26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 3c:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T4cb,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Mint.Zard.Generic Sample 8b6818a8c1ff… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 8b6818a8c1ff…. Malware family: Mint.Zard.Generic. Threat score 100/100. 17/28 AV engines flagged this file. 4 malicious and 16 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/8b6818a8c1ffe8fd04b3f47c604152b9475c8cafbe6957d3f1095f827c27e954","keywords":["Malicious","Mint.Zard.Generic","malware analysis","sandbox report","threat intelligence","8b6818a8c1ffe8fd04b3f47c604152b9475c8cafbe6957d3f1095f827c27e954"],"about":{"@type":"SoftwareApplication","name":"8b6818a8c1ffe8fd04b3f47c604152b9475c8cafbe6957d3f1095f827c27e954.bin","applicationCategory":["peexe","executable"],"identifier":"8b6818a8c1ffe8fd04b3f47c604152b9475c8cafbe6957d3f1095f827c27e954","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Mint.Zard.Generic","antivirusDetections":{"malicious":17,"total":28},"behavioralIndicators":{"malicious":4,"suspicious":16},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T1829e,Contains base64 string in header "like" in header "GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: icanhazip.com" Contains base64 string in header "4664" in header "GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: icanhazip.com" Contains base64 string in header "/8/n" in header "GET /8/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "like" in header "GET /8/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "4664" in header "GET /8/n.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "/8/20333" in header "GET /8/20333.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "like" in header "GET /8/20333.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "4664" in header "GET /8/20333.txt HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36Host: 130.12.180.190" Contains base64 string in header "/service/msn/livetile/singletile" in header "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WNS/10.0Host: assets.msn.com" Contains base64 string in header "appxmanifest" in header "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WNS/10.0Host: assets.msn.com" Contains base64 string in header "Keep" in header "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1Connection: Keep-AliveUser-Agent: Microsoft-WNS/10.0Host: assets.msn.com" Contains base64 string in header "/REST/v1/Imagery/Map/roadondemandfull/40" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "shading=" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "strokeWidthScale" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "virtualearth" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "like" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "0Sec" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Mode" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Site" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Language" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "8Sec" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Edge" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Chromium" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Platform" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Encoding" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "gzip" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Dest" in header "GET /REST/v1/Imagery/Map/roadondemandfull/40.751,-73.964/5?mapSize=268,136&shading=terrain&key=AnTcaqBi2ypp0xI-OZNi4W_ik2KhjgpqioTAtXLC8GzkMBQRMlyxvxyTnd5b73im&c=en-us&maxAge=86400&st=me|lv:0_vg|v:0_nh|lv:0_pp|lv:1_cp|v:0_trs|v:1;lv:0;strokeWidthScale:0.2_wt|fc:B3E5FC_cst|v:0&logo=n&da=n&sftr=newweather&userregion=US HTTP/2Host: ecn.dev.virtualearth.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: u=1, iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "/sg/msn/1/cm" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "32DFF8A43A9F6A9B15B5EE573B1A6B37" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "gdpr" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "like" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "0Sec" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Mode" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Site" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Language" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "8Sec" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Edge" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Chromium" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Platform" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Encoding" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "gzip" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Dest" in header "GET /sg/msn/1/cm?taboola_hm=32DFF8A43A9F6A9B15B5EE573B1A6B37&gdpr=0&gdpr_consent= HTTP/2Host: trc.taboola.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: noneReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "microsoftSsp" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "true" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "gdpr" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "linkedin" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "like" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "0Sec" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Mode" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Site" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Language" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "1391f723" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "91e0" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "4064" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "8cb8" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "08df8de6ce67" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Priority" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "8Sec" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Edge" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Chromium" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Platform" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Encoding" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "gzip" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Dest" in header "GET /setuid?partner=microsoftSsp&dbredirect=true&dnt=0&gdpr=0&gdpr_consent= HTTP/2Host: px.ads.linkedin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Cookie: bcookie="v=2&1391f723-91e0-4064-8cb8-08df8de6ce67"Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "222166F75FD3671F181970045E3D66DC" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "gdpr" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "253A" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "252F" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "2526code" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "253D222166F75FD3671F181970045E3D66DC" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "2526gdpr" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "253D" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "like" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "0Sec" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Mode" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Site" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Language" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "8Sec" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Edge" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Chromium" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Platform" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Shopping" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Flag" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Encoding" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "gzip" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "Dest" in header "GET /mapuid?member=280&user=222166F75FD3671F181970045E3D66DC;&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fm.adnxs.com%2Fseg%3Fadd%3D5159620%26redir%3Dhttps%253A%252F%252Fib.adnxs.com%252Fsetuid%253Fentity%253D483%2526code%253D222166F75FD3671F181970045E3D66DC%2526gdpr%253D0%2526gdpr_consent%253D HTTP/2Host: m.adnxs.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeReferer: https://ntp.msn.com/Sec-Fetch-Site: cross-siteAccept-Language: en-US,en;q=0.9Priority: iAccept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Ch-Ua: "Not:A-Brand";v="99", "Microsoft Edge";v="145", "Chromium";v="145"Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"X-Edge-Shopping-Flag: 1Accept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: image" Contains base64 string in header "/assets/edge" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "apps" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "manifest" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "gz/4" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "81/asset" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "edgeassetservice" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "like" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "0Sec" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Mode" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "corsEdge" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "ShorelineSec" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Site" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Language" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Encoding" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "gzip" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Dest" in header "GET /assets/edge_hub_apps_manifest_gz/4.11.81/asset?assetgroup=Shoreline HTTP/2Host: edgeassetservice.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsEdge-Asset-Group: ShorelineSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "POST" in header "POST /chromewebstore/v1.1/items/verify HTTP/2Host: www.googleapis.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Content-Type: application/jsonSec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "like" in header "POST /chromewebstore/v1.1/items/verify HTTP/2Host: www.googleapis.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Content-Type: application/jsonSec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "0Content" in header "POST /chromewebstore/v1.1/items/verify HTTP/2Host: www.googleapis.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Content-Type: application/jsonSec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Type" in header "POST /chromewebstore/v1.1/items/verify HTTP/2Host: www.googleapis.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Content-Type: application/jsonSec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Mode" in header "POST /chromewebstore/v1.1/items/verify HTTP/2Host: www.googleapis.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Content-Type: application/jsonSec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Site" in header "POST /chromewebstore/v1.1/items/verify HTTP/2Host: www.googleapis.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Content-Type: application/jsonSec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Language" in header "POST /chromewebstore/v1.1/items/verify HTTP/2Host: www.googleapis.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Content-Type: application/jsonSec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Encoding" in header "POST /chromewebstore/v1.1/items/verify HTTP/2Host: www.googleapis.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Content-Type: application/jsonSec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "gzip" in header "POST /chromewebstore/v1.1/items/verify HTTP/2Host: www.googleapis.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Content-Type: application/jsonSec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Dest" in header "POST /chromewebstore/v1.1/items/verify HTTP/2Host: www.googleapis.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Content-Type: application/jsonSec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Priority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "json" in header "GET /mouse-gesture/config.json HTTP/2Host: edge-consumer-static.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: nonePriority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "edge" in header "GET /mouse-gesture/config.json HTTP/2Host: edge-consumer-static.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: nonePriority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "consumer" in header "GET /mouse-gesture/config.json HTTP/2Host: edge-consumer-static.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: nonePriority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "like" in header "GET /mouse-gesture/config.json HTTP/2Host: edge-consumer-static.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: nonePriority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "0Sec" in header "GET /mouse-gesture/config.json HTTP/2Host: edge-consumer-static.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: nonePriority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Mode" in header "GET /mouse-gesture/config.json HTTP/2Host: edge-consumer-static.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: nonePriority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Site" in header "GET /mouse-gesture/config.json HTTP/2Host: edge-consumer-static.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: nonePriority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "nonePriority" in header "GET /mouse-gesture/config.json HTTP/2Host: edge-consumer-static.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: nonePriority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Encoding" in header "GET /mouse-gesture/config.json HTTP/2Host: edge-consumer-static.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: nonePriority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "gzip" in header "GET /mouse-gesture/config.json HTTP/2Host: edge-consumer-static.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: nonePriority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "Dest" in header "GET /mouse-gesture/config.json HTTP/2Host: edge-consumer-static.azureedge.netUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Storage-Access: activeSec-Fetch-Site: nonePriority: u=4, iAccept-Encoding: gzip, deflate, br, zstdSec-Fetch-Dest: empty" Contains base64 string in header "5QmmktTZ2YyNd3kU7eWGoNes" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "ojLaO96xzeFfVgoJD022kEWu" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "clients2" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "like" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "0Sec" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "Mode" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "Site" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "Language" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "9Sec" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "Mesh" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "Arch" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "iSec" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "Edge" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "3800" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "stableAccept" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "Encoding" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "gzip" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "16299Sec" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty" Contains base64 string in header "Dest" in header "GET /crx/blobs/AXJDbcA7-qvp7x7j_5QmmktTZ2YyNd3kU7eWGoNes-yTz0zj4fWyFlD-Vi_ngMpHdm_8woSV0_ojLaO96xzeFfVgoJD022kEWu-_knETVT9QF_3w4dY4DKgd6rElhsRelgcAxlKa5d02n9hxYZBm9sgkym3onVcyGxJJ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_106_1_0.crx HTTP/2Host: clients2.googleusercontent.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0Sec-Fetch-Mode: no-corsSec-Fetch-Site: noneAccept-Language: en-US,en;q=0.9Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-Os: WindowsPriority: u=4, iSec-Mesh-Client-Edge-Version: 145.0.3800.58Sec-Mesh-Client-Edge-Channel: stableAccept-Encoding: gzip, deflate, br, zstdSec-Mesh-Client-Os-Version: 10.0.16299Sec-Mesh-Client-Webview: 0Sec-Fetch-Dest: empty"28:T775," HTTP/1.1 200 OK Date: Fri 05 Jun 2026 19:14:59 GMT Content-Type: text/plain Content-Length: 14 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET set-cookie: __cf_bm=fshGY9jL2XZ8CnsVaznATX0cUVEO6t8YEXRTQrxlGdA-1780686899.5923455-1.0.1.1-Mz0Zr.lT183sUpfoXqIgSp5HJb0k09w56qz0wF.LNnBm1ca7o0HuHac0KHg91HJfRnV3.gklBD443rPJpTQMh1IHGO0zlFsFiLKEKxYnUoboUk9zdO6lgrz5DBrw8Y0J; HttpOnly; Path=/; Domain=icanhazip.com; Expires=Fri 05 Jun 2026 19:44:59 GMT Server: cloudflare CF-RAY: a07180e26dbc1ff0-SJC alt-svc: h3=":443"; ma=86400 with response body ==>36342E3132342E31322E3136320A....... "GET /8/n.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri 05 Jun 2026 19:15:00 GMT Content-Type: text/plain Content-Length: 6 Last-Modified: Tue 21 Apr 2026 16:56:48 GMT Connection: keep-alive ETag: "69e7ac50-6" Accept-Ranges: bytes with response body ==>34313033360A....... "GET /8/20333.txt HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Host: 130.12.180.190" Response ==> HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri 05 Jun 2026 19:15:00 GMT Content-Type: text/plain Content-Length: 258126 Last-Modified: Tue 21 Apr 2026 07:01:44 GMT Connection: keep-alive ETag: "69e720d8-3f04e" Accept-Ranges: bytes with response body ==>32324061696D2E636F6D3A324C5732736D4F53384762730A6D313232303939406174742E6E65743A756E69636F726E31310A6D7367656E636140616F6C2E636F....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:01 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.190 b=1150071599 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 448cb32f | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:01 Server-Timing: clientrtt; dur=52 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.190 Akamai-Request-ID: 448cb32f X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.be7019b8.1780687021.448cb32f Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:01 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.153 b=827366802 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 31509d92 | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:01 Server-Timing: clientrtt; dur=49 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.153 Akamai-Request-ID: 31509d92 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.997019b8.1780687021.31509d92 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:01 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.149 b=158384476 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 970c15c | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:01 Server-Timing: clientrtt; dur=49 clienttt; dur=1 origin; dur=0 cdntime; dur=1 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.149 Akamai-Request-ID: 970c15c X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.957019b8.1780687021.970c15c Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0553704 DDD-ActivityId: 84b07a98-7701-4f01-8b38-ab8b6134b398 DDD-TMPL-Removed: False DDD-DebugId: 84b07a98-7701-4f01-8b38-ab8b6134b398|2026-06-05T19:13:49.2393327Z|fabric_msn|EUS2-A|News_341 DDD-Auth-Features: AT:NA;DID:m-3499A0CDF8866B0F386DB7A2F9476A74;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 56 X-MSEdge-ResponseInfo: 56 X-Ceto-ref: 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: BD837B1B995E4317BCF96A7F33F06D76 Ref B: CHI261140505034 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:01 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.155 b=845665137 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 3267d371 | 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z | 2026-06-05T19:17:01 Server-Timing: clientrtt; dur=47 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.155 Akamai-Request-ID: 3267d371 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.9b7019b8.1780687021.3267d371 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:01 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.158 b=961414782 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 394e067e | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:01 Server-Timing: clientrtt; dur=49 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.158 Akamai-Request-ID: 394e067e X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.9e7019b8.1780687021.394e067e Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0553704 DDD-ActivityId: 84b07a98-7701-4f01-8b38-ab8b6134b398 DDD-TMPL-Removed: False DDD-DebugId: 84b07a98-7701-4f01-8b38-ab8b6134b398|2026-06-05T19:13:49.2393327Z|fabric_msn|EUS2-A|News_341 DDD-Auth-Features: AT:NA;DID:m-3499A0CDF8866B0F386DB7A2F9476A74;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 56 X-MSEdge-ResponseInfo: 56 X-Ceto-ref: 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: BD837B1B995E4317BCF96A7F33F06D76 Ref B: CHI261140505034 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:01 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.179 b=759151508 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 2d3fbb94 | 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z | 2026-06-05T19:17:01 Server-Timing: clientrtt; dur=49 clienttt; dur=1 origin; dur=0 cdntime; dur=1 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.179 Akamai-Request-ID: 2d3fbb94 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.b37019b8.1780687021.2d3fbb94 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:02 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.190 b=1150071820 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 448cb40c | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:01 Server-Timing: clientrtt; dur=58 clienttt; dur=1 origin; dur=0 cdntime; dur=1 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.190 Akamai-Request-ID: 448cb40c X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.be7019b8.1780687021.448cb40c Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0553704 DDD-ActivityId: 84b07a98-7701-4f01-8b38-ab8b6134b398 DDD-TMPL-Removed: False DDD-DebugId: 84b07a98-7701-4f01-8b38-ab8b6134b398|2026-06-05T19:13:49.2393327Z|fabric_msn|EUS2-A|News_341 DDD-Auth-Features: AT:NA;DID:m-3499A0CDF8866B0F386DB7A2F9476A74;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 56 X-MSEdge-ResponseInfo: 56 X-Ceto-ref: 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: BD837B1B995E4317BCF96A7F33F06D76 Ref B: CHI261140505034 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:02 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.155 b=845665482 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 3267d4ca | 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z | 2026-06-05T19:17:02 Server-Timing: clientrtt; dur=64 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.155 Akamai-Request-ID: 3267d4ca X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.9b7019b8.1780687022.3267d4ca Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:02 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.153 b=827367038 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 31509e7e | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:02 Server-Timing: clientrtt; dur=67 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.153 Akamai-Request-ID: 31509e7e X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.997019b8.1780687022.31509e7e Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:02 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.149 b=158384761 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 970c279 | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:02 Server-Timing: clientrtt; dur=67 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.149 Akamai-Request-ID: 970c279 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.957019b8.1780687022.970c279 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:03 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.158 b=961414987 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 394e074b | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:03 Server-Timing: clientrtt; dur=62 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.158 Akamai-Request-ID: 394e074b X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.9e7019b8.1780687023.394e074b Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0553704 DDD-ActivityId: 84b07a98-7701-4f01-8b38-ab8b6134b398 DDD-TMPL-Removed: False DDD-DebugId: 84b07a98-7701-4f01-8b38-ab8b6134b398|2026-06-05T19:13:49.2393327Z|fabric_msn|EUS2-A|News_341 DDD-Auth-Features: AT:NA;DID:m-3499A0CDF8866B0F386DB7A2F9476A74;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 56 X-MSEdge-ResponseInfo: 56 X-Ceto-ref: 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: BD837B1B995E4317BCF96A7F33F06D76 Ref B: CHI261140505034 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:03 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.179 b=759151618 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 2d3fbc02 | 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z | 2026-06-05T19:17:03 Server-Timing: clientrtt; dur=66 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.179 Akamai-Request-ID: 2d3fbc02 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.b37019b8.1780687023.2d3fbc02 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:04 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.190 b=1150072917 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 448cb855 | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:04 Server-Timing: clientrtt; dur=70 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.190 Akamai-Request-ID: 448cb855 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.be7019b8.1780687024.448cb855 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0553704 DDD-ActivityId: 84b07a98-7701-4f01-8b38-ab8b6134b398 DDD-TMPL-Removed: False DDD-DebugId: 84b07a98-7701-4f01-8b38-ab8b6134b398|2026-06-05T19:13:49.2393327Z|fabric_msn|EUS2-A|News_341 DDD-Auth-Features: AT:NA;DID:m-3499A0CDF8866B0F386DB7A2F9476A74;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 56 X-MSEdge-ResponseInfo: 56 X-Ceto-ref: 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: BD837B1B995E4317BCF96A7F33F06D76 Ref B: CHI261140505034 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:04 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.155 b=845667084 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 3267db0c | 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z | 2026-06-05T19:17:04 Server-Timing: clientrtt; dur=67 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.155 Akamai-Request-ID: 3267db0c X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.9b7019b8.1780687024.3267db0c Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:04 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.153 b=827368437 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 3150a3f5 | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:04 Server-Timing: clientrtt; dur=76 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.153 Akamai-Request-ID: 3150a3f5 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.997019b8.1780687024.3150a3f5 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:05 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.149 b=158386374 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 970c8c6 | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:05 Server-Timing: clientrtt; dur=74 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.149 Akamai-Request-ID: 970c8c6 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.957019b8.1780687025.970c8c6 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:06 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.158 b=961416414 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 394e0cde | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:06 Server-Timing: clientrtt; dur=72 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.158 Akamai-Request-ID: 394e0cde X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.9e7019b8.1780687026.394e0cde Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0553704 DDD-ActivityId: 84b07a98-7701-4f01-8b38-ab8b6134b398 DDD-TMPL-Removed: False DDD-DebugId: 84b07a98-7701-4f01-8b38-ab8b6134b398|2026-06-05T19:13:49.2393327Z|fabric_msn|EUS2-A|News_341 DDD-Auth-Features: AT:NA;DID:m-3499A0CDF8866B0F386DB7A2F9476A74;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 56 X-MSEdge-ResponseInfo: 56 X-Ceto-ref: 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: BD837B1B995E4317BCF96A7F33F06D76 Ref B: CHI261140505034 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:06 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.179 b=759153370 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 2d3fc2da | 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z | 2026-06-05T19:17:06 Server-Timing: clientrtt; dur=71 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.179 Akamai-Request-ID: 2d3fc2da X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.b37019b8.1780687026.2d3fc2da Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:07 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.190 b=1150077294 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 448cc96e | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:07 Server-Timing: clientrtt; dur=78 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.190 Akamai-Request-ID: 448cc96e X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.be7019b8.1780687027.448cc96e Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:07 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.153 b=827370854 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 3150ad66 | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:07 Server-Timing: clientrtt; dur=76 clienttt; dur=1 origin; dur=0 cdntime; dur=1 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.153 Akamai-Request-ID: 3150ad66 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.997019b8.1780687027.3150ad66 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0553704 DDD-ActivityId: 84b07a98-7701-4f01-8b38-ab8b6134b398 DDD-TMPL-Removed: False DDD-DebugId: 84b07a98-7701-4f01-8b38-ab8b6134b398|2026-06-05T19:13:49.2393327Z|fabric_msn|EUS2-A|News_341 DDD-Auth-Features: AT:NA;DID:m-3499A0CDF8866B0F386DB7A2F9476A74;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 56 X-MSEdge-ResponseInfo: 56 X-Ceto-ref: 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: BD837B1B995E4317BCF96A7F33F06D76 Ref B: CHI261140505034 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:07 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.155 b=845669430 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 3267e436 | 6a231feda7b447bb9a9b4154a75d40fa|AFD:6a231feda7b447bb9a9b4154a75d40fa|2026-06-05T19:13:49.178Z | 2026-06-05T19:17:07 Server-Timing: clientrtt; dur=72 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.155 Akamai-Request-ID: 3267e436 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.9b7019b8.1780687027.3267e436 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572....... "GET /service/msn/livetile/singletile?market=en-US&source=appxmanifest&tenant=amp&vertical=finance HTTP/1.1 Connection: Keep-Alive User-Agent: Microsoft-WNS/10.0 Host: assets.msn.com" Response ==> HTTP/1.1 200 OK Content-Type: text/xml; charset=utf-8 DDD-AuthenticatedWithJwtFlow: False DDD-UserType: AnonymousMuid DDD-StrategyExecutionLatency: 00:00:00.0471648 DDD-ActivityId: b181b64c-1fcf-42cd-90b1-afc96134b398 DDD-TMPL-Removed: False DDD-DebugId: b181b64c-1fcf-42cd-90b1-afc96134b398|2026-06-05T19:13:49.1434369Z|fabric_msn|EUS2-A|News_175 DDD-Auth-Features: AT:NA;DID:m-36312D7C4192696C09583A13409A689C;IT:Unknown;MuidStateOrigin:MuidFromClientIDHeader OneWebServiceLatency: 48 X-MSEdge-ResponseInfo: 48 X-Ceto-ref: 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z Accept-CH: Sec-CH-UA-Arch Sec-CH-UA-Bitness Sec-CH-UA-Full-Version Sec-CH-UA-Full-Version-List Sec-CH-UA-Mobile Sec-CH-UA-Model Sec-CH-UA-Platform Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 159AD4E439084CD9B43D9998143C60D5 Ref B: CHI261140505060 Ref C: 2026-06-05T19:13:49Z Date: Fri 05 Jun 2026 19:17:07 GMT Content-Length: 1210 Connection: keep-alive Akamai-Request-BC: [a=184.25.112.149 b=158390121 c=g n=US_IL_CHICAGO o=20940] X-CDN-Ref: 970d769 | 6a231fed1d3c4fd780baad954230ce61|AFD:6a231fed1d3c4fd780baad954230ce61|2026-06-05T19:13:49.092Z | 2026-06-05T19:17:07 Server-Timing: clientrtt; dur=78 clienttt; dur=0 origin; dur=0 cdntime; dur=0 wpo;dur=0 1s;dur=0 Akamai-Cache-Status: Hit from child Akamai-Server-IP: 184.25.112.149 Akamai-Request-ID: 970d769 X-AS-SuppressSetCookie: 1 Cache-Control: public max-age=300 report-to: {"group":"network-errors" "max_age":604800 "endpoints":[{"url":"https://deff.nelreports.net/api/report?cat=msn"}]} nel: {"report_to":"network-errors" "max_age":604800 "success_fraction":0.001 "failure_fraction":0.1} Timing-Allow-Origin: * Akamai-GRN: 0.957019b8.1780687027.970d769 Vary: Origin with response body ==>3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E3C74696C653E3C76697375616C20616464496D61676551756572.......2c:T725," Microsoft\"","origin":"Static Parser","mitre_attack_id":"T1027.002","relevance":10,"id":"static-18","sources":[{"report_type":"sandbox","report_id":"6a23201df1ac23188508e0fa"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads the windows installation language","description":"\" \"{\"hash\":\"JGt9GhFWa22J3LKZxHSUu8sqg6t2Iq6qpyupPNa1oKg=\",\"ids\":[\"ghbmnnjooekpmoecnnnilnnbdlolhkhi\"],\"protocol_version\":1}\" HTTP/2 200 OK\nContent-Type: application/json; charset=UTF-8\nDate: Fri\n 05 Jun 2026 19:17:21 GMT\nServer: ESF\nX-Xss-Protection: 0\nX-Content-Type-Options: nosniff\nVary: Referer\nContent-Encoding: gzip\nX-Frame-Options: SAMEORIGIN\nAlt-Svc: h3=\":443\"; ma=2592000\nh3-29=\":443\"; ma=2592000 with response body ==>BINARY_CONTENT.......","origin":"Network Traffic","mitre_attack_id":"T1041","relevance":5,"id":"network-4","sources":[{"report_type":"sandbox","report_id":"6a23201df1ac23188508e0fa"}]},{"level":"suspicious","category":"Network Related","name":"Employs a browser-related User Agent without launching browser","description":"Found User Agent(s): Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":10,"id":"network-22","sources":[{"report_type":"sandbox","report_id":"6a23201df1ac23188508e0fa"}]},{"level":"suspicious","category":"Network Related","name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 104.16.185.241 on port 80 is sent without HTTP header\n TCP traffic to 130.12.180.190 on port 80 is sent without HTTP header","origin":"Network Traffic","mitre_attack_id":"T1071.001","relevance":5,"id":"network-23","sources":[{"report_type":"sandbox","report_id":"6a23201df1ac23188508e0fa"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"Checks warning level of secure to non-secure traffic redirection","description":"\"