3D1%3Bpcor%3D186755020%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe4al0v9189957677za200%3Bgcd%3D13l3l3l3l1l1%3Bdma%3D0%3Btag_exp%3D101686685~101794737~101823847%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fgetmoremcds%252Fmcdonaldsapp.html%3F&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&top=https%3A%2F%2Fwww.mcdonalds.com%2F&capi=1&hn=www.googleadservices.com&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CP64zbLiy8vmNSITCJr21r-5p4kDFfqMgwcdNyMnozICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjojaHR0cHM6Ly85NDc1NzEuZmxzLmRvdWJsZWNsaWNrLm5ldC8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=MjMyMDlkOTAtYjBiOS00NWUwLWIzZWUtZjcwMDQ1MDQwNDU3&gdpr=0&gdpr_consent=&ttd_tdid=23209d90-b0b9-45e0-b3ee-f70045040457 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/780971155/?random=1729787740318&cv=11&fst=1729785600000&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html&hn=www.googleadservices.com&frm=0&tiba=McDonald%27s%20App%20%7C%20McDonald%27s%20Canada&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfldk2q9QQUD7da9swj2DS63fPQVcY5YmtGM08GjQ-PSOJP8OM&random=492649134&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/780971155?random=1729787743253&cv=11&fst=1729787743253&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html&label=HKfHCKicqd4BEJPZsvQC&hn=www.googleadservices.com&frm=0&tiba=McDonald%27s%20App%20%7C%20McDonald%27s%20Canada&gtm_ee=1&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion%3Ballow_custom_scripts%3Dtrue&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1044009591/?random=1512053858&cv=9&fst=1729787741202&num=1&npa=1&label=7ad7CIHLntABEPek6fED&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F947571.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPiy8L25p4kDFRnsEQgdQiU7bA%3Bsrc%3D947571%3Btype%3Dmcms%3Bcat%3Dsitew0%3Bord%3D2302935901250%3Bnpa%3D0%3Bauiddc%3D1899262850.1729787737%3Bu1%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fgetmoremcds%252Fmcdonaldsapp.html%3Bps%3D1%3Bpcor%3D186755020%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe4al0v9189957677za200%3Bgcd%3D13l3l3l3l1l1%3Bdma%3D0%3Btag_exp%3D101686685~101794737~101823847%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fgetmoremcds%252Fmcdonaldsapp.html%3F&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&top=https%3A%2F%2Fwww.mcdonalds.com%2F&capi=1&hn=www.googleadservices.com&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CP64zbLiy8vmNSITCJr21r-5p4kDFfqMgwcdNyMnozICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjojaHR0cHM6Ly85NDc1NzEuZmxzLmRvdWJsZWNsaWNrLm5ldC8&is_vtc=1&cid=CAQSKQCa7L7d_ZkArYlzGIQSbbz-uE3Eo2GLo4GqbFYxZwjxuMKTNBeHkIRV&random=2439187581&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=23209d90-b0b9-45e0-b3ee-f70045040457&google_gid=CAESEAAsej4Qqp2AtRQC6ZRlBNE&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=23209d90-b0b9-45e0-b3ee-f70045040457; TDCPM=CAESEgoDYWFtEgsImOHSi8Tirj0QBRIVCgZnb29nbGUSCwiKyNqXnue3PRAFGAUgASgBMgsIxr-rmJSVuj0QBTgBQh0iGwgBEhcKE1hheGlzQ29va2llUGFydG5lcnMQAFoHaWxqMHdoZGABcgZnb29nbGU.
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/780971155/?random=1015292093&cv=11&fst=1729787743253&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html&label=HKfHCKicqd4BEJPZsvQC&hn=www.googleadservices.com&frm=0&tiba=McDonald%27s%20App%20%7C%20McDonald%27s%20Canada&gtm_ee=1&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion%3Ballow_custom_scripts%3Dtrue&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBOAFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=COj70pytkK6FfSITCOHy1MC5p4kDFS2Jgwcdhv8JPjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoaaHR0cHM6Ly93d3cubWNkb25hbGRzLmNvbS9CV0NoRUk4T0RudUFZUTI4Q3ItLWZScnNDbUFSSXNBRllWVWIxZTkzMUhVVm5aa2ZuanlJWWZWcG5YbWhjVU9tM01jSlpFTmlfMk1OUmlULWVzdG43RnBNQQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1044009591/?random=1512053858&cv=9&fst=1729787741202&num=1&npa=1&label=7ad7CIHLntABEPek6fED&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F947571.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCPiy8L25p4kDFRnsEQgdQiU7bA%3Bsrc%3D947571%3Btype%3Dmcms%3Bcat%3Dsitew0%3Bord%3D2302935901250%3Bnpa%3D0%3Bauiddc%3D1899262850.1729787737%3Bu1%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fgetmoremcds%252Fmcdonaldsapp.html%3Bps%3D1%3Bpcor%3D186755020%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe4al0v9189957677za200%3Bgcd%3D13l3l3l3l1l1%3Bdma%3D0%3Btag_exp%3D101686685~101794737~101823847%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fgetmoremcds%252Fmcdonaldsapp.html%3F&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&top=https%3A%2F%2Fwww.mcdonalds.com%2F&capi=1&hn=www.googleadservices.com&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBQAFKJ3RyaWdnZXI7bmF2aWdhdGlvbi1zb3VyY2UsIGV2ZW50LXNvdXJjZWIECgICAw&pscrd=CP64zbLiy8vmNSITCJr21r-5p4kDFfqMgwcdNyMnozICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjojaHR0cHM6Ly85NDc1NzEuZmxzLmRvdWJsZWNsaWNrLm5ldC8&is_vtc=1&cid=CAQSKQCa7L7d_ZkArYlzGIQSbbz-uE3Eo2GLo4GqbFYxZwjxuMKTNBeHkIRV&random=2439187581&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/780971155/?random=1015292093&cv=11&fst=1729787743253&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html&label=HKfHCKicqd4BEJPZsvQC&hn=www.googleadservices.com&frm=0&tiba=McDonald%27s%20App%20%7C%20McDonald%27s%20Canada&gtm_ee=1&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion%3Ballow_custom_scripts%3Dtrue&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBOAFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=COj70pytkK6FfSITCOHy1MC5p4kDFS2Jgwcdhv8JPjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoaaHR0cHM6Ly93d3cubWNkb25hbGRzLmNvbS9CV0NoRUk4T0RudUFZUTI4Q3ItLWZScnNDbUFSSXNBRllWVWIxZTkzMUhVVm5aa2ZuanlJWWZWcG5YbWhjVU9tM01jSlpFTmlfMk1OUmlULWVzdG43RnBNQQ&is_vtc=1&cid=CAQSKQDpaXnffqFoZqQ65SexZSGi9MMlzTEPmlZUlOOL_4nFueosqiECn0mR&random=3321663808 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=23209d90-b0b9-45e0-b3ee-f70045040457; TDCPM=CAESEgoDYWFtEgsImOHSi8Tirj0QBRIVCgZnb29nbGUSCwj-sLeT_pS6PRAFEhYKB3J1Ymljb24SCwjG4beT_pS6PRAFGAUgAigBMgsIxr-rmJSVuj0QBTgBQh0iGwgBEhcKE1hheGlzQ29va2llUGFydG5lcnMQAFoHaWxqMHdoZGABcgdydWJpY29u
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/780971155/?random=1015292093&cv=11&fst=1729787743253&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html&label=HKfHCKicqd4BEJPZsvQC&hn=www.googleadservices.com&frm=0&tiba=McDonald%27s%20App%20%7C%20McDonald%27s%20Canada&gtm_ee=1&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion%3Ballow_custom_scripts%3Dtrue&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBOAFAAUonZXZlbnQtc291cmNlLCB0cmlnZ2VyO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=COj70pytkK6FfSITCOHy1MC5p4kDFS2Jgwcdhv8JPjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoaaHR0cHM6Ly93d3cubWNkb25hbGRzLmNvbS9CV0NoRUk4T0RudUFZUTI4Q3ItLWZScnNDbUFSSXNBRllWVWIxZTkzMUhVVm5aa2ZuanlJWWZWcG5YbWhjVU9tM01jSlpFTmlfMk1OUmlULWVzdG43RnBNQQ&is_vtc=1&cid=CAQSKQDpaXnffqFoZqQ65SexZSGi9MMlzTEPmlZUlOOL_4nFueosqiECn0mR&random=3321663808 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=23209d90-b0b9-45e0-b3ee-f70045040457 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3D23209d90-b0b9-45e0-b3ee-f70045040457 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=KkdUReRDBCq88n1VF6CpYJyet86gqiZSnC-caYDTDAQ_g29USeiQ3Z7cy9pGLMVquVxk8RpbkQzxY4V65kApSZHS1jTlsALB6c5AM038glI.; receive-cookie-deprecation=1; uuid2=3860346934824321125
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=3860346934824321125&ttd_tdid=23209d90-b0b9-45e0-b3ee-f70045040457 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=23209d90-b0b9-45e0-b3ee-f70045040457; TDCPM=CAESEgoDYWFtEgsImOHSi8Tirj0QBRIVCgZnb29nbGUSCwj-sLeT_pS6PRAFEhYKB3J1Ymljb24SCwjG4beT_pS6PRAFEhcKCGFwcG5leHVzEgsIot6lysTirj0QBRgFIAMoATILCMa_q5iUlbo9EAU4AUIdIhsIARIXChNYYXhpc0Nvb2tpZVBhcnRuZXJzEABaB2lsajB3aGRgAXIIYXBwbmV4dXM.
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=23209d90-b0b9-45e0-b3ee-f70045040457&partner_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dtapad HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=1830&partner_device_id=23209d90-b0b9-45e0-b3ee-f70045040457&partner_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dtapad HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1729787752325; TapAd_DID=16f7a3fd-e022-4403-937c-53d1c61034ba
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3D16f7a3fd-e022-4403-937c-53d1c61034ba%252Chttps%25253A%25252F%25252Fmatch.adsrvr.org%25252Ftrack%25252Fcmf%25252Fgeneric%25253Fttd_pid%25253Dtapad%252C HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=KkdUReRDBCq88n1VF6CpYJyet86gqiZSnC-caYDTDAQ_g29USeiQ3Z7cy9pGLMVquVxk8RpbkQzxY4V65kApSZHS1jTlsALB6c5AM038glI.; receive-cookie-deprecation=1; uuid2=3860346934824321125
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=3860346934824321125&pt=16f7a3fd-e022-4403-937c-53d1c61034ba%2Chttps%253A%252F%252Fmatch.adsrvr.org%252Ftrack%252Fcmf%252Fgeneric%253Fttd_pid%253Dtapad%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1729787752325; TapAd_DID=16f7a3fd-e022-4403-937c-53d1c61034ba; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=23209d90-b0b9-45e0-b3ee-f70045040457; TDCPM=CAESEgoDYWFtEgsImOHSi8Tirj0QBRIVCgZnb29nbGUSCwj-sLeT_pS6PRAFEhYKB3J1Ymljb24SCwjG4beT_pS6PRAFEhcKCGFwcG5leHVzEgsI8oi3yv6Uuj0QBRIUCgV0YXBhZBILCPCvt8r-lLo9EAUYBSAEKAEyCwjGv6uYlJW6PRAFOAFCHSIbCAESFwoTWGF4aXNDb29raWVQYXJ0bmVycxAAWgdpbGowd2hkYAFyBXRhcGFk
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=23209d90-b0b9-45e0-b3ee-f70045040457; TDCPM=CAESEgoDYWFtEgsImOHSi8Tirj0QBRIVCgZnb29nbGUSCwj-sLeT_pS6PRAFEhYKB3J1Ymljb24SCwjG4beT_pS6PRAFEhcKCGFwcG5leHVzEgsI8oi3yv6Uuj0QBRIUCgV0YXBhZBILCPCvt8r-lLo9EAUYBTgBQgQiAggB
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=23209d90-b0b9-45e0-b3ee-f70045040457&ttd_puid= HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1729787752325; TapAd_DID=16f7a3fd-e022-4403-937c-53d1c61034ba; TapAd_3WAY_SYNCS=2!7168
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=540&dpuuid=16f7a3fd-e022-4403-937c-53d1c61034ba&redir=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DADB%26partner_device_id%3D%24%7BDD_UUID%7D%26pt%3D16f7a3fd-e022-4403-937c-53d1c61034ba%252C%252C HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=54157055321002007103011052357242976248; dpm=54157055321002007103011052357242976248
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=ADB&partner_device_id=54157055321002007103011052357242976248&pt=16f7a3fd-e022-4403-937c-53d1c61034ba%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1729787752325; TapAd_DID=16f7a3fd-e022-4403-937c-53d1c61034ba; TapAd_3WAY_SYNCS=2!7168
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=vR3v4AUeK9O6Kav&MD=azyFgOgY HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAS3Au3shemH9vsi1WT6gNCGAnjXh5U%2BSKNW9HO/PsP5Pz94/82gZhDTrjxBTNY62SNfrmuJXfEZX1VX1qBTL8BgJKHwT6MmUIufUgrWmYocufFAuQ%2BekBuzGNtsz/cdh4CACeIHd0UJ/5g3wWMOtUFSe985Y6AJZvHylRQyayoM2Lok7F40Ymh8VzvoaiTRrCXSm%2B11KK2Fr7SAhbI0OKViNV2rwM23MX7%2BuoW8wdyQY7NEv8UA%2BhnS8dO/qYaC0d2DG0ip9BBC2mKdajImUMdq59usnX/KekYEhX2Q2s7D8CCXyzGm0EJb4FWQtX4ZtOv%2BEyRwv00k8Df8AyKEeuVsQZgAAED7Cw7K8x8MgGNpMbCS1CVewAc1%2B3KKw40Q%2BY8y0OAjN1HMdIjQAkY3OYwsaTmV6YcwUZznLv6qlEilTHVGwFiXcGu8rFkurlR5c58GOt5Lv8qrK/K8tASEnmxv%2BtmXUpBBFXbuiMQwn7Ru1fa9GPmeBG6Y52/w0%2Bh2XM1gFHqjm94BVxZpXXvhTD8TlTI5WoPY6/FK3HZerBmHwcPZSIWSBrNXgs2M30zuIAomd%2B75LUXdWdtjwOubCzpTZp8EJjowRd6vm9u0XL2gd/9WtWjJY/7u6HFVJFGcMfZxUv1dkFNjoiUFlvDFt/lWx1wk9RxUiCcBWh2%2BxPeJK3erNdeHV7kjMt85FNKviXmNhTMbgw5ThpEQoxExVVg/WkpcsnTmXXMgCx5E9MH/9mNunU6CmDirRPhfTgDQ2oIk1gPYSwE7VhFAl5iCJ0%2B2ms9MnltjmP7saaRJ9X/rgaH%2BBeYXo5IkTtMuL/iIJ7EM6WKixDyFzKi113v857c0L/VOzF0DJEn94DA5pRlGnvyYSpF5LR6b%2BEEHWQqAD6x1w3RB7r7hLr%2BZugVUWlB1x2hSgQYWq69%2BAKSMcYkYwfFm7dYzlMNoB%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1729787778User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 5E6B5A729D6B4A0084B329EA8254D49AX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /cqso9x3dpkoyf HTTP/1.1Host: smart.linkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=947571;type=mcms;cat=sitew0;ord=1161353106138;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=2127469529;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=947571;type=mcms;cat=sitew0;ord=1161353106138;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=2127469529;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /activityi;src=947571;type=mcms;cat=sitew0;ord=1161353106138;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=2127469529;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html? HTTP/1.1Host: 947571.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /td/rul/780971155?random=1729787792778&cv=11&fst=1729787792778&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&hn=www.googleadservices.com&frm=0&tiba=What%20is%20Link%20your%20card%2F%20Pay%20with%20code%3F&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/780971155/?random=1729787792778&cv=11&fst=1729787792778&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&hn=www.googleadservices.com&frm=0&tiba=What%20is%20Link%20your%20card%2F%20Pay%20with%20code%3F&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=947571;type=mcms;cat=sitew0;ord=1161353106138;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=2127469529;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CObiodi5p4kDFbjwEQgd8YwWrQ;src=947571;type=mcms;cat=sitew0;ord=1161353106138;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=2127469529;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html? HTTP/1.1Host: 947571.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3Dbf3aafda-9263-8b0c-9aea-5a44c2ac1186%26type%3D55%26m%3D7&ex-fch=416613&ex-src=https://www.mcdonalds.com&ex-hargs=v%3D1.0%3Bc%3D3793746130001%3Bp%3DBF3AAFDA-9263-8B0C-9AEA-5A44C2AC1186 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A995QE8aZEXiqEOia3NHUoI; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/evnt/?adv=ilj0whd&ct=0:974z969&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=23209d90-b0b9-45e0-b3ee-f70045040457; TDCPM=CAESEgoDYWFtEgsImOHSi8Tirj0QBRIVCgZnb29nbGUSCwj-sLeT_pS6PRAFEhYKB3J1Ymljb24SCwjG4beT_pS6PRAFEhcKCGFwcG5leHVzEgsI8oi3yv6Uuj0QBRIUCgV0YXBhZBILCKrxmIH_lLo9EAUYASABKAIyCwjM55uulZW6PRAFOAFaBXRhcGFkYAI.
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10114904 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF13GmcCEOlvs8YsQmL1eXt9Xv3DN_sFEgEBAQHIG2ckZ9xS0iMA_eMAAA&S=AQAAAvT1xXes2gpjbV5xMWI6NeU
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/780971155/?random=1729787792778&cv=11&fst=1729787792778&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&hn=www.googleadservices.com&frm=0&tiba=What%20is%20Link%20your%20card%2F%20Pay%20with%20code%3F&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/780971155/?random=1729787792778&cv=11&fst=1729785600000&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&hn=www.googleadservices.com&frm=0&tiba=What%20is%20Link%20your%20card%2F%20Pay%20with%20code%3F&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dUvMp36GO6wIpzqm9SYsBuTugAJhyCzWdKLZ8xjPQMA-OUSYM&random=3586973892&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CObiodi5p4kDFbjwEQgd8YwWrQ;src=947571;type=mcms;cat=sitew0;ord=1161353106138;npa=0;auiddc=*;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=2127469529;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iui3?d=forester-did&ex-fargs=%3Fid%3Dbf3aafda-9263-8b0c-9aea-5a44c2ac1186%26type%3D55%26m%3D7&ex-fch=416613&ex-src=https://www.mcdonalds.com&ex-hargs=v%3D1.0%3Bc%3D3793746130001%3Bp%3DBF3AAFDA-9263-8B0C-9AEA-5A44C2AC1186 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A995QE8aZEXiqEOia3NHUoI; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cgi-bin/m?ci=tradedesk&cg=23209d90-b0b9-45e0-b3ee-f70045040457 HTTP/1.1Host: secure-gl.imrworldwide.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10114904 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBF13GmcCEOlvs8YsQmL1eXt9Xv3DN_sFEgEBAQHIG2ckZ9xS0iMA_eMAAA&S=AQAAAvT1xXes2gpjbV5xMWI6NeU
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044009591/?random=1380378076&cv=9&fst=1729787795126&num=1&npa=1&label=7ad7CIHLntABEPek6fED&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=2&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F947571.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCObiodi5p4kDFbjwEQgd8YwWrQ%3Bsrc%3D947571%3Btype%3Dmcms%3Bcat%3Dsitew0%3Bord%3D1161353106138%3Bnpa%3D0%3Bauiddc%3D1899262850.1729787737%3Bu1%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fcontact-us%252Ffaqs%252Ffaq-faqs%252Flinked-payment.html%3Bps%3D1%3Bpcor%3D2127469529%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe4al0v9189957677za200%3Bgcd%3D13l3l3l3l1l1%3Bdma%3D0%3Btag_exp%3D101686685~101794737~101823847%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fcontact-us%252Ffaqs%252Ffaq-faqs%252Flinked-payment.html%3F&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&top=https%3A%2F%2Fwww.mcdonalds.com%2F&capi=1&hn=www.googleadservices.com&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CM6w3bKJwvqhCyITCNnZsNm5p4kDFSb0EQgd6d863zICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjojaHR0cHM6Ly85NDc1NzEuZmxzLmRvdWJsZWNsaWNrLm5ldC8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CObiodi5p4kDFbjwEQgd8YwWrQ;src=947571;type=mcms;cat=sitew0;ord=1161353106138;npa=0;auiddc=*;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=2127469529;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/780971155/?random=1729787792778&cv=11&fst=1729785600000&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&hn=www.googleadservices.com&frm=0&tiba=What%20is%20Link%20your%20card%2F%20Pay%20with%20code%3F&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dUvMp36GO6wIpzqm9SYsBuTugAJhyCzWdKLZ8xjPQMA-OUSYM&random=3586973892&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=947571;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=396992489;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /activityi;src=947571;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=396992489;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html? HTTP/1.1Host: 947571.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=947571;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=396992489;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /td/rul/780971155?random=1729787796970&cv=11&fst=1729787796970&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&label=HKfHCKicqd4BEJPZsvQC&hn=www.googleadservices.com&frm=0&tiba=What%20is%20Link%20your%20card%2F%20Pay%20with%20code%3F&gtm_ee=1&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion%3Ballow_custom_scripts%3Dtrue&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /cgi-bin/m?ci=tradedesk&cg=23209d90-b0b9-45e0-b3ee-f70045040457 HTTP/1.1Host: secure-gl.imrworldwide.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IMRID=23caa3b0-9226-11ef-9241-81817823bbdb
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1044009591/?random=1380378076&cv=9&fst=1729787795126&num=1&npa=1&label=7ad7CIHLntABEPek6fED&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=2&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F947571.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCObiodi5p4kDFbjwEQgd8YwWrQ%3Bsrc%3D947571%3Btype%3Dmcms%3Bcat%3Dsitew0%3Bord%3D1161353106138%3Bnpa%3D0%3Bauiddc%3D1899262850.1729787737%3Bu1%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fcontact-us%252Ffaqs%252Ffaq-faqs%252Flinked-payment.html%3Bps%3D1%3Bpcor%3D2127469529%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe4al0v9189957677za200%3Bgcd%3D13l3l3l3l1l1%3Bdma%3D0%3Btag_exp%3D101686685~101794737~101823847%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fcontact-us%252Ffaqs%252Ffaq-faqs%252Flinked-payment.html%3F&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&top=https%3A%2F%2Fwww.mcdonalds.com%2F&capi=1&hn=www.googleadservices.com&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CM6w3bKJwvqhCyITCNnZsNm5p4kDFSb0EQgd6d863zICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjojaHR0cHM6Ly85NDc1NzEuZmxzLmRvdWJsZWNsaWNrLm5ldC8&is_vtc=1&cid=CAQSKQDpaXnf-NEtc2HPpk2LB0uVGKn8OGcdhFwwXthe33rPUz6N9XQY_Yh8&random=3751748641&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=947571;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=396992489;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CObuoNq5p4kDFTzzEQgdHg8PsQ;src=947571;npa=0;auiddc=1899262850.1729787737;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=396992489;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html? HTTP/1.1Host: 947571.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1044009591/?random=1380378076&cv=9&fst=1729787795126&num=1&npa=1&label=7ad7CIHLntABEPek6fED&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=2&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F947571.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCObiodi5p4kDFbjwEQgd8YwWrQ%3Bsrc%3D947571%3Btype%3Dmcms%3Bcat%3Dsitew0%3Bord%3D1161353106138%3Bnpa%3D0%3Bauiddc%3D1899262850.1729787737%3Bu1%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fcontact-us%252Ffaqs%252Ffaq-faqs%252Flinked-payment.html%3Bps%3D1%3Bpcor%3D2127469529%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe4al0v9189957677za200%3Bgcd%3D13l3l3l3l1l1%3Bdma%3D0%3Btag_exp%3D101686685~101794737~101823847%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.mcdonalds.com%252Fca%252Fen-ca%252Fcontact-us%252Ffaqs%252Ffaq-faqs%252Flinked-payment.html%3F&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&top=https%3A%2F%2Fwww.mcdonalds.com%2F&capi=1&hn=www.googleadservices.com&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CM6w3bKJwvqhCyITCNnZsNm5p4kDFSb0EQgd6d863zICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjojaHR0cHM6Ly85NDc1NzEuZmxzLmRvdWJsZWNsaWNrLm5ldC8&is_vtc=1&cid=CAQSKQDpaXnf-NEtc2HPpk2LB0uVGKn8OGcdhFwwXthe33rPUz6N9XQY_Yh8&random=3751748641&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/780971155/?random=903026752&cv=11&fst=1729787796970&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&label=HKfHCKicqd4BEJPZsvQC&hn=www.googleadservices.com&frm=0&tiba=What%20is%20Link%20your%20card%2F%20Pay%20with%20code%3F&gtm_ee=1&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion%3Ballow_custom_scripts%3Dtrue&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBOAFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=COXNgOLUgKmxMiITCKqC6Nq5p4kDFX2zgwcducMu9zICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoaaHR0cHM6Ly93d3cubWNkb25hbGRzLmNvbS9CV0NoRUk4T0RudUFZUTI4Q3ItLWZScnNDbUFSSXNBRllWVWIxWmNobmE4MTJGOExxYlF6QjBVd0RmNEEybWZvM3cyQ2NsbVpySVdTWXJsYTJvVFpfdmo4Zw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmzRwXBn3faRiry7YOVd91O6kcEsdJppELp-E-Hb26uN4614SeMpV7wkPnY128
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CObuoNq5p4kDFTzzEQgdHg8PsQ;src=947571;npa=0;auiddc=*;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=396992489;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://947571.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/780971155/?random=903026752&cv=11&fst=1729787796970&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&label=HKfHCKicqd4BEJPZsvQC&hn=www.googleadservices.com&frm=0&tiba=What%20is%20Link%20your%20card%2F%20Pay%20with%20code%3F&gtm_ee=1&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion%3Ballow_custom_scripts%3Dtrue&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBOAFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=COXNgOLUgKmxMiITCKqC6Nq5p4kDFX2zgwcducMu9zICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoaaHR0cHM6Ly93d3cubWNkb25hbGRzLmNvbS9CV0NoRUk4T0RudUFZUTI4Q3ItLWZScnNDbUFSSXNBRllWVWIxWmNobmE4MTJGOExxYlF6QjBVd0RmNEEybWZvM3cyQ2NsbVpySVdTWXJsYTJvVFpfdmo4Zw&is_vtc=1&cid=CAQSKQDpaXnfVaG7RSDwVMT0Jq3Iy0gsHBw89jA3ta6Cr1IiirH_1I8NDl8r&random=69599737 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CObuoNq5p4kDFTzzEQgdHg8PsQ;src=947571;npa=0;auiddc=*;u1=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html;ps=1;pcor=396992489;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4al0v9189957677za200;gcd=13l3l3l3l1l1;dma=0;tag_exp=101686685~101794737~101823847;epver=2;~oref=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/780971155/?random=903026752&cv=11&fst=1729787796970&bg=ffffff&guid=ON&async=1&gtm=45be4al0za200zb9189957677&gcd=13l3l3l3l1l1&dma=0&tag_exp=101686685~101794737~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fcontact-us%2Ffaqs%2Ffaq-faqs%2Flinked-payment.html&ref=https%3A%2F%2Fwww.mcdonalds.com%2F&label=HKfHCKicqd4BEJPZsvQC&hn=www.googleadservices.com&frm=0&tiba=What%20is%20Link%20your%20card%2F%20Pay%20with%20code%3F&gtm_ee=1&npa=0&pscdl=noapi&auid=1899262850.1729787737&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion%3Ballow_custom_scripts%3Dtrue&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECIgEBOAFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=COXNgOLUgKmxMiITCKqC6Nq5p4kDFX2zgwcducMu9zICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoaaHR0cHM6Ly93d3cubWNkb25hbGRzLmNvbS9CV0NoRUk4T0RudUFZUTI4Q3ItLWZScnNDbUFSSXNBRllWVWIxWmNobmE4MTJGOExxYlF6QjBVd0RmNEEybWZvM3cyQ2NsbVpySVdTWXJsYTJvVFpfdmo4Zw&is_vtc=1&cid=CAQSKQDpaXnfVaG7RSDwVMT0Jq3Iy0gsHBw89jA3ta6Cr1IiirH_1I8NDl8r&random=69599737 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Found strings which match to known social media urls

Source: chromecache_286.1.dr	String found in binary or memory: <a class="cmp-image__link external " href="https://www.facebook.com/McDonaldsCanada" data-cmp-data-layer="{&#34;image-404b9a19b9&#34;:{&#34;@type&#34;:&#34;mcdonalds/components/proxy/content/image&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-04T09:53:47Z&#34;,&#34;xdm:linkURL&#34;:&#34;https://www.facebook.com/McDonaldsCanada&#34;,&#34;image&#34;:{&#34;repo:id&#34;:&#34;813616d4-bd9a-4d99-b1d6-3546d2f5cfea&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-22T02:31:42Z&#34;,&#34;@type&#34;:&#34;image/png&#34;,&#34;repo:path&#34;:&#34;/content/dam/sites/ca/nfl/icons/facebook2.png&#34;,&#34;xdm:smartTags&#34;:{&#34;cursor&#34;:0.6105775237083435,&#34;symbol&#34;:0.7159267663955688,&#34;arrow&#34;:0.6400725841522217,&#34;icon&#34;:0.6634061336517334,&#34;sign&#34;:0.6155030131340027,&#34;pattern&#34;:0.5638283491134644,&#34;isolated&#34;:0.5637328624725342,&#34;mouse&#34;:0.5891164541244507,&#34;3d&#34;:0.5743693113327026,&#34;computer&#34;:0.6382362246513367,&#34;white&#34;:0.5641154646873474,&#34;design&#34;:0.6006585359573364,&#34;vector&#34;:0.6375407576560974,&#34;pixel&#34;:0.6422132253646851,&#34;hand&#34;:0.6212543249130249,&#34;posh&#34;:0.5865326523780823,&#34;business&#34;:0.5901299118995667,&#34;black&#34;:0.6423689126968384,&#34;click&#34;:0.573631227016449,&#34;smoky black&#34;:0.5719326138496399,&#34;creative&#34;:0.591582179069519,&#34;background&#34;:0.595941960811615,&#34;noble&#34;:0.5843353271484375,&#34;illustration&#34;:0.6345574259757996,&#34;internet&#34;:0.5592612028121948}},&#34;linkPosition&#34;:&#34;Footer:mcdonaldsapp:Facebook&#34;,&#34;trackingType&#34;:&#34;socialChannelLinks&#34;}}" data-cmp-clickable data-cmp-hook-image="link"> equals www.facebook.com (Facebook)
Source: chromecache_297.1.dr	String found in binary or memory: <a class="cmp-image__link external " href="https://www.facebook.com/McDonaldsCanada" data-cmp-data-layer="{&#34;image-b58424530b&#34;:{&#34;@type&#34;:&#34;mcdonalds/components/proxy/content/image&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-04T09:53:47Z&#34;,&#34;xdm:linkURL&#34;:&#34;https://www.facebook.com/McDonaldsCanada&#34;,&#34;image&#34;:{&#34;repo:id&#34;:&#34;813616d4-bd9a-4d99-b1d6-3546d2f5cfea&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-22T02:31:42Z&#34;,&#34;@type&#34;:&#34;image/png&#34;,&#34;repo:path&#34;:&#34;/content/dam/sites/ca/nfl/icons/facebook2.png&#34;,&#34;xdm:smartTags&#34;:{&#34;cursor&#34;:0.6105775237083435,&#34;symbol&#34;:0.7159267663955688,&#34;arrow&#34;:0.6400725841522217,&#34;icon&#34;:0.6634061336517334,&#34;sign&#34;:0.6155030131340027,&#34;pattern&#34;:0.5638283491134644,&#34;isolated&#34;:0.5637328624725342,&#34;mouse&#34;:0.5891164541244507,&#34;3d&#34;:0.5743693113327026,&#34;computer&#34;:0.6382362246513367,&#34;white&#34;:0.5641154646873474,&#34;design&#34;:0.6006585359573364,&#34;vector&#34;:0.6375407576560974,&#34;pixel&#34;:0.6422132253646851,&#34;hand&#34;:0.6212543249130249,&#34;posh&#34;:0.5865326523780823,&#34;business&#34;:0.5901299118995667,&#34;black&#34;:0.6423689126968384,&#34;click&#34;:0.573631227016449,&#34;smoky black&#34;:0.5719326138496399,&#34;creative&#34;:0.591582179069519,&#34;background&#34;:0.595941960811615,&#34;noble&#34;:0.5843353271484375,&#34;illustration&#34;:0.6345574259757996,&#34;internet&#34;:0.5592612028121948}},&#34;linkPosition&#34;:&#34;Footer:linked-payment:Facebook&#34;,&#34;trackingType&#34;:&#34;socialChannelLinks&#34;}}" data-cmp-clickable data-cmp-hook-image="link"> equals www.facebook.com (Facebook)
Source: chromecache_297.1.dr	String found in binary or memory: <a class="cmp-image__link external " href="https://www.youtube.com/user/McDonaldsCanada" data-cmp-data-layer="{&#34;image-5979c0006f&#34;:{&#34;@type&#34;:&#34;mcdonalds/components/proxy/content/image&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-05T08:19:38Z&#34;,&#34;xdm:linkURL&#34;:&#34;https://www.youtube.com/user/McDonaldsCanada&#34;,&#34;image&#34;:{&#34;repo:id&#34;:&#34;d2b48a43-91db-4e87-88c2-3040f9db23a3&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-22T02:31:45Z&#34;,&#34;@type&#34;:&#34;image/png&#34;,&#34;repo:path&#34;:&#34;/content/dam/sites/ca/nfl/icons/youtube2.png&#34;,&#34;xdm:smartTags&#34;:{&#34;symbol&#34;:0.5453545451164246,&#34;electronics&#34;:0.5294696688652039,&#34;data&#34;:0.5499796271324158,&#34;concept&#34;:0.5410373210906982,&#34;isolated&#34;:0.6926284432411194,&#34;video&#34;:0.5621616244316101,&#34;media&#34;:0.5295088291168213,&#34;button&#34;:0.6414428949356079,&#34;computer&#34;:0.6462767124176025,&#34;white&#34;:0.6148647665977478,&#34;electronic&#34;:0.5763319134712219,&#34;power&#34;:0.589521050453186,&#34;audio&#34;:0.5572682619094849,&#34;communication&#34;:0.5306071639060974,&#34;cable&#34;:0.5400110483169556,&#34;digital&#34;:0.5947455763816833,&#34;business&#34;:0.5609638690948486,&#34;electric&#34;:0.5635063648223877,&#34;black&#34;:0.6707104444503784,&#34;equipment&#34;:0.6077264547348022,&#34;electricity&#34;:0.5935210585594177,&#34;technology&#34;:0.6482067108154297,&#34;background&#34;:0.611078679561615,&#34;plug&#34;:0.5340852737426758,&#34;device&#34;:0.5385209918022156}},&#34;linkPosition&#34;:&#34;Footer:linked-payment:Youtube&#34;,&#34;trackingType&#34;:&#34;socialChannelLinks&#34;}}" data-cmp-clickable data-cmp-hook-image="link"> equals www.youtube.com (Youtube)
Source: chromecache_286.1.dr	String found in binary or memory: <a class="cmp-image__link external " href="https://www.youtube.com/user/McDonaldsCanada" data-cmp-data-layer="{&#34;image-9da9d0c1cf&#34;:{&#34;@type&#34;:&#34;mcdonalds/components/proxy/content/image&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-05T08:19:38Z&#34;,&#34;xdm:linkURL&#34;:&#34;https://www.youtube.com/user/McDonaldsCanada&#34;,&#34;image&#34;:{&#34;repo:id&#34;:&#34;d2b48a43-91db-4e87-88c2-3040f9db23a3&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-22T02:31:45Z&#34;,&#34;@type&#34;:&#34;image/png&#34;,&#34;repo:path&#34;:&#34;/content/dam/sites/ca/nfl/icons/youtube2.png&#34;,&#34;xdm:smartTags&#34;:{&#34;symbol&#34;:0.5453545451164246,&#34;electronics&#34;:0.5294696688652039,&#34;data&#34;:0.5499796271324158,&#34;concept&#34;:0.5410373210906982,&#34;isolated&#34;:0.6926284432411194,&#34;video&#34;:0.5621616244316101,&#34;media&#34;:0.5295088291168213,&#34;button&#34;:0.6414428949356079,&#34;computer&#34;:0.6462767124176025,&#34;white&#34;:0.6148647665977478,&#34;electronic&#34;:0.5763319134712219,&#34;power&#34;:0.589521050453186,&#34;audio&#34;:0.5572682619094849,&#34;communication&#34;:0.5306071639060974,&#34;cable&#34;:0.5400110483169556,&#34;digital&#34;:0.5947455763816833,&#34;business&#34;:0.5609638690948486,&#34;electric&#34;:0.5635063648223877,&#34;black&#34;:0.6707104444503784,&#34;equipment&#34;:0.6077264547348022,&#34;electricity&#34;:0.5935210585594177,&#34;technology&#34;:0.6482067108154297,&#34;background&#34;:0.611078679561615,&#34;plug&#34;:0.5340852737426758,&#34;device&#34;:0.5385209918022156}},&#34;linkPosition&#34;:&#34;Footer:mcdonaldsapp:Youtube&#34;,&#34;trackingType&#34;:&#34;socialChannelLinks&#34;}}" data-cmp-clickable data-cmp-hook-image="link"> equals www.youtube.com (Youtube)
Source: chromecache_297.1.dr	String found in binary or memory: <div class="image"><div data-cmp-is="image" data-cmp-lazythreshold="0" data-cmp-src="/content/experience-fragments/mcdonalds/ca/en-ca/structure/footer-xf/master/_jcr_content/root/footer/root/socialshares/image_13953712.coreimg{.width}.png/1658457105994/youtube2.png" data-asset="/content/dam/sites/ca/nfl/icons/youtube2.png" data-asset-id="d2b48a43-91db-4e87-88c2-3040f9db23a3" data-title="Youtube" data-cmp-data-layer="{&#34;image-5979c0006f&#34;:{&#34;@type&#34;:&#34;mcdonalds/components/proxy/content/image&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-05T08:19:38Z&#34;,&#34;xdm:linkURL&#34;:&#34;https://www.youtube.com/user/McDonaldsCanada&#34;,&#34;image&#34;:{&#34;repo:id&#34;:&#34;d2b48a43-91db-4e87-88c2-3040f9db23a3&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-22T02:31:45Z&#34;,&#34;@type&#34;:&#34;image/png&#34;,&#34;repo:path&#34;:&#34;/content/dam/sites/ca/nfl/icons/youtube2.png&#34;,&#34;xdm:smartTags&#34;:{&#34;symbol&#34;:0.5453545451164246,&#34;electronics&#34;:0.5294696688652039,&#34;data&#34;:0.5499796271324158,&#34;concept&#34;:0.5410373210906982,&#34;isolated&#34;:0.6926284432411194,&#34;video&#34;:0.5621616244316101,&#34;media&#34;:0.5295088291168213,&#34;button&#34;:0.6414428949356079,&#34;computer&#34;:0.6462767124176025,&#34;white&#34;:0.6148647665977478,&#34;electronic&#34;:0.5763319134712219,&#34;power&#34;:0.589521050453186,&#34;audio&#34;:0.5572682619094849,&#34;communication&#34;:0.5306071639060974,&#34;cable&#34;:0.5400110483169556,&#34;digital&#34;:0.5947455763816833,&#34;business&#34;:0.5609638690948486,&#34;electric&#34;:0.5635063648223877,&#34;black&#34;:0.6707104444503784,&#34;equipment&#34;:0.6077264547348022,&#34;electricity&#34;:0.5935210585594177,&#34;technology&#34;:0.6482067108154297,&#34;background&#34;:0.611078679561615,&#34;plug&#34;:0.5340852737426758,&#34;device&#34;:0.5385209918022156}}}}" class="cmp-image" itemscope itemtype="http://schema.org/ImageObject"> equals www.youtube.com (Youtube)
Source: chromecache_286.1.dr	String found in binary or memory: <div class="image"><div data-cmp-is="image" data-cmp-lazythreshold="0" data-cmp-src="/content/experience-fragments/mcdonalds/ca/en-ca/structure/footer-xf/master/_jcr_content/root/footer/root/socialshares/image_13953712.coreimg{.width}.png/1658457105994/youtube2.png" data-asset="/content/dam/sites/ca/nfl/icons/youtube2.png" data-asset-id="d2b48a43-91db-4e87-88c2-3040f9db23a3" data-title="Youtube" data-cmp-data-layer="{&#34;image-9da9d0c1cf&#34;:{&#34;@type&#34;:&#34;mcdonalds/components/proxy/content/image&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-05T08:19:38Z&#34;,&#34;xdm:linkURL&#34;:&#34;https://www.youtube.com/user/McDonaldsCanada&#34;,&#34;image&#34;:{&#34;repo:id&#34;:&#34;d2b48a43-91db-4e87-88c2-3040f9db23a3&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-22T02:31:45Z&#34;,&#34;@type&#34;:&#34;image/png&#34;,&#34;repo:path&#34;:&#34;/content/dam/sites/ca/nfl/icons/youtube2.png&#34;,&#34;xdm:smartTags&#34;:{&#34;symbol&#34;:0.5453545451164246,&#34;electronics&#34;:0.5294696688652039,&#34;data&#34;:0.5499796271324158,&#34;concept&#34;:0.5410373210906982,&#34;isolated&#34;:0.6926284432411194,&#34;video&#34;:0.5621616244316101,&#34;media&#34;:0.5295088291168213,&#34;button&#34;:0.6414428949356079,&#34;computer&#34;:0.6462767124176025,&#34;white&#34;:0.6148647665977478,&#34;electronic&#34;:0.5763319134712219,&#34;power&#34;:0.589521050453186,&#34;audio&#34;:0.5572682619094849,&#34;communication&#34;:0.5306071639060974,&#34;cable&#34;:0.5400110483169556,&#34;digital&#34;:0.5947455763816833,&#34;business&#34;:0.5609638690948486,&#34;electric&#34;:0.5635063648223877,&#34;black&#34;:0.6707104444503784,&#34;equipment&#34;:0.6077264547348022,&#34;electricity&#34;:0.5935210585594177,&#34;technology&#34;:0.6482067108154297,&#34;background&#34;:0.611078679561615,&#34;plug&#34;:0.5340852737426758,&#34;device&#34;:0.5385209918022156}}}}" class="cmp-image" itemscope itemtype="http://schema.org/ImageObject"> equals www.youtube.com (Youtube)
Source: chromecache_286.1.dr	String found in binary or memory: <div class="image"><div data-cmp-is="image" data-cmp-lazythreshold="0" data-cmp-src="/content/experience-fragments/mcdonalds/ca/en-ca/structure/footer-xf/master/_jcr_content/root/footer/root/socialshares/image_774642963.coreimg{.width}.png/1658457102249/facebook2.png" data-asset="/content/dam/sites/ca/nfl/icons/facebook2.png" data-asset-id="813616d4-bd9a-4d99-b1d6-3546d2f5cfea" data-title="Facebook" data-cmp-data-layer="{&#34;image-404b9a19b9&#34;:{&#34;@type&#34;:&#34;mcdonalds/components/proxy/content/image&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-04T09:53:47Z&#34;,&#34;xdm:linkURL&#34;:&#34;https://www.facebook.com/McDonaldsCanada&#34;,&#34;image&#34;:{&#34;repo:id&#34;:&#34;813616d4-bd9a-4d99-b1d6-3546d2f5cfea&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-22T02:31:42Z&#34;,&#34;@type&#34;:&#34;image/png&#34;,&#34;repo:path&#34;:&#34;/content/dam/sites/ca/nfl/icons/facebook2.png&#34;,&#34;xdm:smartTags&#34;:{&#34;cursor&#34;:0.6105775237083435,&#34;symbol&#34;:0.7159267663955688,&#34;arrow&#34;:0.6400725841522217,&#34;icon&#34;:0.6634061336517334,&#34;sign&#34;:0.6155030131340027,&#34;pattern&#34;:0.5638283491134644,&#34;isolated&#34;:0.5637328624725342,&#34;mouse&#34;:0.5891164541244507,&#34;3d&#34;:0.5743693113327026,&#34;computer&#34;:0.6382362246513367,&#34;white&#34;:0.5641154646873474,&#34;design&#34;:0.6006585359573364,&#34;vector&#34;:0.6375407576560974,&#34;pixel&#34;:0.6422132253646851,&#34;hand&#34;:0.6212543249130249,&#34;posh&#34;:0.5865326523780823,&#34;business&#34;:0.5901299118995667,&#34;black&#34;:0.6423689126968384,&#34;click&#34;:0.573631227016449,&#34;smoky black&#34;:0.5719326138496399,&#34;creative&#34;:0.591582179069519,&#34;background&#34;:0.595941960811615,&#34;noble&#34;:0.5843353271484375,&#34;illustration&#34;:0.6345574259757996,&#34;internet&#34;:0.5592612028121948}}}}" class="cmp-image" itemscope itemtype="http://schema.org/ImageObject"> equals www.facebook.com (Facebook)
Source: chromecache_297.1.dr	String found in binary or memory: <div class="image"><div data-cmp-is="image" data-cmp-lazythreshold="0" data-cmp-src="/content/experience-fragments/mcdonalds/ca/en-ca/structure/footer-xf/master/_jcr_content/root/footer/root/socialshares/image_774642963.coreimg{.width}.png/1658457102249/facebook2.png" data-asset="/content/dam/sites/ca/nfl/icons/facebook2.png" data-asset-id="813616d4-bd9a-4d99-b1d6-3546d2f5cfea" data-title="Facebook" data-cmp-data-layer="{&#34;image-b58424530b&#34;:{&#34;@type&#34;:&#34;mcdonalds/components/proxy/content/image&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-04T09:53:47Z&#34;,&#34;xdm:linkURL&#34;:&#34;https://www.facebook.com/McDonaldsCanada&#34;,&#34;image&#34;:{&#34;repo:id&#34;:&#34;813616d4-bd9a-4d99-b1d6-3546d2f5cfea&#34;,&#34;repo:modifyDate&#34;:&#34;2022-07-22T02:31:42Z&#34;,&#34;@type&#34;:&#34;image/png&#34;,&#34;repo:path&#34;:&#34;/content/dam/sites/ca/nfl/icons/facebook2.png&#34;,&#34;xdm:smartTags&#34;:{&#34;cursor&#34;:0.6105775237083435,&#34;symbol&#34;:0.7159267663955688,&#34;arrow&#34;:0.6400725841522217,&#34;icon&#34;:0.6634061336517334,&#34;sign&#34;:0.6155030131340027,&#34;pattern&#34;:0.5638283491134644,&#34;isolated&#34;:0.5637328624725342,&#34;mouse&#34;:0.5891164541244507,&#34;3d&#34;:0.5743693113327026,&#34;computer&#34;:0.6382362246513367,&#34;white&#34;:0.5641154646873474,&#34;design&#34;:0.6006585359573364,&#34;vector&#34;:0.6375407576560974,&#34;pixel&#34;:0.6422132253646851,&#34;hand&#34;:0.6212543249130249,&#34;posh&#34;:0.5865326523780823,&#34;business&#34;:0.5901299118995667,&#34;black&#34;:0.6423689126968384,&#34;click&#34;:0.573631227016449,&#34;smoky black&#34;:0.5719326138496399,&#34;creative&#34;:0.591582179069519,&#34;background&#34;:0.595941960811615,&#34;noble&#34;:0.5843353271484375,&#34;illustration&#34;:0.6345574259757996,&#34;internet&#34;:0.5592612028121948}}}}" class="cmp-image" itemscope itemtype="http://schema.org/ImageObject"> equals www.facebook.com (Facebook)
Source: chromecache_339.1.dr, chromecache_368.1.dr	String found in binary or memory: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10114904"/><script type="text/javascript"> equals www.yahoo.com (Yahoo)
Source: chromecache_355.1.dr, chromecache_289.1.dr, chromecache_359.1.dr, chromecache_285.1.dr, chromecache_400.1.dr, chromecache_277.1.dr	String found in binary or memory: return b}nD.F="internal.enableAutoEventOnTimer";var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: link.canada.mcdonalds.com
Source: global traffic	DNS traffic detected: DNS query: smart.link
Source: global traffic	DNS traffic detected: DNS query: www.mcdonalds.com
Source: global traffic	DNS traffic detected: DNS query: rum.hlx.page
Source: global traffic	DNS traffic detected: DNS query: maps.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: s7d1.scene7.com
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: smetrics.mcdonalds.com
Source: global traffic	DNS traffic detected: DNS query: 947571.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: secure-gl.imrworldwide.com

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /b/ss/mcdcaproduts/1/JS-2.23.0-LDQM/s55566870463690?AQB=1&ndh=1&pf=1&t=24%2F9%2F2024%2012%3A35%3A36%204%20240&mid=54153988059080108413010172372882426279&aamlh=6&ce=UTF-8&pageName=mcdonaldsapp&g=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html&c.&getTimeParting=6.3&.c&cc=CAD&ch=getmoremcds&events=event92%2Cevent93%3D6800%2Cevent94%3D10277%2Cevent95%3D8%2Cevent109%3D12511%2Cevent99%3D50&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c2=en-ca&v2=D%3Dc2&c3=desktop&v3=D%3Dc3&c4=12%3A00%20-%2013%3A00&v4=english&c5=thursday&c9=54153988059080108413010172372882426279&v9=D%3Dc9&v14=D%3Dc4&v15=D%3Dc5&c18=lunch&v18=D%3Dc18&c19=-4%3A00&v19=D%3Dc19&c20=ca&v20=D%3Dc20&c21=mcdonaldsapp&v21=D%3Dc21&c22=getmoremcds&v26=%2B1&c28=anonymous&v28=D%3Dc28&c36=all%20pages%20%28bottom%29%3ASCode%20File&c39=2024-10-24T12%3A35%3A36.138&c42=getmoremcds&c43=mcdonaldsapp&c44=D%3Dc43&c45=D%3Dc44&c46=D%3Dc45&c47=2023-10-18T15%3A11%3A50Z&c59=110&c60=web%3Aca&v60=D%3Dc60&v61=10-24-2024&v62=First%20Visit&c70=https%3A%2F%2Fwww.mcdonalds.com%2Fca%2Fen-ca%2Fgetmoremcds%2Fmcdonaldsapp.html&v70=D%3Dc70&c74=no%20referrer&v74=D%3Dc74&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=786ABB6B55C1DA777F000101%40AdobeOrg&AQE=1 HTTP/1.1Host: smetrics.mcdonalds.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.mcdonalds.comSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.mcdonalds.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=248FAC21829CE881EC1639691ECBAB32~YAAQS7MUAgG9+K+SAQAA+whivxkLbmkIM2lAE9DP3wtE/3u3w4esq68OrKTXRfYERG8P903JK/jk5WCixa1vmJsBthWfMnyR0W6WyN968Vij2uajzIBEI7d01DyFf3IKvPzeT0ycWxUQC+JTXNQnqHfaHm4cPptNxz3nPMw2irOC/eVYLD3IvfUW9cTFEi6yQ1KX7CaKcfOvGO5Y7Bfg4sC1ENi6tyaVgy+BJRcrjjJzkBxxhbRosPah+SeKDLYfmi1LZKcDwr19tcu+XjYuwHdYoMts/PmP51lcEVWngQTugtOB2QyZdF7WskOhITwXcjzzJzApaBexYDdGTlrYf0nVGPVeWklZg+7yVzW0atjSC7cWUZTO3Gf6eZ4r3HzKBi2VprbebQ==~3556931~3162676; RT="z=1&dm=mcdonalds.com&si=k2ggx96ftfl&ss=m2niya34&sl=0&tt=0"; AMCVS_786ABB6B55C1DA777F000101%40AdobeOrg=1; _abck=7BBD2AFCAF93C2B5DD05491FC3FDD742~-1~YAAQXrMUAhRpQbGSAQAAHShivwzL3wGYSvmspSxCrYkepOyyU7q+t7wYV3BmiYBSxjPbcPDH+pGlCN52tElDRa2wjbcPddMi64dYQIC8jnQFAzffcJS6oI99pzJJztaIe/i49cdGaRw1hpZmhfHDXrCAmMIBhx5CD3rjgS1Tg10I5Dr3tKBQ2nnY555ORm7208Zb/3WYIXdYKWyp+LJtiqIMAa+KFhuFYFuEDaGl2IOb2dKV12ADA9UZ3RMGZkCm60+rhBSkv+fPQ5gA8dpV8nUAKrJmQDCf46W3g8b0KnGtws/AABHIQNwDbEPyNZEW52jY8waIIY5XjyB92DVB2Dpt1E9F3aoHpFF5lff4oaVdktt6V6/H91wIBsiH1rdshNZ5qAKChA9hJ5ucMsWyAjiJpQXF7JU2U9fRdHQwKSSn5IHfigAmSz5zvi21Cg==~-1~-1~-1; s_ecid=MCMID%7C54153988059080108413010172372882426279; AMCV_786ABB6B55C1DA777F000101%40AdobeOrg=179643557%7CMCI

URLs found in memory or binary data

Source: chromecache_381.1.dr	String found in binary or memory: http://api.jqueryui.com/category/theming/
Source: chromecache_391.1.dr, chromecache_364.1.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://corporate.mcdonalds.com
Source: chromecache_391.1.dr, chromecache_364.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_308.1.dr, chromecache_262.1.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://hotoffthegrillatmcdonalds.com/
Source: chromecache_291.1.dr, chromecache_346.1.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_381.1.dr, chromecache_391.1.dr, chromecache_291.1.dr, chromecache_364.1.dr, chromecache_346.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_364.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://mcdonalds.com/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://news.mcdonalds.ca/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://nutrition.mcdonalds.com
Source: chromecache_297.1.dr	String found in binary or memory: http://schema.org/ImageObject
Source: chromecache_297.1.dr	String found in binary or memory: http://schema.org/SiteNavigationElement
Source: chromecache_291.1.dr, chromecache_346.1.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.365black.com
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.aboutmcdonalds.com
Source: chromecache_339.1.dr, chromecache_368.1.dr	String found in binary or memory: http://www.amazon.com/b/?&node=7253015011
Source: chromecache_358.1.dr, chromecache_323.1.dr, chromecache_246.1.dr, chromecache_306.1.dr, chromecache_307.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_323.1.dr, chromecache_246.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE2.0
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.atomchockey.ca/
Source: chromecache_308.1.dr, chromecache_262.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_265.1.dr, chromecache_389.1.dr, chromecache_341.1.dr, chromecache_324.1.dr, chromecache_310.1.dr, chromecache_312.1.dr, chromecache_331.1.dr, chromecache_261.1.dr	String found in binary or memory: http://www.day.com/dam/1.0
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.happymeal.com
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.hotoffthegrillatmcdonalds.com/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.mcdonalds-survey.ca/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.mcdonalds-survey.ca/websurvey/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.mcdonalds.com/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.mcdonaldsjustforyou.com
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.mcstate.com/careers/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.meencanta.com
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: http://www.myinsipirasian.com
Source: chromecache_277.1.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_285.1.dr, chromecache_277.1.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_368.1.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CObiodi5p4kDFbjwEQgd8YwWrQ;src=947571;type=mcms;cat=si
Source: chromecache_339.1.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CPiy8L25p4kDFRnsEQgdQiU7bA;src=947571;type=mcms;cat=si
Source: chromecache_277.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_304.1.dr	String found in binary or memory: https://assets.adobedtm.com/da51ad226ecd/7fd6101715ba/d109eb87ce7d/RC0dc1e5532d894fa298217a86c2dbd3e
Source: chromecache_309.1.dr	String found in binary or memory: https://assets.adobedtm.com/da51ad226ecd/7fd6101715ba/d109eb87ce7d/RC17f6a7e8133c4430b6edb952da8686c
Source: chromecache_363.1.dr	String found in binary or memory: https://assets.adobedtm.com/da51ad226ecd/7fd6101715ba/d109eb87ce7d/RC32352bd076b34b3892a52abfd814a3e
Source: chromecache_311.1.dr	String found in binary or memory: https://assets.adobedtm.com/da51ad226ecd/7fd6101715ba/d109eb87ce7d/RC5a7b6f5277cb41599eee913b5a048fc
Source: chromecache_399.1.dr	String found in binary or memory: https://assets.adobedtm.com/da51ad226ecd/7fd6101715ba/d109eb87ce7d/RC689d99ecc46949ce9d89e427ef1819d
Source: chromecache_271.1.dr	String found in binary or memory: https://assets.adobedtm.com/da51ad226ecd/7fd6101715ba/d109eb87ce7d/RC71750870ab3240cfb501391671e6b13
Source: chromecache_366.1.dr	String found in binary or memory: https://assets.adobedtm.com/da51ad226ecd/7fd6101715ba/d109eb87ce7d/RCad84db9395a441f9b9ecd453c459f21
Source: chromecache_340.1.dr, chromecache_314.1.dr	String found in binary or memory: https://assets.adobedtm.com/da51ad226ecd/7fd6101715ba/launch-1c9588159558.js
Source: chromecache_402.1.dr, chromecache_378.1.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.js
Source: chromecache_388.1.dr, chromecache_412.1.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_Acti
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://beabrewgooder.com
Source: chromecache_354.1.dr, chromecache_332.1.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: chromecache_323.1.dr, chromecache_246.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=210934
Source: chromecache_297.1.dr	String found in binary or memory: https://careers.mcdonalds.ca/
Source: chromecache_297.1.dr	String found in binary or memory: https://careers.mcdonalds.ca/"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://careers.mcdonalds.ca/corporate-opportunities
Source: chromecache_297.1.dr	String found in binary or memory: https://careers.mcdonalds.ca/corporate-opportunities"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://careers.mcdonalds.ca/our-people
Source: chromecache_297.1.dr	String found in binary or memory: https://careers.mcdonalds.ca/our-people"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://careers.mcdonalds.ca/restaurant-jobs
Source: chromecache_297.1.dr	String found in binary or memory: https://careers.mcdonalds.ca/restaurant-jobs"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://careers.mcdonalds.com
Source: chromecache_355.1.dr, chromecache_289.1.dr, chromecache_359.1.dr, chromecache_285.1.dr, chromecache_400.1.dr, chromecache_277.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_268.1.dr, chromecache_418.1.dr	String found in binary or memory: https://cms32.mcdonalds.ca/api/?class=popups&method=universal&live=1&lang=en
Source: chromecache_268.1.dr, chromecache_418.1.dr	String found in binary or memory: https://cms32.mcdonalds.ca/api/?class=popups&method=universal&live=1&lang=fr
Source: chromecache_268.1.dr, chromecache_418.1.dr	String found in binary or memory: https://cms32.mcdonalds.ca/api/?class=popups&method=universal&stage=1&lang=en
Source: chromecache_268.1.dr, chromecache_418.1.dr	String found in binary or memory: https://cms32.mcdonalds.ca/api/?class=popups&method=universal&stage=1&lang=fr
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://corporate.mcdonalds.com/corpmcd/investors-relations/company-profile.html
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://corporate.mcdonalds.com/corpmcd/investors.html
Source: chromecache_297.1.dr	String found in binary or memory: https://corporate.mcdonalds.com/corpmcd/investors.html"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://cws.givex.com/cws4.0/mcdonaldscard/
Source: chromecache_297.1.dr	String found in binary or memory: https://cws.givex.com/cws4.0/mcdonaldscard/"
Source: chromecache_262.1.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_323.1.dr, chromecache_246.1.dr	String found in binary or memory: https://developer.mozilla.org/enUS/docs/Web/API/Element/closest#Polyfill
Source: chromecache_323.1.dr, chromecache_246.1.dr	String found in binary or memory: https://developer.mozilla.org/enUS/docs/Web/API/Element/matches#Polyfill
Source: chromecache_308.1.dr, chromecache_262.1.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_308.1.dr, chromecache_262.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_382.1.dr, chromecache_276.1.dr, chromecache_419.1.dr, chromecache_326.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_262.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_308.1.dr, chromecache_262.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_262.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_364.1.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_391.1.dr, chromecache_364.1.dr	String found in binary or memory: https://github.com/RobinHerbots/Inputmask
Source: chromecache_291.1.dr, chromecache_346.1.dr	String found in binary or memory: https://github.com/gnarf37/jquery-requestAnimationFrame
Source: chromecache_308.1.dr, chromecache_262.1.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_400.1.dr	String found in binary or memory: https://google.com
Source: chromecache_400.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://itunes.apple.com/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://itunes.apple.com/ca/app/my-mcds/id375695000?mt=8
Source: chromecache_297.1.dr	String found in binary or memory: https://itunes.apple.com/ca/app/my-mcds/id375695000?mt=8"
Source: chromecache_391.1.dr, chromecache_364.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_391.1.dr, chromecache_364.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_391.1.dr, chromecache_364.1.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://maps.google.com/maps/api/js?v=3.43&libraries=geometry&client=gme-mcdonaldscorporation2&chann
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://mcdeliveryatmcdonalds.com/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://mcdonalds.ca/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://mcdonalds.jibeapply.com
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://mcdonalds.smart.link
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://news.mcdonalds.ca/?_ga=1.168399713.1133209987.1491015307
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://news.mcdonalds.ca/?_ga=1.186842216.1133209987.1491015307
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://news.mcdonalds.ca/executive-team
Source: chromecache_277.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_355.1.dr, chromecache_289.1.dr, chromecache_359.1.dr, chromecache_285.1.dr, chromecache_400.1.dr, chromecache_277.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://play.google.com/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.mcdonalds.superapp
Source: chromecache_297.1.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.mcdonalds.superapp"
Source: chromecache_286.1.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.mcdonalds.superapp&hl=en_CA"
Source: chromecache_286.1.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.mcdonalds.superapp&hl=en_CA
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://playatmcd.com
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://playatmcd.com/fantaorange
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://playatmcd.com/mobileorder
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://postmates.com/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://postmates.com/"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://premium.vcdelivery.com/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://promo.playatmcd.com/
Source: chromecache_344.1.dr, chromecache_399.1.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=979884&fmt=gif
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://restaurantjobs.mcdonalds.com
Source: chromecache_358.1.dr, chromecache_306.1.dr	String found in binary or memory: https://rum.hlx.page
Source: chromecache_414.1.dr, chromecache_286.1.dr, chromecache_394.1.dr, chromecache_330.1.dr, chromecache_297.1.dr	String found in binary or memory: https://rum.hlx.page/.rum/
Source: chromecache_339.1.dr, chromecache_368.1.dr	String found in binary or memory: https://s.amazon-adsystem.com/iui3?d=forester-did&ex-fargs=%3Fid%3Dbf3aafda-9263-8b0c-9aea-5a44c2ac1
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://s.go-mpulse.net/boomerang/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://s2.go-mpulse.net/boomerang/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://s3.amazonaws.com/
Source: chromecache_297.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/Category-Beef:menu-category?resmode=sharp2
Source: chromecache_297.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/Category-Beverages:menu-category?resmode=sharp2
Source: chromecache_297.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/Category-Breakfast:menu-category?resmode=sharp2
Source: chromecache_297.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/Category-Chicken:menu-category?resmode=sharp2
Source: chromecache_297.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/Category-Desserts-Shakes:menu-category?resmode=sharp2
Source: chromecache_297.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/Category-HappyMeal:menu-category?resmode=sharp2
Source: chromecache_297.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/Category-McCafe:menu-category?resmode=sharp2
Source: chromecache_297.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/Category-McPicks:menu-category?resmode=sharp2
Source: chromecache_297.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/Category-Sandwiches-Wraps:menu-category?resmode=sharp2
Source: chromecache_297.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/Category-Snacks-Sides:menu-category?resmode=sharp2
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/linked-payments-apppage-EN:2-column-desktop?resmode=sharp
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/linked-payments-apppage-EN:publication-column-mobile?resm
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/loyalty2021-app-EN-hero-1:hero-desktop?resmode=sharp2
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/loyalty2021-app-EN-hero-1:hero-mobile?resmode=sharp2
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/loyalty2021-app-EN-v2-2:2-column-desktop?resmode=sharp2
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/loyalty2021-app-EN-v2-2:publication-column-mobile?resmode
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/loyalty2021-app-EN-v2-3:2-column-desktop?resmode=sharp2
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/loyalty2021-app-EN-v2-3:publication-column-mobile?resmode
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/loyalty2021-app-EN-v2-5:2-column-desktop?resmode=sharp2
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/loyalty2021-app-EN-v2-5:publication-column-mobile?resmode
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/loyalty2021-app-EN-v3-4:2-column-desktop?resmode=sharp2
Source: chromecache_286.1.dr	String found in binary or memory: https://s7d1.scene7.com/is/image/mcdonalds/loyalty2021-app-EN-v3-4:publication-column-mobile?resmode
Source: chromecache_354.1.dr, chromecache_332.1.dr	String found in binary or memory: https://services.google.com/sitestats/
Source: chromecache_391.1.dr, chromecache_364.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://smart.link
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://smart.link/0jcgbmhnwrgqq
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://smart.link/5cb8d8a06d629
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://smart.link/5cd47502aaf51
Source: chromecache_286.1.dr	String found in binary or memory: https://smart.link/cqso9x3dpkoyf
Source: chromecache_286.1.dr	String found in binary or memory: https://smart.link/cqso9x3dpkoyf"
Source: chromecache_344.1.dr, chromecache_399.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_268.1.dr, chromecache_418.1.dr	String found in binary or memory: https://stg32.mcdonalds.ca/inscription/
Source: chromecache_268.1.dr, chromecache_418.1.dr	String found in binary or memory: https://stg32.mcdonalds.ca/subscription/
Source: chromecache_268.1.dr, chromecache_418.1.dr	String found in binary or memory: https://stg32.mcdonalds.ca/subscription/opt-in/registration/register.php
Source: chromecache_268.1.dr, chromecache_418.1.dr	String found in binary or memory: https://stg32.mcdonalds.ca/subscription/opt-in/registration/register.php?lang=fr
Source: chromecache_308.1.dr, chromecache_262.1.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_354.1.dr, chromecache_332.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_323.1.dr, chromecache_246.1.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.find
Source: chromecache_355.1.dr, chromecache_289.1.dr, chromecache_359.1.dr, chromecache_285.1.dr, chromecache_400.1.dr, chromecache_277.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://vosquestions.mcdonalds.ca/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.TrickTreatWin.com
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.beabrewgooder.com
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.beabrewgooder.com/en-us/rules
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.doordash.com/en-AU/categories/3d933739-bad7-4217-8d2d-cb442acd3560
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.doordash.com/en-AU/categories/3d933739-bad7-4217-8d2d-cb442acd3560"
Source: chromecache_277.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_238.1.dr, chromecache_241.1.dr, chromecache_295.1.dr, chromecache_410.1.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/780971155/?random
Source: chromecache_400.1.dr, chromecache_277.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_277.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_355.1.dr, chromecache_289.1.dr, chromecache_359.1.dr, chromecache_400.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_285.1.dr, chromecache_277.1.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_354.1.dr, chromecache_332.1.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: chromecache_244.1.dr, chromecache_363.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-780971155
Source: chromecache_355.1.dr, chromecache_289.1.dr, chromecache_359.1.dr, chromecache_400.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.grubhub.com/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.grubhub.com/"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.instagram.com/mcdocanada/
Source: chromecache_297.1.dr	String found in binary or memory: https://www.instagram.com/mcdocanada/"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.jbalvinformcdonalds.com
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.mcdonalds.ca/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.mcdonalds.com/
Source: chromecache_297.1.dr	String found in binary or memory: https://www.mcdonalds.com/ca/en-ca/contact-us/faqs/faq-faqs/linked-payment.html
Source: chromecache_286.1.dr	String found in binary or memory: https://www.mcdonalds.com/ca/en-ca/getmoremcds/mcdonaldsapp.html
Source: chromecache_286.1.dr	String found in binary or memory: https://www.mcdonalds.com/ca/en-ca/terms-and-conditions/mccafe-loyalty.html
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.mcdonalds.com/content/dam/ca/nfl/web/library/imgs/app-mobile.png
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.mcdonalds.com/content/dam/mcdonalds/coca-cola.jpg
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.mcdonalds.com/freemcmuffin
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.mcdonalds.com/us/en-us/restaurant-locator.html
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.pinterest.ca/mcdonaldscanada/
Source: chromecache_297.1.dr	String found in binary or memory: https://www.pinterest.ca/mcdonaldscanada/"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.playatmcd.com
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.playatmcd.com/fantaorange
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.playatmcd.com/mobileorder
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.rmhccanada.ca/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.snapchat.com/add/mcdonaldscanada
Source: chromecache_297.1.dr	String found in binary or memory: https://www.snapchat.com/add/mcdonaldscanada"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.tricktreatwin.com
Source: chromecache_297.1.dr	String found in binary or memory: https://www.ubereats.com/brand/mcdonalds?utm_source
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www.youtube.com/user/McDonaldsCanada
Source: chromecache_297.1.dr	String found in binary or memory: https://www.youtube.com/user/McDonaldsCanada"
Source: chromecache_268.1.dr, chromecache_418.1.dr	String found in binary or memory: https://www4.mcdonalds.ca/inscription/
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www4.mcdonalds.ca/mccafe_eng
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www4.mcdonalds.ca/mccafe_eng"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www4.mcdonalds.ca/mcdeliverycanada/
Source: chromecache_297.1.dr	String found in binary or memory: https://www4.mcdonalds.ca/mcdeliverycanada/"
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www4.mcdonalds.ca/subscription
Source: chromecache_297.1.dr	String found in binary or memory: https://www4.mcdonalds.ca/subscription"
Source: chromecache_268.1.dr, chromecache_286.1.dr, chromecache_418.1.dr, chromecache_297.1.dr	String found in binary or memory: https://www4.mcdonalds.ca/subscription/
Source: chromecache_268.1.dr, chromecache_418.1.dr	String found in binary or memory: https://www4.mcdonalds.ca/subscription/opt-in/registration/register.php
Source: chromecache_268.1.dr, chromecache_418.1.dr	String found in binary or memory: https://www4.mcdonalds.ca/subscription/opt-in/registration/register.php?lang=fr
Source: chromecache_286.1.dr, chromecache_297.1.dr	String found in binary or memory: https://yourquestions.mcdonalds.ca/

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58458
Source: unknown	Network traffic detected: HTTP traffic on port 58535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58457
Source: unknown	Network traffic detected: HTTP traffic on port 58426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58467
Source: unknown	Network traffic detected: HTTP traffic on port 58449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58463
Source: unknown	Network traffic detected: HTTP traffic on port 58529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58468
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58350
Source: unknown	Network traffic detected: HTTP traffic on port 58369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58473
Source: unknown	Network traffic detected: HTTP traffic on port 58358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58368
Source: unknown	Network traffic detected: HTTP traffic on port 58402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58367
Source: unknown	Network traffic detected: HTTP traffic on port 58534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58364
Source: unknown	Network traffic detected: HTTP traffic on port 58563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 58546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58450 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58369
Source: unknown	Network traffic detected: HTTP traffic on port 58557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 58455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58371
Source: unknown	Network traffic detected: HTTP traffic on port 58398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58539
Source: unknown	Network traffic detected: HTTP traffic on port 58371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58417
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58538
Source: unknown	Network traffic detected: HTTP traffic on port 58465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58419
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58534
Source: unknown	Network traffic detected: HTTP traffic on port 58442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58421
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58420
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58423
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58422
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58543
Source: unknown	Network traffic detected: HTTP traffic on port 58565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58546
Source: unknown	Network traffic detected: HTTP traffic on port 58460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58547
Source: unknown	Network traffic detected: HTTP traffic on port 58507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58434
Source: unknown	Network traffic detected: HTTP traffic on port 58531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58430
Source: unknown	Network traffic detected: HTTP traffic on port 58499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58438
Source: unknown	Network traffic detected: HTTP traffic on port 58409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58445
Source: unknown	Network traffic detected: HTTP traffic on port 58508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58565
Source: unknown	Network traffic detected: HTTP traffic on port 58530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58561
Source: unknown	Network traffic detected: HTTP traffic on port 58431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58449
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58456
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58451
Source: unknown	Network traffic detected: HTTP traffic on port 58547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58500
Source: unknown	Network traffic detected: HTTP traffic on port 58498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58509
Source: unknown	Network traffic detected: HTTP traffic on port 58372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58507
Source: unknown	Network traffic detected: HTTP traffic on port 58464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58510
Source: unknown	Network traffic detected: HTTP traffic on port 58457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58517
Source: unknown	Network traffic detected: HTTP traffic on port 58405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58519
Source: unknown	Network traffic detected: HTTP traffic on port 58350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58400
Source: unknown	Network traffic detected: HTTP traffic on port 58458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58408
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58402
Source: unknown	Network traffic detected: HTTP traffic on port 58554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58526
Source: unknown	Network traffic detected: HTTP traffic on port 58390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58533
Source: unknown	Network traffic detected: HTTP traffic on port 58342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58384
Source: unknown	Network traffic detected: HTTP traffic on port 58391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58382
Source: unknown	Network traffic detected: HTTP traffic on port 58456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58381
Source: unknown	Network traffic detected: HTTP traffic on port 58301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58398
Source: unknown	Network traffic detected: HTTP traffic on port 58510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58390
Source: unknown	Network traffic detected: HTTP traffic on port 58562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58393
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58392
Source: unknown	Network traffic detected: HTTP traffic on port 58528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58285
Source: unknown	Network traffic detected: HTTP traffic on port 58511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58451 -> 443

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.17:58301 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:58364 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:58369 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:58466 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.64:443 -> 192.168.2.17:58467 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:58468 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.130:443 -> 192.168.2.17:58469 version: TLS 1.2

System Summary

Classification label

Source: classification engine

Classification label: clean2.win@25/295@132/36

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2004,i,8072929916174306530,15580291225352828533,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://link.canada.mcdonalds.com/f/a/-7HbFTsbsJPCM-E6mcdGUA~~/AAQRxQA~/RgRo_Oy7P0QxaHR0cHM6Ly9zbWFydC5saW5rL3ZuNWN1b2xzd3lrcmM_bGlkPWJ2cGxicjIzZnF5dFcDc3BjQgpnErtnGmfgymqeUiN2cXh5eGhyNmRxQHByaXZhdGVyZWxheS5hcHBsZWlkLmNvbVgEAAAAsw~~"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2004,i,8072929916174306530,15580291225352828533,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Windows shortcut file (LNK) contains relative path

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Boot Survival

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior