hxxps://1fichier[.]com/?71buuig24j82m9ubo7dw

Analysis

max time kernel
90s
max time network
91s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2023, 10:34 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://1fichier.com/?71buuig24j82m9ubo7dw

Score

6^/10

Malware Config

Signatures

Drops Chrome extension 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.62.0_0\manifest.json	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133301828752384078"	chrome.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2924	chrome.exe
2924	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 53 IoCs

pid	Process
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe
Token: SeShutdownPrivilege	2924	chrome.exe
Token: SeCreatePagefilePrivilege	2924	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe
2924	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2924 wrote to memory of 1248	2924	chrome.exe	86
PID 2924 wrote to memory of 1248	2924	chrome.exe	86
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 4560	2924	chrome.exe	87
PID 2924 wrote to memory of 532	2924	chrome.exe	88
PID 2924 wrote to memory of 532	2924	chrome.exe	88
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89
PID 2924 wrote to memory of 232	2924	chrome.exe	89

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://1fichier.com/?71buuig24j82m9ubo7dw
1⤵
- Drops Chrome extension
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd244f9758,0x7ffd244f9768,0x7ffd244f9778
  2⤵
  PID:1248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1780 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:2
  2⤵
  PID:4560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:8
  2⤵
  PID:532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2224 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:8
  2⤵
  PID:232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3232 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3192 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=5276 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5444 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5268 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=6340 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=6164 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:4604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=6012 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=6008 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=5876 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5720 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=6580 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7076 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=6304 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=6720 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=7916 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=7772 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=8176 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=8148 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=8116 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=7968 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=7628 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5292
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=7492 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=7384 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=8908 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=8080 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=9572 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=9440 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=9312 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=9048 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=9040 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=8780 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=8652 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:5412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=10552 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:6504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=10280 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:6812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=10736 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:6828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=9984 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:6820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=10296 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:7136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=4972 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:3120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=10316 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=11016 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:6452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=4880 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:6236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=11192 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:6612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=11020 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:6804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=11440 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:6800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5560 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:8
  2⤵
  PID:7256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5444 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:8
  2⤵
  PID:7264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=11800 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:8
  2⤵
  PID:7364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=11032 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:8
  2⤵
  PID:7408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=12072 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:8
  2⤵
  PID:7804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=5428 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:7792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=12200 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:8652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=4924 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:8760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=2740 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:8684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=6812 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:8572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=9640 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:8532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=5768 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:8432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=5748 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:8428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=10596 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:8444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=10676 --field-trial-handle=1820,i,6110974138216093343,12038472030715834280,131072 /prefetch:1
  2⤵
  PID:7096

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:992

Network

DNS

164.2.77.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

164.2.77.40.in-addr.arpa

IN PTR

Response
DNS

14.110.152.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.110.152.52.in-addr.arpa

IN PTR

Response
DNS

123.108.74.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

123.108.74.40.in-addr.arpa

IN PTR

Response
DNS

1fichier.com

chrome.exe

Remote address:

8.8.8.8:53

Request

1fichier.com

IN A

Response

1fichier.com

IN A

5.39.224.140
DNS

195.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

195.179.250.142.in-addr.arpa

IN PTR

Response

195.179.250.142.in-addr.arpa

IN PTR

ams15s42-in-f31e100net
GET

https://1fichier.com/?71buuig24j82m9ubo7dw

chrome.exe

Remote address:

5.39.224.140:443

Request

GET /?71buuig24j82m9ubo7dw HTTP/2.0
host: 1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
content-security-policy: frame-ancestors 'self'
expires: 0
pragma: no-cache
x-content-type-options: nosniff
x-frame-options: DENY
content-encoding: gzip
GET

https://1fichier.com/qr.pl?do=0.71buuig24j82m9ubo7dw&s=1

chrome.exe

Remote address:

5.39.224.140:443

Request

GET /qr.pl?do=0.71buuig24j82m9ubo7dw&s=1 HTTP/2.0
host: 1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/?71buuig24j82m9ubo7dw
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: image/png
cache-control: public, max-age=31536000
DNS

250.255.255.239.in-addr.arpa

Remote address:

8.8.8.8:53

Request

250.255.255.239.in-addr.arpa

IN PTR

Response
DNS

img.1fichier.com

chrome.exe

Remote address:

8.8.8.8:53

Request

img.1fichier.com

IN A

Response

img.1fichier.com

IN A

5.39.224.141
GET

https://img.1fichier.com/css/style.css

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /css/style.css HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: text/css
content-length: 2757
last-modified: Mon, 05 Dec 2022 05:57:54 GMT
vary: Accept-Encoding
etag: "638d8862-ac5"
content-encoding: gzip
pragma: public
cache-control: public
vary: Accept-Encoding
GET

https://img.1fichier.com/css/jquery.ui.css

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /css/jquery.ui.css HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: text/css
content-length: 5275
last-modified: Thu, 04 Feb 2021 12:14:31 GMT
vary: Accept-Encoding
etag: "601be527-149b"
content-encoding: gzip
pragma: public
cache-control: public
vary: Accept-Encoding
GET

https://img.1fichier.com/js/jquery.js

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /js/jquery.js HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: application/x-javascript
content-length: 75744
last-modified: Fri, 20 Jul 2018 09:43:03 GMT
vary: Accept-Encoding
etag: "5b51aea7-127e0"
content-encoding: gzip
pragma: public
cache-control: public
vary: Accept-Encoding
GET

https://img.1fichier.com/logo.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /logo.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: image/png
content-length: 17372
last-modified: Tue, 01 Jul 2014 07:44:08 GMT
etag: "53b266c8-43dc"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/icons/icon_question.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /icons/icon_question.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: image/png
content-length: 1850
last-modified: Wed, 05 Aug 2015 09:48:58 GMT
etag: "55c1dc0a-73a"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/logo-footer.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /logo-footer.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: image/png
content-length: 8236
last-modified: Tue, 01 Jul 2014 07:45:16 GMT
etag: "53b2670c-202c"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/twitter.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /twitter.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: image/png
content-length: 1184
last-modified: Tue, 15 Dec 2015 17:02:38 GMT
etag: "567047ae-4a0"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/facebook.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /facebook.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: image/png
content-length: 1273
last-modified: Tue, 15 Dec 2015 17:02:15 GMT
etag: "56704797-4f9"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/background-002.jpg

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /background-002.jpg HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://img.1fichier.com/css/style.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: image/jpeg
content-length: 31119
last-modified: Wed, 02 Jul 2014 09:48:55 GMT
etag: "53b3d587-798f"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/ui/ui-bg_highlight-soft_100_eeeeee_1x100.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /ui/ui-bg_highlight-soft_100_eeeeee_1x100.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://img.1fichier.com/css/jquery.ui.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: image/png
content-length: 278
last-modified: Wed, 18 Apr 2018 00:49:02 GMT
etag: "5ad695fe-116"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/ui/ui-bg_gloss-wave_35_f6a828_500x100.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /ui/ui-bg_gloss-wave_35_f6a828_500x100.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://img.1fichier.com/css/jquery.ui.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: image/png
content-length: 5815
last-modified: Wed, 18 Apr 2018 00:49:02 GMT
etag: "5ad695fe-16b7"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/ui/ui-icons_ef8c08_256x240.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /ui/ui-icons_ef8c08_256x240.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://img.1fichier.com/css/jquery.ui.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: image/png
content-length: 4549
last-modified: Wed, 18 Apr 2018 00:49:02 GMT
etag: "5ad695fe-11c5"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/ui/ui-bg_diagonals-thick_20_666666_40x40.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /ui/ui-bg_diagonals-thick_20_666666_40x40.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://img.1fichier.com/css/jquery.ui.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:33 GMT
content-type: image/png
content-length: 312
last-modified: Wed, 18 Apr 2018 00:49:02 GMT
etag: "5ad695fe-138"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/flags/en.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /flags/en.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:34 GMT
content-type: image/png
content-length: 599
last-modified: Mon, 23 Aug 2010 00:21:09 GMT
etag: "4c71bef5-257"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/favicon.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /favicon.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:35 GMT
content-type: image/png
content-length: 6984
last-modified: Mon, 23 Jun 2014 08:41:16 GMT
etag: "53a7e82c-1b48"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/favicon.ico

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /favicon.ico HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:35 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Mon, 23 Jun 2014 08:42:00 GMT
etag: "53a7e858-47e"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
GET

https://img.1fichier.com/ui/ui-bg_glass_65_ffffff_1x400.png

chrome.exe

Remote address:

5.39.224.141:443

Request

GET /ui/ui-bg_glass_65_ffffff_1x400.png HTTP/2.0
host: img.1fichier.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://img.1fichier.com/css/jquery.ui.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: euconsent-v2=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
cookie: addtl_consent=1~39.4.3.9.6.9.13.6.4.15.9.5.2.11.1.7.1.3.2.10.3.5.4.21.4.6.9.7.10.2.9.2.18.7.20.5.20.6.5.1.4.11.29.4.14.4.5.3.10.6.2.9.6.6.9.4.4.29.4.5.3.1.6.2.2.17.1.17.10.9.1.8.6.2.8.3.4.146.8.42.15.1.14.3.1.18.25.3.7.25.5.18.9.7.41.2.4.18.21.3.4.2.7.6.5.2.14.18.7.3.2.2.8.20.8.8.6.3.10.4.20.2.13.4.6.4.11.1.3.22.16.2.6.8.2.4.11.6.5.33.11.8.1.10.28.12.1.3.21.2.7.6.1.9.30.17.4.9.15.8.7.3.6.6.7.2.4.1.7.12.13.22.13.2.12.2.10.1.4.15.2.4.9.4.5.4.7.13.5.15.4.13.4.14.10.15.2.5.6.2.2.1.2.14.7.4.8.2.9.10.18.12.13.2.18.1.1.3.1.1.9.25.4.1.19.8.4.5.3.5.4.8.4.2.2.2.14.2.13.4.2.6.9.6.3.2.2.3.5.2.3.6.10.11.6.3.16.3.11.3.1.2.3.9.19.11.15.3.10.7.6.4.3.4.6.3.3.3.3.1.1.1.6.11.3.1.1.11.6.1.10.5.2.6.3.2.2.4.3.2.2.7.15.7.14.1.3.3.4.5.4.3.2.2.5.4.1.1.2.9.1.6.9.1.5.2.1.7.10.11.1.3.1.1.2.1.3.2.6.1.12.5.3.1.3.1.1.2.2.7.7.1.4.1.2.6.1.2.1.1.3.1.1.4.1.1.2.1.8.1.7.4.3.2.1.3.5.3.9.6.1.15.10.28.1.2.2.12.3.4.1.6.3.4.7.1.3.1.1.3.1.5.3.1.3.4.1.1.4.2.1.2.1.2.2.2.4.2.1.2.2.2.4.1.1.1.2.2.1.1.1.1.2.1.1.1.2.2.1.1.2.1.2.1.7.1.2.1.1.1.2.1.1.1.1.2.1.1.3.2.1.1.8.1.1.6.2.1.6.2.3.2.1.1.1.2.2.3.1.1.4.1.1.2.2.1.1.4.3.1.2.2.1.2.1.2.3.1.1.2.4.1.1.1.5.1.3.6.3.1.5.2.3.4.1.2.3.1.4.2.1.2.2.2.1.1.1.1.1.1.11.1.3.1.1.2.2.5.2.3.3.5.1.1.1.4.2.1.1.2.5.1.9.4.1.1.3.1.7.1.4.5.1.7.2.1.1.1.2.1.1.1.4.2.1.12.1.1.3.1.2.2.3.1.2.1.1.1.2.1.1.2.1.1.1.1.2.4.1.5.1.2.4.3.8.2.2.9.7.2.2.1.2.1.4.6.1.1.6.1.1.2.6.3.1.2.201.300.100
cookie: _sharedID=a488c654-68de-419f-b936-5cb8e66ac3d4
cookie: __qca=P0-1892718206-1685709275385

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:41 GMT
content-type: image/png
content-length: 207
last-modified: Wed, 18 Apr 2018 00:49:02 GMT
etag: "5ad695fe-cf"
pragma: public
cache-control: public
vary: Accept-Encoding
accept-ranges: bytes
DNS

tags.refinery89.com

chrome.exe

Remote address:

8.8.8.8:53

Request

tags.refinery89.com

IN A

Response

tags.refinery89.com

IN CNAME

d38u9fzbdfzf67.cloudfront.net

d38u9fzbdfzf67.cloudfront.net

IN A

65.9.86.6

d38u9fzbdfzf67.cloudfront.net

IN A

65.9.86.53

d38u9fzbdfzf67.cloudfront.net

IN A

65.9.86.82

d38u9fzbdfzf67.cloudfront.net

IN A

65.9.86.105
DNS

t.seedtag.com

chrome.exe

Remote address:

8.8.8.8:53

Request

t.seedtag.com

IN A

Response

t.seedtag.com

IN A

104.18.135.145

t.seedtag.com

IN A

104.18.134.145

t.seedtag.com

IN A

104.18.131.145

t.seedtag.com

IN A

104.18.133.145

t.seedtag.com

IN A

104.18.132.145
GET

https://tags.refinery89.com/v2/1fichiercom.js

chrome.exe

Remote address:

65.9.86.6:443

Request

GET /v2/1fichiercom.js HTTP/2.0
host: tags.refinery89.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/javascript
last-modified: Wed, 31 May 2023 16:34:30 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Fri, 02 Jun 2023 06:55:15 GMT
cache-control: max-age=21600, public
etag: W/"26d59e2e3e8ad6d7126b81106669612e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 084f866feba2345e668d9a32662696ce.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: -NHI2rVdcicteDWX9PyOvusiDQ7_2t-5i5OcOajI_ZtlMq6GD6voUQ==
age: 13158
GET

https://tags.refinery89.com/prebid/prebid6.29.3.js

chrome.exe

Remote address:

65.9.86.6:443

Request

GET /prebid/prebid6.29.3.js HTTP/2.0
host: tags.refinery89.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/javascript
date: Wed, 31 May 2023 16:52:15 GMT
last-modified: Mon, 13 Mar 2023 16:24:30 GMT
etag: W/"7cab59e7d8c16a4603d8efeefee91d4d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 084f866feba2345e668d9a32662696ce.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: Fbz2U2zYOzFgKnbA3LrMixAHLkD4S3HADFS0H2HwmAmfafKPi6JtAg==
age: 150138
GET

https://t.seedtag.com/t/8789-3513-01.js

chrome.exe

Remote address:

104.18.135.145:443

Request

GET /t/8789-3513-01.js HTTP/2.0
host: t.seedtag.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:34:32 GMT
content-type: application/javascript; charset=utf-8
etag: W/"ae6e-cmaEzSZPFM79kDqwA7IeTDDa7dA"
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: REVALIDATED
expires: Fri, 02 Jun 2023 10:54:32 GMT
cache-control: public, max-age=1200
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0f0b60486c0a73-AMS
content-encoding: br
GET

https://t.seedtag.com/c/st_1.5e59e9a2df7d84f4feef.js

chrome.exe

Remote address:

104.18.135.145:443

Request

GET /c/st_1.5e59e9a2df7d84f4feef.js HTTP/2.0
host: t.seedtag.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:34:32 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdv4nsMJ1VsUT5I0FeK3w8x0r5J0wtJqxlxak5xZXTY6pYQFCos2yGYgjn9xS8GqPpzWpKa3h7k84V5dOR3b1CR8aA
cache-control: public, max-age=5356800
expires: Thu, 03 Aug 2023 10:34:32 GMT
last-modified: Thu, 01 Jun 2023 16:23:38 GMT
etag: W/"fbc6bd3ebff2b8eefd64595a7f38652b"
vary: Accept-Encoding
x-goog-generation: 1685636618245946
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 1841
x-goog-hash: crc32c=4pH9ug==
x-goog-hash: md5=+8a9Pr/yuO79ZFlafzhlKw==
x-goog-storage-class: STANDARD
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 65439
server: cloudflare
cf-ray: 7d0f0b636bf40a73-AMS
content-encoding: br
GET

https://t.seedtag.com/c/st_0.f4461b42ad8703763ced.js

chrome.exe

Remote address:

104.18.135.145:443

Request

GET /c/st_0.f4461b42ad8703763ced.js HTTP/2.0
host: t.seedtag.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:34:32 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdtmb3STsVyHPH-EqSmp58ikLn-EIDVoiN7C2QMbI2Rr3lpVwfJryA7MoMZNAagnq_0PzCSCMkpwCmpy72ZAWg0GGw
cache-control: public, max-age=5356800
expires: Thu, 03 Aug 2023 10:34:32 GMT
last-modified: Thu, 01 Jun 2023 16:23:38 GMT
etag: W/"46460bc6eb3b1f44a0a946016e0e9da1"
vary: Accept-Encoding
x-goog-generation: 1685636618165007
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 17602
x-goog-hash: crc32c=y9c+0g==
x-goog-hash: md5=RkYLxus7H0SgqUYBbg6doQ==
x-goog-storage-class: STANDARD
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 65439
server: cloudflare
cf-ray: 7d0f0b635bed0a73-AMS
content-encoding: br
GET

https://t.seedtag.com/c/st_2.3f94521f4f42476d5ce7.js

chrome.exe

Remote address:

104.18.135.145:443

Request

GET /c/st_2.3f94521f4f42476d5ce7.js HTTP/2.0
host: t.seedtag.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:34:32 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdsCiJFgronhjlNva7BHvgZfNplYXci_NX3aLWGXhsjZ4F1pinseHK6nmBNwMn-55XJjeQdZUOunFBi6PI4H_KbRLww1vQFd
cache-control: public, max-age=5356800
expires: Thu, 03 Aug 2023 10:34:32 GMT
last-modified: Thu, 01 Jun 2023 16:23:38 GMT
etag: W/"bd6e9e8d0560585b8078b8247d4ffeb8"
vary: Accept-Encoding
x-goog-generation: 1685636618251029
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 13485
x-goog-hash: crc32c=ZW+uvA==
x-goog-hash: md5=vW6ejQVgWFuAeLgkfU/+uA==
x-goog-storage-class: STANDARD
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 65439
server: cloudflare
cf-ray: 7d0f0b636bf60a73-AMS
content-encoding: br
GET

https://t.seedtag.com/c/st_3.b1b0431af88ed512316d.js

chrome.exe

Remote address:

104.18.135.145:443

Request

GET /c/st_3.b1b0431af88ed512316d.js HTTP/2.0
host: t.seedtag.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:34:32 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdsKh0VySXSimkumyxBJMGAP3twsEgMvUHAqeswZE-7ORTy9owo2eQ-rOwx8A4FABcXoiM6Lj1iI0KHE6vF7W6ma7A
cache-control: public, max-age=5356800
expires: Thu, 03 Aug 2023 10:34:32 GMT
last-modified: Thu, 01 Jun 2023 16:23:38 GMT
etag: W/"e5ee1e999f1e1731972c2a51385530cc"
vary: Accept-Encoding
x-goog-generation: 1685636618200525
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 85604
x-goog-hash: crc32c=DCneKg==
x-goog-hash: md5=5e4emZ8eFzGXLCpROFUwzA==
x-goog-storage-class: STANDARD
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 65439
server: cloudflare
cf-ray: 7d0f0b635bee0a73-AMS
content-encoding: br
GET

https://cs.seedtag.com/cs.html?pt=8789-3513-01&pc=FR&ga=true&cmp=true&cd=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

104.18.135.145:443

Request

GET /cs.html?pt=8789-3513-01&pc=FR&ga=true&cmp=true&cd=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: cs.seedtag.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: st_uid=9a18c70b-65b3-4c15-9429-215852aa89be
cookie: st_ssp=Y291bnRyeV9uYW1lPUluZGlhJmNvdW50cnlfaXNvMj1JTiZjb3VudHJ5X2lzbzM9SU5EJnJlZ2lvbl9uYW1lPU1haGFyYXNodHJhJnJlZ2lvbl9pc28yPU1IJmNpdHlfbmFtZT1UaGFuZSZsb25naXR1ZGU9NzIuOTY3NSZsYXRpdHVkZT0xOS4xOTYzJnppcD00MDA2MDQ=

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:34:36 GMT
content-type: text/html
x-guploader-uploadid: ADPycdtw_1Bjz_IWT1zj8uzM2zJQEwwfu_hDl2a2KAxYualbR3mx5qUlzjoTm6_TXCbPbFemd18-97qlL0ip-FesN-Mf
cache-control: public, max-age=86400
expires: Sat, 03 Jun 2023 10:34:36 GMT
last-modified: Wed, 08 Mar 2023 10:28:58 GMT
etag: W/"5569cfba858088582379bf121d2d4bd2"
vary: Accept-Encoding
x-goog-generation: 1678271338915712
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 15362
x-goog-hash: crc32c=m1+WFQ==
x-goog-hash: md5=VWnPuoWAiFgjeb8SHS1L0g==
x-goog-storage-class: REGIONAL
cf-cache-status: HIT
age: 234
server: cloudflare
cf-ray: 7d0f0b79e8c80a73-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
DNS

prg.smartadserver.com

chrome.exe

Remote address:

8.8.8.8:53

Request

prg.smartadserver.com

IN A

Response

prg.smartadserver.com

IN CNAME

prga.smartadserver.com

prga.smartadserver.com

IN CNAME

hb-geo.delivery-prod-sas.akadns.net

hb-geo.delivery-prod-sas.akadns.net

IN CNAME

itx4.smartadserver.com

itx4.smartadserver.com

IN A

185.86.139.96

itx4.smartadserver.com

IN A

185.86.139.116

itx4.smartadserver.com

IN A

185.86.139.59

itx4.smartadserver.com

IN A

185.86.139.58

itx4.smartadserver.com

IN A

185.86.139.95

itx4.smartadserver.com

IN A

185.86.139.85
DNS

ib.adnxs.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ib.adnxs.com

IN A

Response

ib.adnxs.com

IN CNAME

g.geogslb.com

g.geogslb.com

IN CNAME

ib.anycast.adnxs.com

ib.anycast.adnxs.com

IN A

185.89.210.46

ib.anycast.adnxs.com

IN A

185.83.142.19

ib.anycast.adnxs.com

IN A

185.89.210.122

ib.anycast.adnxs.com

IN A

185.89.211.84

ib.anycast.adnxs.com

IN A

185.89.210.101

ib.anycast.adnxs.com

IN A

185.89.210.244

ib.anycast.adnxs.com

IN A

185.89.210.153

ib.anycast.adnxs.com

IN A

185.89.210.180

ib.anycast.adnxs.com

IN A

185.89.210.20

ib.anycast.adnxs.com

IN A

185.89.210.212

ib.anycast.adnxs.com

IN A

185.89.210.141

ib.anycast.adnxs.com

IN A

185.89.211.12
DNS

adx.adform.net

chrome.exe

Remote address:

8.8.8.8:53

Request

adx.adform.net

IN A

Response

adx.adform.net

IN CNAME

track-eu.adformnet.akadns.net

track-eu.adformnet.akadns.net

IN A

37.157.2.234

track-eu.adformnet.akadns.net

IN A

37.157.3.20

track-eu.adformnet.akadns.net

IN A

37.157.2.229
DNS

match.prod.bidr.io

chrome.exe

Remote address:

8.8.8.8:53

Request

match.prod.bidr.io

IN A

Response

match.prod.bidr.io

IN A

3.115.232.128

match.prod.bidr.io

IN A

52.192.188.206

match.prod.bidr.io

IN A

18.179.211.247

match.prod.bidr.io

IN A

18.177.220.198

match.prod.bidr.io

IN A

18.177.86.134

match.prod.bidr.io

IN A

175.41.198.31

match.prod.bidr.io

IN A

176.32.75.166

match.prod.bidr.io

IN A

18.178.244.136
DNS

cmp.quantcast.com

chrome.exe

Remote address:

8.8.8.8:53

Request

cmp.quantcast.com

IN A

Response

cmp.quantcast.com

IN A

13.227.219.68

cmp.quantcast.com

IN A

13.227.219.42

cmp.quantcast.com

IN A

13.227.219.121

cmp.quantcast.com

IN A

13.227.219.52
DNS

measure.refinery89.com

chrome.exe

Remote address:

8.8.8.8:53

Request

measure.refinery89.com

IN A

Response

measure.refinery89.com

IN CNAME

d1v8205r6uwz5v.cloudfront.net

d1v8205r6uwz5v.cloudfront.net

IN A

108.156.60.34

d1v8205r6uwz5v.cloudfront.net

IN A

108.156.60.104

d1v8205r6uwz5v.cloudfront.net

IN A

108.156.60.56

d1v8205r6uwz5v.cloudfront.net

IN A

108.156.60.72
POST

https://prg.smartadserver.com/prebid/v1

chrome.exe

Remote address:

185.86.139.96:443

Request

POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
Connection: keep-alive
Content-Length: 4064
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Content-Type: text/plain
Accept: */*
Origin: https://1fichier.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://1fichier.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

content-type: application/json; charset=UTF-8
date: Fri, 02 Jun 2023 10:34:35 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://1fichier.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Sun, 02 Jun 2024 10:34:36 GMT; domain=.smartadserver.com; path=/; secure; samesite=none
set-cookie: vs=507391=5478394; domain=.smartadserver.com; path=/; secure; samesite=none
set-cookie: TestIfCookie=ok; domain=.smartadserver.com; path=/; secure; samesite=none
set-cookie: TestIfCookieP=ok; expires=Sun, 02 Jun 2024 10:34:36 GMT; domain=.smartadserver.com; path=/; secure; samesite=none
set-cookie: pid=6880727987372587628; expires=Sun, 02 Jun 2024 10:34:36 GMT; domain=.smartadserver.com; path=/; secure; samesite=none
set-cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; expires=Sat, 03 Jun 2023 10:34:36 GMT; domain=.smartadserver.com; path=/; secure; samesite=none
set-cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; expires=Sat, 03 Jun 2023 10:34:36 GMT; domain=.smartadserver.com; path=/; secure; samesite=none
transfer-encoding: chunked
vary: Accept-Encoding
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://cmp.quantcast.com/choice/He6NsVBfMn23v/1fichier.com/choice.js?tag_version=V2

chrome.exe

Remote address:

13.227.219.68:443

Request

GET /choice/He6NsVBfMn23v/1fichier.com/choice.js?tag_version=V2 HTTP/2.0
host: cmp.quantcast.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/javascript
last-modified: Thu, 12 May 2022 20:09:59 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
date: Fri, 02 Jun 2023 10:34:31 GMT
cache-control: max-age=3600
etag: W/"f4c7e9c099c685741b96e3a5000d745f"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1b0117d337408839a32bf2a49b55b3f0.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: PYS3_zcc_HxpC77-kbM9q7ItXkXoDEH3x6wM7BfhnGdhrlU6DI0TIA==
age: 24
GET

https://quantcast.mgr.consensu.org/tcfv2/40/cmp2.js?referer=1fichier.com

chrome.exe

Remote address:

13.227.219.68:443

Request

GET /tcfv2/40/cmp2.js?referer=1fichier.com HTTP/2.0
host: quantcast.mgr.consensu.org
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: text/javascript;charset=UTF-8
access-control-max-age: 86400
last-modified: Fri, 13 May 2022 16:53:17 GMT
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
date: Fri, 02 Jun 2023 10:02:07 GMT
cache-control: max-age=172800
etag: W/"e052ac178cc7dcc4cc089dd0184806fa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1b0117d337408839a32bf2a49b55b3f0.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: V4-02tjuCLiHtkiRreA1mn8HwPPGs8byDKRFryX8nKcpw-_Xn5cyMw==
age: 13787
GET

https://quantcast.mgr.consensu.org/tcfv2/40/cmp2ui-en.js

chrome.exe

Remote address:

13.227.219.68:443

Request

GET /tcfv2/40/cmp2ui-en.js HTTP/2.0
host: quantcast.mgr.consensu.org
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: text/javascript;charset=UTF-8
access-control-max-age: 604800
last-modified: Fri, 13 May 2022 16:53:22 GMT
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Fri, 02 Jun 2023 04:07:24 GMT
cache-control: max-age=172800
etag: W/"a69e17fb2f729417757e5fbbee7ccc37"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1b0117d337408839a32bf2a49b55b3f0.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: YgU3YVL47rC8WqLlIfNwfhz88aFlLcsuI9IWrk7ELKHgi4gc0yl8IA==
age: 23282
GET

https://cmp.quantcast.com/choice/He6NsVBfMn23v/1fichier.com/choice.js?tag_version=V2

chrome.exe

Remote address:

13.227.219.68:443

Request

GET /choice/He6NsVBfMn23v/1fichier.com/choice.js?tag_version=V2 HTTP/2.0
host: cmp.quantcast.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
if-none-match: W/"f4c7e9c099c685741b96e3a5000d745f"
if-modified-since: Thu, 12 May 2022 20:09:59 GMT

Response

HTTP/2.0 304

date: Fri, 02 Jun 2023 10:35:09 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
cache-control: max-age=3600
etag: W/"f4c7e9c099c685741b96e3a5000d745f"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1b0117d337408839a32bf2a49b55b3f0.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: rH2DFx1hf1fUelERjKY_7GCOkjAIyeD0-gM0zCewm4MosftnL0BqTg==
age: 60
DNS

tlx.3lift.com

chrome.exe

Remote address:

8.8.8.8:53

Request

tlx.3lift.com

IN A

Response

tlx.3lift.com

IN CNAME

as-tlx.3lift.com

as-tlx.3lift.com

IN A

3.0.26.101

as-tlx.3lift.com

IN A

54.169.60.26

as-tlx.3lift.com

IN A

52.74.248.105

as-tlx.3lift.com

IN A

52.77.165.176

as-tlx.3lift.com

IN A

54.169.59.183

as-tlx.3lift.com

IN A

18.139.195.127

as-tlx.3lift.com

IN A

52.76.167.27

as-tlx.3lift.com

IN A

52.77.22.253
GET

https://measure.refinery89.com/website/1273/tag_load

chrome.exe

Remote address:

108.156.60.34:443

Request

GET /website/1273/tag_load HTTP/2.0
host: measure.refinery89.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: image/gif
content-length: 43
cache-control: max-age=0, public, s-maxage=21600
server: Microsoft-IIS/10.0
x-powered-by: PHP/7.3.7
access-control-allow-origin: *
date: Fri, 02 Jun 2023 08:31:29 GMT
x-cache: Hit from cloudfront
via: 1.1 8f4bc83dd77c2931f6260310f57dde66.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P2
x-amz-cf-id: U-V-YsgKUJJGBti0hZliLuz2cSRP4U3PZ2AYV_G9mct5bv9nr-UbwQ==
age: 7384
GET

https://measure.refinery89.com/website/1273/tag_load

chrome.exe

Remote address:

108.156.60.34:443

Request

GET /website/1273/tag_load HTTP/2.0
host: measure.refinery89.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: image/gif
content-length: 43
cache-control: max-age=0, public, s-maxage=21600
server: Microsoft-IIS/10.0
x-powered-by: PHP/7.3.7
access-control-allow-origin: *
date: Fri, 02 Jun 2023 08:31:29 GMT
x-cache: Hit from cloudfront
via: 1.1 8f4bc83dd77c2931f6260310f57dde66.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P2
x-amz-cf-id: mbjhQNT5Kl9PA_vELAd3AWFRz8zmFa3qMDzIn-msa3ZJMghBiHWQWQ==
age: 7420
DNS

140.224.39.5.in-addr.arpa

Remote address:

8.8.8.8:53

Request

140.224.39.5.in-addr.arpa

IN PTR

Response

140.224.39.5.in-addr.arpa

IN PTR

www1fichiercom
DNS

138.179.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

138.179.250.142.in-addr.arpa

IN PTR

Response

138.179.250.142.in-addr.arpa

IN PTR

ams17s10-in-f101e100net
DNS

141.224.39.5.in-addr.arpa

Remote address:

8.8.8.8:53

Request

141.224.39.5.in-addr.arpa

IN PTR

Response

141.224.39.5.in-addr.arpa

IN PTR

img1fichiercom
DNS

6.86.9.65.in-addr.arpa

Remote address:

8.8.8.8:53

Request

6.86.9.65.in-addr.arpa

IN PTR

Response

6.86.9.65.in-addr.arpa

IN PTR

server-65-9-86-6ams1r cloudfrontnet
DNS

145.135.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

145.135.18.104.in-addr.arpa

IN PTR

Response
DNS

17.211.227.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

17.211.227.13.in-addr.arpa

IN PTR

Response

17.211.227.13.in-addr.arpa

IN PTR

server-13-227-211-17ams54r cloudfrontnet
DNS

22.160.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

22.160.190.20.in-addr.arpa

IN PTR

Response
DNS

apps.identrust.com

chrome.exe

Remote address:

8.8.8.8:53

Request

apps.identrust.com

IN A

Response

apps.identrust.com

IN CNAME

identrust.edgesuite.net

identrust.edgesuite.net

IN CNAME

a1952.dscq.akamai.net

a1952.dscq.akamai.net

IN A

88.221.25.169

a1952.dscq.akamai.net

IN A

88.221.25.153
GET

http://apps.identrust.com/roots/dstrootcax3.p7c

chrome.exe

Remote address:

88.221.25.169:80

Request

GET /roots/dstrootcax3.p7c HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/10.0
Host: apps.identrust.com

Response

HTTP/1.1 200 OK

X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=15768000
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' *.identrust.com
Last-Modified: Wed, 08 Feb 2023 16:52:56 GMT
ETag: "37d-5f433188daa00"
Accept-Ranges: bytes
Content-Length: 893
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Content-Type: application/pkcs7-mime
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 11:34:33 GMT
Date: Fri, 02 Jun 2023 10:34:33 GMT
Connection: keep-alive
DNS

quantcast.mgr.consensu.org

chrome.exe

Remote address:

8.8.8.8:53

Request

quantcast.mgr.consensu.org

IN A

Response

quantcast.mgr.consensu.org

IN A

13.227.219.68

quantcast.mgr.consensu.org

IN A

13.227.219.121

quantcast.mgr.consensu.org

IN A

13.227.219.52

quantcast.mgr.consensu.org

IN A

13.227.219.42
DNS

secure.quantserve.com

chrome.exe

Remote address:

8.8.8.8:53

Request

secure.quantserve.com

IN A

Response

secure.quantserve.com

IN CNAME

2kpixel.quantserve.com

2kpixel.quantserve.com

IN CNAME

global.px.quantserve.com

global.px.quantserve.com

IN A

103.229.10.180

global.px.quantserve.com

IN A

103.229.10.247

global.px.quantserve.com

IN A

103.229.10.211

global.px.quantserve.com

IN A

103.229.10.171

global.px.quantserve.com

IN A

103.229.10.192
DNS

test.quantcast.mgr.consensu.org

chrome.exe

Remote address:

8.8.8.8:53

Request

test.quantcast.mgr.consensu.org

IN A

Response

test.quantcast.mgr.consensu.org

IN A

108.156.60.65

test.quantcast.mgr.consensu.org

IN A

108.156.60.90

test.quantcast.mgr.consensu.org

IN A

108.156.60.93

test.quantcast.mgr.consensu.org

IN A

108.156.60.102
DNS

test.quantcast.mgr.consensu.org

chrome.exe

Remote address:

8.8.8.8:53

Request

test.quantcast.mgr.consensu.org

IN A

Response

test.quantcast.mgr.consensu.org

IN A

108.156.60.65

test.quantcast.mgr.consensu.org

IN A

108.156.60.90

test.quantcast.mgr.consensu.org

IN A

108.156.60.93

test.quantcast.mgr.consensu.org

IN A

108.156.60.102
GET

https://test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json

chrome.exe

Remote address:

108.156.60.65:443

Request

GET /GVL-v2/cmp-list.json HTTP/2.0
host: test.quantcast.mgr.consensu.org
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
accept: application/json, text/plain, */*
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
origin: https://1fichier.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Fri, 02 Jun 2023 03:00:40 GMT
last-modified: Mon, 29 May 2023 19:52:29 GMT
etag: W/"beb8778e0e566e6dd95b9e0584ecdf5d"
x-amz-server-side-encryption: AES256
x-amz-version-id: 2_3SYD6kTuAbDz.oUYjfM9PxanupdX__
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ac059d7185137233d6f58dd3345e3798.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P2
x-amz-cf-id: OKch_7O3642dK9-Q1AthtCz8Tjw4Je0gh6tC3yTsChCblpXfOj6wpw==
age: 27233
GET

https://quantcast.mgr.consensu.org/GVL-v2/vendor-list-trimmed-v1.json

chrome.exe

Remote address:

13.227.219.68:443

Request

GET /GVL-v2/vendor-list-trimmed-v1.json HTTP/2.0
host: quantcast.mgr.consensu.org
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
origin: https://1fichier.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Fri, 02 Jun 2023 03:00:35 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Tue, 23 May 2023 16:34:52 GMT
etag: W/"b36ed5d046a96b3b9448cf0c5e34bcd0"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 fe106b75368b4a44b0461d7e712cd360.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: Ep_TgI41XoJriELE-qasfxcY3upznRPDFl5Rb90MfHdGxfa6qpAcYw==
age: 27239
GET

https://quantcast.mgr.consensu.org/tcfv2/google-atp-list.json

chrome.exe

Remote address:

13.227.219.68:443

Request

GET /tcfv2/google-atp-list.json HTTP/2.0
host: quantcast.mgr.consensu.org
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
accept: application/json, text/plain, */*
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
origin: https://1fichier.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/json
access-control-max-age: 3000
cache-control: max-age=172800
date: Fri, 02 Jun 2023 03:00:29 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-credentials: true
last-modified: Fri, 02 Jun 2023 03:00:26 GMT
etag: W/"1dbfd79d4ea7f69c0c42a2f6065532e7"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 fe106b75368b4a44b0461d7e712cd360.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: qQkmjp39s4F0tC97zt6jr-lrlJ4iLTEbg7IRm-KYHhbIzwtP2fX_zw==
age: 27245
DNS

audit-tcfv2.quantcast.mgr.consensu.org

chrome.exe

Remote address:

8.8.8.8:53

Request

audit-tcfv2.quantcast.mgr.consensu.org

IN A

Response

audit-tcfv2.quantcast.mgr.consensu.org

IN A

18.138.188.172

audit-tcfv2.quantcast.mgr.consensu.org

IN A

175.41.146.71

audit-tcfv2.quantcast.mgr.consensu.org

IN A

54.251.135.177
DNS

46.210.89.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

46.210.89.185.in-addr.arpa

IN PTR

Response

46.210.89.185.in-addr.arpa

IN PTR

940bm-nginx-loadbalancermgmtams3adnexusnet
DNS

96.139.86.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

96.139.86.185.in-addr.arpa

IN PTR

Response
DNS

68.219.227.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

68.219.227.13.in-addr.arpa

IN PTR

Response

68.219.227.13.in-addr.arpa

IN PTR

server-13-227-219-68ams54r cloudfrontnet
DNS

34.60.156.108.in-addr.arpa

Remote address:

8.8.8.8:53

Request

34.60.156.108.in-addr.arpa

IN PTR

Response

34.60.156.108.in-addr.arpa

IN PTR

server-108-156-60-34ams1r cloudfrontnet
DNS

234.2.157.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

234.2.157.37.in-addr.arpa

IN PTR

Response
DNS

169.25.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

169.25.221.88.in-addr.arpa

IN PTR

Response

169.25.221.88.in-addr.arpa

IN PTR

a88-221-25-169deploystaticakamaitechnologiescom
DNS

101.26.0.3.in-addr.arpa

Remote address:

8.8.8.8:53

Request

101.26.0.3.in-addr.arpa

IN PTR

Response

101.26.0.3.in-addr.arpa

IN PTR

ec2-3-0-26-101ap-southeast-1compute amazonawscom
DNS

101.26.0.3.in-addr.arpa

Remote address:

8.8.8.8:53

Request

101.26.0.3.in-addr.arpa

IN PTR

Response

101.26.0.3.in-addr.arpa

IN PTR

ec2-3-0-26-101ap-southeast-1compute amazonawscom
DNS

65.60.156.108.in-addr.arpa

Remote address:

8.8.8.8:53

Request

65.60.156.108.in-addr.arpa

IN PTR

Response

65.60.156.108.in-addr.arpa

IN PTR

server-108-156-60-65ams1r cloudfrontnet
DNS

180.10.229.103.in-addr.arpa

Remote address:

8.8.8.8:53

Request

180.10.229.103.in-addr.arpa

IN PTR

Response
DNS

rules.quantcount.com

chrome.exe

Remote address:

8.8.8.8:53

Request

rules.quantcount.com

IN A

Response

rules.quantcount.com

IN CNAME

d2fashanjl7d9f.cloudfront.net

d2fashanjl7d9f.cloudfront.net

IN A

18.65.39.30

d2fashanjl7d9f.cloudfront.net

IN A

18.65.39.9

d2fashanjl7d9f.cloudfront.net

IN A

18.65.39.81

d2fashanjl7d9f.cloudfront.net

IN A

18.65.39.99
GET

https://rules.quantcount.com/rules-p-He6NsVBfMn23v.js

chrome.exe

Remote address:

18.65.39.30:443

Request

GET /rules-p-He6NsVBfMn23v.js HTTP/2.0
host: rules.quantcount.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/javascript
content-length: 160
last-modified: Thu, 13 Oct 2022 22:43:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Fri, 02 Jun 2023 10:03:28 GMT
cache-control: max-age=3600
etag: "201719180f231f6ab8d95e87fc7bbed1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4ab1227a56c7dfaf7a8f7750683df1be.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P1
x-amz-cf-id: 3fNtiKjMHusti-IPlruZVHfkrK_UkbpYWFX4XBXR7xefMbHek0ZwBA==
age: 1867
GET

https://rules.quantcount.com/rules-p-PFW5FesqXn206.js

chrome.exe

Remote address:

18.65.39.30:443

Request

GET /rules-p-PFW5FesqXn206.js HTTP/2.0
host: rules.quantcount.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/javascript
last-modified: Thu, 13 Oct 2022 15:36:52 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Fri, 02 Jun 2023 10:15:19 GMT
cache-control: max-age=3600
etag: W/"a521a7bf6d17b50bc9827eaad4be8ecc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4ab1227a56c7dfaf7a8f7750683df1be.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P1
x-amz-cf-id: eOqbVe86nlal0_vmx-1v5Hl1sPyf1n-inw2NhgQ6R0Cy--FHmWH-9A==
age: 1158
GET

https://rules.quantcount.com/rules-p-He6NsVBfMn23v.js

chrome.exe

Remote address:

18.65.39.30:443

Request

GET /rules-p-He6NsVBfMn23v.js HTTP/2.0
host: rules.quantcount.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
if-none-match: "201719180f231f6ab8d95e87fc7bbed1"
if-modified-since: Thu, 13 Oct 2022 22:43:12 GMT

Response

HTTP/2.0 304

last-modified: Thu, 13 Oct 2022 22:43:12 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Fri, 02 Jun 2023 10:03:28 GMT
cache-control: max-age=3600
etag: "201719180f231f6ab8d95e87fc7bbed1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4ab1227a56c7dfaf7a8f7750683df1be.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P1
x-amz-cf-id: 2nNE_lmjWt6xcU5vXqyO6zFhkB-Nt06zohytpOURJwtnE-yLHIFU6g==
age: 1902
GET

https://rules.quantcount.com/rules-p-PFW5FesqXn206.js

chrome.exe

Remote address:

18.65.39.30:443

Request

GET /rules-p-PFW5FesqXn206.js HTTP/2.0
host: rules.quantcount.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
if-none-match: W/"a521a7bf6d17b50bc9827eaad4be8ecc"
if-modified-since: Thu, 13 Oct 2022 15:36:52 GMT

Response

HTTP/2.0 304

last-modified: Thu, 13 Oct 2022 15:36:52 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
date: Fri, 02 Jun 2023 10:15:19 GMT
cache-control: max-age=3600
etag: W/"a521a7bf6d17b50bc9827eaad4be8ecc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4ab1227a56c7dfaf7a8f7750683df1be.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P1
x-amz-cf-id: zyuIcPJ9OBYdLqkFnZQsLk6GVMeGSbE8aPCDGZaeOzNgpyogMbbjyA==
age: 1192
DNS

172.188.138.18.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.188.138.18.in-addr.arpa

IN PTR

Response

172.188.138.18.in-addr.arpa

IN PTR

ec2-18-138-188-172ap-southeast-1compute amazonawscom
DNS

s.seedtag.com

chrome.exe

Remote address:

8.8.8.8:53

Request

s.seedtag.com

IN A

Response

s.seedtag.com

IN A

34.149.50.64
POST

https://s.seedtag.com/e/e

chrome.exe

Remote address:

34.149.50.64:443

Request

POST /e/e HTTP/2.0
host: s.seedtag.com
content-length: 528
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
content-type: text/plain
accept: */*
origin: https://1fichier.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

30.39.65.18.in-addr.arpa

Remote address:

8.8.8.8:53

Request

30.39.65.18.in-addr.arpa

IN PTR

Response

30.39.65.18.in-addr.arpa

IN PTR

server-18-65-39-30ams1r cloudfrontnet
DNS

64.50.149.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

64.50.149.34.in-addr.arpa

IN PTR

Response

64.50.149.34.in-addr.arpa

IN PTR

645014934bcgoogleusercontentcom
DNS

97.17.167.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

97.17.167.52.in-addr.arpa

IN PTR

Response
DNS

pixel.quantserve.com

chrome.exe

Remote address:

8.8.8.8:53

Request

pixel.quantserve.com

IN A

Response

pixel.quantserve.com

IN CNAME

global.px.quantserve.com

global.px.quantserve.com

IN A

103.229.10.192

global.px.quantserve.com

IN A

103.229.10.211

global.px.quantserve.com

IN A

103.229.10.180

global.px.quantserve.com

IN A

103.229.10.171

global.px.quantserve.com

IN A

103.229.10.247
DNS

script.4dex.io

chrome.exe

Remote address:

8.8.8.8:53

Request

script.4dex.io

IN A

Response

script.4dex.io

IN A

104.26.8.169

script.4dex.io

IN A

104.26.9.169

script.4dex.io

IN A

172.67.75.241
DNS

script.4dex.io

chrome.exe

Remote address:

8.8.8.8:53

Request

script.4dex.io

IN A

Response

script.4dex.io

IN A

104.26.8.169

script.4dex.io

IN A

104.26.9.169

script.4dex.io

IN A

172.67.75.241
GET

https://script.4dex.io/localstore.js

chrome.exe

Remote address:

104.26.8.169:443

Request

GET /localstore.js HTTP/1.1
Host: script.4dex.io
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://1fichier.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:34:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=1800
ETag: W/"922cffdd75f7192f75231d92684885aa"
Last-Modified: Wed, 23 Nov 2022 15:43:18 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 1186087
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9qQ3nG%2F0IkQBW%2BXBVo7t6c4xEjEffbYKqA8LdB99c1ASh6jxlSoKSX3e4hLWpsznxbJsazSfmDWmdrwkDwsc90MZhO8%2FCPBU1z3Of0r8zw4%2BIm55%2FFHPIU%2BDGPgeL3RV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7d0f0b796df60e94-AMS
Content-Encoding: br
GET

https://script.4dex.io/localstore.js

chrome.exe

Remote address:

104.26.8.169:443

Request

GET /localstore.js HTTP/1.1
Host: script.4dex.io
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://1fichier.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: uids=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
If-None-Match: W/"922cffdd75f7192f75231d92684885aa"
If-Modified-Since: Wed, 23 Nov 2022 15:43:18 GMT

Response

HTTP/1.1 304 Not Modified

Date: Fri, 02 Jun 2023 10:35:09 GMT
Connection: keep-alive
Cache-Control: public, max-age=1800
ETag: W/"922cffdd75f7192f75231d92684885aa"
Last-Modified: Wed, 23 Nov 2022 15:43:18 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 1186120
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hi6stX5O3kyBJKcJL6g2GfGQQ%2BWagBdvtap%2F8%2BqTmtn4HMMizHgvXAfEDGj%2FOZg9bYUGI7spKOAlrS8f6uUkYs9U39PYVBNHlL4X2IIzEWt6x29jaqSudDVy%2B%2F%2BCFDcC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7d0f0c4a9e8e0e94-AMS
DNS

clients2.google.com

chrome.exe

Remote address:

8.8.8.8:53

Request

clients2.google.com

IN A

Response

clients2.google.com

IN CNAME

clients.l.google.com

clients.l.google.com

IN A

142.251.36.46
DNS

ad.360yield.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ad.360yield.com

IN A

Response

ad.360yield.com

IN CNAME

ice.360yield.com

ice.360yield.com

IN CNAME

in-ice.360yield.com

in-ice.360yield.com

IN CNAME

ap-ice.360yield.com

ap-ice.360yield.com

IN A

3.0.22.190

ap-ice.360yield.com

IN A

54.169.202.70

ap-ice.360yield.com

IN A

18.138.82.20

ap-ice.360yield.com

IN A

18.139.81.52

ap-ice.360yield.com

IN A

18.138.198.66

ap-ice.360yield.com

IN A

13.228.204.187

ap-ice.360yield.com

IN A

13.215.109.61

ap-ice.360yield.com

IN A

52.220.81.229
DNS

ap.lijit.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ap.lijit.com

IN A

Response

ap.lijit.com

IN CNAME

vap.lijit.com

vap.lijit.com

IN CNAME

emeas.vap.lijit.com

emeas.vap.lijit.com

IN CNAME

oeu.vap.lijit.com

oeu.vap.lijit.com

IN A

216.52.2.30

oeu.vap.lijit.com

IN A

216.52.2.86

oeu.vap.lijit.com

IN A

216.52.2.48

oeu.vap.lijit.com

IN A

216.52.2.39

oeu.vap.lijit.com

IN A

216.52.2.91

oeu.vap.lijit.com

IN A

216.52.2.6

oeu.vap.lijit.com

IN A

216.52.2.16
DNS

mp.4dex.io

chrome.exe

Remote address:

8.8.8.8:53

Request

mp.4dex.io

IN A

Response

mp.4dex.io

IN A

104.18.2.114

mp.4dex.io

IN A

104.18.3.114
GET

https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=106.0.5249.119&lang=en-US&acceptformat=crx3&x=id%3Dghbmnnjooekpmoecnnnilnnbdlolhkhi%26v%3D1.58.4%26installsource%3Dnotfromwebstore%26installedby%3Dexternal%26uc%26ping%3Dr%253D102%2526e%253D1&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D1.0.0.6%26installsource%3Dnotfromwebstore%26installedby%3Dother%26uc%26ping%3Dr%253D102%2526e%253D1

chrome.exe

Remote address:

142.251.36.46:443

Request

GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=106.0.5249.119&lang=en-US&acceptformat=crx3&x=id%3Dghbmnnjooekpmoecnnnilnnbdlolhkhi%26v%3D1.58.4%26installsource%3Dnotfromwebstore%26installedby%3Dexternal%26uc%26ping%3Dr%253D102%2526e%253D1&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D1.0.0.6%26installsource%3Dnotfromwebstore%26installedby%3Dother%26uc%26ping%3Dr%253D102%2526e%253D1 HTTP/2.0
host: clients2.google.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

b1h.zemanta.com

chrome.exe

Remote address:

8.8.8.8:53

Request

b1h.zemanta.com

IN A

Response

b1h.zemanta.com

IN CNAME

b1-use1.zemanta.com

b1-use1.zemanta.com

IN CNAME

zemanta-nychi2.outbrain.org

zemanta-nychi2.outbrain.org

IN CNAME

chidc2.outbrain.org

chidc2.outbrain.org

IN A

50.31.142.255
DNS

s.adx.opera.com

chrome.exe

Remote address:

8.8.8.8:53

Request

s.adx.opera.com

IN A

Response

s.adx.opera.com

IN CNAME

s-adx.geo.op-mobile.opera.com

s-adx.geo.op-mobile.opera.com

IN CNAME

outspot-sg-vip2.op-mobile.opera.com

outspot-sg-vip2.op-mobile.opera.com

IN A

103.83.123.59
DNS

prebid.media.net

chrome.exe

Remote address:

8.8.8.8:53

Request

prebid.media.net

IN A

Response

prebid.media.net

IN A

34.120.63.153
DNS

btlr.sharethrough.com

chrome.exe

Remote address:

8.8.8.8:53

Request

btlr.sharethrough.com

IN A

Response

btlr.sharethrough.com

IN CNAME

btlr-ap-southeast-1.sharethrough.com

btlr-ap-southeast-1.sharethrough.com

IN A

18.140.202.208

btlr-ap-southeast-1.sharethrough.com

IN A

54.169.41.224

btlr-ap-southeast-1.sharethrough.com

IN A

52.77.11.166

btlr-ap-southeast-1.sharethrough.com

IN A

18.139.178.1

btlr-ap-southeast-1.sharethrough.com

IN A

54.255.138.213

btlr-ap-southeast-1.sharethrough.com

IN A

52.221.0.158

btlr-ap-southeast-1.sharethrough.com

IN A

54.169.2.48

btlr-ap-southeast-1.sharethrough.com

IN A

52.77.153.240
DNS

rtb.adpone.com

chrome.exe

Remote address:

8.8.8.8:53

Request

rtb.adpone.com

IN A

Response

rtb.adpone.com

IN A

172.67.73.228

rtb.adpone.com

IN A

104.26.11.25

rtb.adpone.com

IN A

104.26.10.25
DNS

onetag-sys.com

chrome.exe

Remote address:

8.8.8.8:53

Request

onetag-sys.com

IN A

Response

onetag-sys.com

IN A

51.89.9.254

onetag-sys.com

IN A

51.89.9.251

onetag-sys.com

IN A

51.38.120.206

onetag-sys.com

IN A

51.89.9.253

onetag-sys.com

IN A

51.89.9.252

onetag-sys.com

IN A

51.75.86.98
POST

https://ap.lijit.com/rtb/bid?src=prebid_prebid_6.29.3

chrome.exe

Remote address:

216.52.2.30:443

Request

POST /rtb/bid?src=prebid_prebid_6.29.3 HTTP/1.1
Host: ap.lijit.com
Connection: keep-alive
Content-Length: 1107
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Content-Type: text/plain
Accept: */*
Origin: https://1fichier.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://1fichier.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:34:36 GMT
Set-Cookie: ljt_reader=Gv36uBZHZqrz3My2QlqenXmM;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://1fichier.com
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Length: 24
X-Sovrn-Pod: ad_ap6ams1
GET

https://ap.lijit.com/pixel?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redir=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fsovrn%3Fchanneluid%3D%24UID

chrome.exe

Remote address:

216.52.2.30:443

Request

GET /pixel?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redir=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fsovrn%3Fchanneluid%3D%24UID HTTP/1.1
Host: ap.lijit.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://cs.seedtag.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: ljt_reader=Gv36uBZHZqrz3My2QlqenXmM

Response

HTTP/1.1 307 Temporary Redirect

Date: Fri, 02 Jun 2023 10:34:37 GMT
Location: https://s.seedtag.com/cs/cookiesync/sovrn?channeluid=Gv36uBZHZqrz3My2QlqenXmM
Set-Cookie: ljt_reader=Gv36uBZHZqrz3My2QlqenXmM;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Content-Length: 0
X-Sovrn-Pod: ad_ap6ams1
GET

https://ap.lijit.com/pixel?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D4b30a0b1f289a261ab592e1e53c126eb%26name%3DSOVRN%26visitor%3D%24UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

216.52.2.30:443

Request

GET /pixel?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D4b30a0b1f289a261ab592e1e53c126eb%26name%3DSOVRN%26visitor%3D%24UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: ap.lijit.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://visitor.omnitagjs.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: ljt_reader=Gv36uBZHZqrz3My2QlqenXmM

Response

HTTP/1.1 307 Temporary Redirect

Date: Fri, 02 Jun 2023 10:34:38 GMT
Location: https://visitor.omnitagjs.com/visitor/sync?uid=4b30a0b1f289a261ab592e1e53c126eb&name=SOVRN&visitor=Gv36uBZHZqrz3My2QlqenXmM
Set-Cookie: ljt_reader=Gv36uBZHZqrz3My2QlqenXmM;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Content-Length: 0
X-Sovrn-Pod: ad_ap6ams1
POST

https://prebid.media.net/rtb/prebid?cid=8CU3GWXE7

chrome.exe

Remote address:

34.120.63.153:443

Request

POST /rtb/prebid?cid=8CU3GWXE7 HTTP/2.0
host: prebid.media.net
content-length: 1286
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
content-type: text/plain
accept: */*
origin: https://1fichier.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
POST

https://onetag-sys.com/prebid-request

chrome.exe

Remote address:

51.89.9.254:443

Request

POST /prebid-request HTTP/2.0
host: onetag-sys.com
content-length: 1521
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
content-type: text/plain
accept: */*
origin: https://1fichier.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

access-control-allow-origin: https://1fichier.com
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
cache-control: no-transform, no-cache
content-type: application/json
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=xe6TTGffR2cZx7RJx11YtYCTccyipIXzPoi1Z46GGQY; path=/; expires=Sun, 01 Jun 2025 10:34:36; domain=onetag-sys.com; SameSite=None; Secure;
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/usync/?pubId=75601b04186d260

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /usync/?pubId=75601b04186d260 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=xe6TTGffR2cZx7RJx11YtYCTccyipIXzPoi1Z46GGQY

Response

HTTP/2.0 200

p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=NRcuuzeex8iE7Fe8praBHRXoHfOqNG4WUt0wi5XOePo; path=/; expires=Sun, 01 Jun 2025 10:34:37; domain=onetag-sys.com; SameSite=None; Secure
content-type: text/html
cache-control: no-transform, no-cache
content-encoding: gzip
content-length: 1404
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/usync/?pubId=75a1922f904cc20&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /usync/?pubId=75a1922f904cc20&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://s.spotim.market/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=NRcuuzeex8iE7Fe8praBHRXoHfOqNG4WUt0wi5XOePo

Response

HTTP/2.0 200

p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:39; domain=onetag-sys.com; SameSite=None; Secure
content-type: text/html
cache-control: no-transform, no-cache
content-encoding: gzip
content-length: 1439
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=98&gdpr=1&gdpr_consent=&uid=4894631733703052721

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=98&gdpr=1&gdpr_consent=&uid=4894631733703052721 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:39; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=1&uid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=1&uid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent= HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:39; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=2&uid=LIEFHRWR-1M-G2O5&gdpr=1

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=2&uid=LIEFHRWR-1M-G2O5&gdpr=1 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:39; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=106&redir=1&ot_initiated=1

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=106&redir=1&ot_initiated=1 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/usync/?pubId=75601b04186d260
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 302

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:39; domain=onetag-sys.com; SameSite=None; Secure;
location: https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=AAABiHusdXqF6GhhKh78JusgjT-VWTYltiRwqg
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=113&gdpr=1&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=113&gdpr=1&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/usync/?pubId=75601b04186d260
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 302

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:39; domain=onetag-sys.com; SameSite=None; Secure;
location: https://s.amazon-adsystem.com/ecm3?ex=onetag.com&id=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=106&google_error=15

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=106&google_error=15 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=29&uid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=0&gdpr_consent=

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=29&uid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=0&gdpr_consent= HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=106&redir=1&ot_initiated=1

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=106&redir=1&ot_initiated=1 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/usync/?pubId=75a1922f904cc20&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 302

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
location: https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=AAABiHusdnBuRrxeNFxLBI1-0f9iR0tzf4FyOA
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=113&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=113&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/usync/?pubId=75a1922f904cc20&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 302

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:37; domain=onetag-sys.com; SameSite=None; Secure;
location: https://s.amazon-adsystem.com/ecm3?ex=onetag.com&id=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5 HTTP/2.0
host: onetag-sys.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/usync/?pubId=7a07370227fc000&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /usync/?pubId=7a07370227fc000&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=ROXYNkVA6RuOh14zqBhQOH1ilQq2ADVghKJBuSJRnw8; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure
content-type: text/html
cache-control: no-transform, no-cache
content-encoding: gzip
content-length: 1425
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=2&uid=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=2&uid=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=98&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&uid=4894631733703052721

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=98&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&uid=4894631733703052721 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=1&uid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=1&uid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=107&uid=6880727987372587628

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=107&uid=6880727987372587628 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=92&uid=y-3kJ5ao5E2uHyd.0tFQa2bjwpb3iJnsi1IM.VnDw-~A

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=92&uid=y-3kJ5ao5E2uHyd.0tFQa2bjwpb3iJnsi1IM.VnDw-~A HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:21; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=110&uid=

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=110&uid= HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=106&google_error=15

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=106&google_error=15 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=29&uid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=0&gdpr_consent=

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=29&uid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=0&gdpr_consent= HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=106&redir=1&ot_initiated=1

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=106&redir=1&ot_initiated=1 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/usync/?pubId=7a07370227fc000&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 302

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
location: https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=AAABiHusePxeJtBDLMPWEVQ97IA4g6-ccVzLpw
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=113&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=113&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/usync/?pubId=7a07370227fc000&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 302

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:40; domain=onetag-sys.com; SameSite=None; Secure;
location: https://s.amazon-adsystem.com/ecm3?ex=onetag.com&id=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5 HTTP/2.0
host: onetag-sys.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:41; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=2&uid=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=2&uid=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:41; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=98&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&uid=4894631733703052721

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=98&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&uid=4894631733703052721 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:41; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=1&uid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=1&uid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:41; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:41; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=106&google_error=15

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=106&google_error=15 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:41; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=92&uid=y-3kJ5ao5E2uHyd.0tFQa2bjwpb3iJnsi1IM.VnDw-~A

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=92&uid=y-3kJ5ao5E2uHyd.0tFQa2bjwpb3iJnsi1IM.VnDw-~A HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:41; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=107&uid=6880727987372587628

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=107&uid=6880727987372587628 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:41; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=29&uid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=0&gdpr_consent=

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=29&uid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=0&gdpr_consent= HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:41; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/usync/?cb=1685709275468&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /usync/?cb=1685709275468&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=dEXemWibzErna4OpVCMOxay1Zyhix4ybTl0EknJEML0; path=/; expires=Sun, 01 Jun 2025 10:34:42; domain=onetag-sys.com; SameSite=None; Secure
content-type: text/html
cache-control: no-transform, no-cache
content-encoding: gzip
content-length: 1004
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=30&uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=&gdpr_consent=&us_privacy=

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=30&uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=&gdpr_consent=&us_privacy= HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:42; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=30&uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=&gdpr_consent=&us_privacy=

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=30&uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=&gdpr_consent=&us_privacy= HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:23; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5 HTTP/2.0
host: onetag-sys.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:42; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=113&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=113&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/usync/?cb=1685709275468&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 302

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:44; domain=onetag-sys.com; SameSite=None; Secure;
location: https://s.amazon-adsystem.com/ecm3?ex=onetag.com&id=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=106&google_error=15

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=106&google_error=15 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:44; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=30&uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=30&uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy= HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:34:44; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
POST

https://onetag-sys.com/prebid-request

chrome.exe

Remote address:

51.89.9.254:443

Request

POST /prebid-request HTTP/2.0
host: onetag-sys.com
content-length: 1659
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
content-type: text/plain
accept: */*
origin: https://1fichier.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

access-control-allow-origin: https://1fichier.com
access-control-allow-headers: content-type, origin, referer, user-agent
access-control-allow-credentials: true
cache-control: no-transform, no-cache
content-type: application/json
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0; path=/; expires=Sun, 01 Jun 2025 10:35:09; domain=onetag-sys.com; SameSite=None; Secure;
content-encoding: gzip
content-length: 41
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/usync/?cb=1685709308775&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /usync/?cb=1685709308775&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

Response

HTTP/2.0 200

p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=ynLHKG_BGuesE-NKhzxmGhM-o_umLy9tHmLunAaF7UY; path=/; expires=Sun, 01 Jun 2025 10:34:56; domain=onetag-sys.com; SameSite=None; Secure
content-type: text/html
cache-control: no-transform, no-cache
content-encoding: gzip
content-length: 865
strict-transport-security: max-age=15552000
GET

https://onetag-sys.com/match/?int_id=106&google_error=15

chrome.exe

Remote address:

51.89.9.254:443

Request

GET /match/?int_id=106&google_error=15 HTTP/2.0
host: onetag-sys.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: OTP=ynLHKG_BGuesE-NKhzxmGhM-o_umLy9tHmLunAaF7UY

Response

HTTP/2.0 200

cache-control: no-transform, no-cache
p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR'
set-cookie: OTP=ynLHKG_BGuesE-NKhzxmGhM-o_umLy9tHmLunAaF7UY; path=/; expires=Sun, 01 Jun 2025 10:35:15; domain=onetag-sys.com; SameSite=None; Secure;
content-length: 0
strict-transport-security: max-age=15552000
DNS

cs.seedtag.com

chrome.exe

Remote address:

8.8.8.8:53

Request

cs.seedtag.com

IN A

Response

cs.seedtag.com

IN A

104.18.131.145

cs.seedtag.com

IN A

104.18.133.145

cs.seedtag.com

IN A

104.18.132.145

cs.seedtag.com

IN A

104.18.135.145

cs.seedtag.com

IN A

104.18.134.145
POST

https://mp.4dex.io/prebid

chrome.exe

Remote address:

104.18.2.114:443

Request

POST /prebid HTTP/2.0
host: mp.4dex.io
content-length: 2228
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
content-type: text/plain
accept: */*
origin: https://1fichier.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:34:36 GMT
content-type: application/json; charset=utf-8
content-length: 987
access-control-allow-credentials: true
access-control-allow-origin: https://1fichier.com
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: 0
pragma: no-cache
set-cookie: uids=eyJzeW5jcyI6eyJpbmRleGV4Y2hhbmdlIjoiMjAyMy0wNi0wMlQxMDozNDozNi41MzI4Mjc2NjVaIiwicHVibWF0aWMiOiIyMDIzLTA2LTAyVDEwOjM0OjM2LjUzMjgwNjcyOFoiLCJydWJpY29uIjoiMjAyMy0wNi0wMlQxMDozNDozNi41MzI4MjIwMDZaIiwieWFob28iOiIyMDIzLTA2LTAyVDEwOjM0OjM2LjUzMjgyNTM2MloifSwidWlkcyI6eyJhZGFnaW8iOnsidWlkIjoiZTBhN2IzZDctYWQ0Yy00OWFiLThmMzEtYmM2YjBiMzExYWQ0IiwiZXhwaXJlcyI6IjIwMjMtMDgtMDFUMTA6MzQ6MzYuNTMyNjY1MDIyWiJ9fSwiYmRheSI6IjIwMjMtMDYtMDJUMTA6MzQ6MzYuNTMyNTA3ODE4WiJ9; Path=/; Domain=4dex.io; Expires=Tue, 01 Aug 2023 10:34:36 GMT; Secure; SameSite=None
vary: Origin
vary: Accept-Encoding
x-err: Shapings: no adunits with size and seat and mapping
x-version: 3.0.0-gcp-ams
x-warn: Process Floors. 1 inventory rules not found for mediatype: banner and adUnitCode: r89-desktop-billboard-low-1-0
x-warn: Process Seats Booster. unable to get the seat booster engine for organization: 1117
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0f0b7a0c750e74-AMS
POST

https://mp.4dex.io/prebid

chrome.exe

Remote address:

104.18.2.114:443

Request

POST /prebid HTTP/2.0
host: mp.4dex.io
content-length: 2407
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
content-type: text/plain
accept: */*
origin: https://1fichier.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: uids=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

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:35:09 GMT
content-type: application/json; charset=utf-8
content-length: 978
access-control-allow-credentials: true
access-control-allow-origin: https://1fichier.com
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: 0
pragma: no-cache
set-cookie: uids=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-QSIsImV4cGlyZXMiOiIyMDIzLTA4LTAxVDEwOjM0OjM5LjgxODM1Mjg4M1oifX0sImJkYXkiOiIyMDIzLTA2LTAyVDEwOjM0OjM2LjUzMjUwNzgxOFoifQ==; Path=/; Domain=4dex.io; Expires=Tue, 01 Aug 2023 10:35:09 GMT; Secure; SameSite=None
vary: Origin
vary: Accept-Encoding
x-err: Shapings: no adunits with size and seat and mapping
x-version: 3.0.0-gcp-ams
x-warn: Process Floors. 1 inventory rules not found for mediatype: banner and adUnitCode: r89-desktop-billboard-low-1-0
x-warn: Process Seats Booster. unable to get the seat booster engine for organization: 1117
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0f0c4a9f570e74-AMS
POST

https://rtb.adpone.com/bid-request?pid=12281911378819&gdpr_applies=true&consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

172.67.73.228:443

Request

POST /bid-request?pid=12281911378819&gdpr_applies=true&consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb.adpone.com
content-length: 190
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
content-type: text/plain
accept: */*
origin: https://1fichier.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:34:36 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://1fichier.com
vary: Origin
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rNCMJ%2BHMkS5yMMHv8tn2yuMI1WBeEtg2VeZgSOVeuLUeuVsB1W8A9OoBkGGOi8xGtrdHP6aVBzeHWozgtjLmYHUmzyQucEkNRsmUfQOJQLu3ABB229V9nvzGqRWq43kb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0f0b7a1f4b0bf5-AMS
content-encoding: br
POST

https://rtb.adpone.com/bid-request?pid=12281911378819&gdpr_applies=true&consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

172.67.73.228:443

Request

POST /bid-request?pid=12281911378819&gdpr_applies=true&consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb.adpone.com
content-length: 198
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
content-type: text/plain
accept: */*
origin: https://1fichier.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:35:09 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://1fichier.com
vary: Origin
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ei3UjW80cxlFQm%2FIlA57LYTvmfkTvaih8lLPAab%2BfJkKeYKl8CgDWuglxC0Q62HVbDB8ph0vDGtkgkS9FJ6EATm2%2B1bB1rKwM%2BHurp0GWt%2FdxUrNDHl11eqVVvEEFNuO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0f0c4aac840bf5-AMS
content-encoding: br
DNS

clients2.googleusercontent.com

chrome.exe

Remote address:

8.8.8.8:53

Request

clients2.googleusercontent.com

IN A

Response

clients2.googleusercontent.com

IN CNAME

googlehosted.l.googleusercontent.com

googlehosted.l.googleusercontent.com

IN A

142.251.36.1
GET

https://script.4dex.io/adagio.js

chrome.exe

Remote address:

104.26.8.169:443

Request

GET /adagio.js HTTP/1.1
Host: script.4dex.io
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: */*
Origin: https://1fichier.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://1fichier.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:34:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: MGMV5G/tcTtmD6xLU4vgzAjzivz8nmBocEKCe6rfM6/FioAwj0OwU9mIEvpFl8SPG4fzoe99MhE=
x-amz-request-id: Z2C0VFMJ55ZBNCZ2
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3000
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Last-Modified: Tue, 22 Nov 2022 09:44:15 GMT
ETag: W/"c56b6332dacf72f135afcd153ae22448"
Cache-Control: public, max-age=1800
CF-Cache-Status: HIT
Age: 521060
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o4C84KZwBfGfc7aMJRaLHgBEL0iqrkTIpDchLS2DJCoWnw%2BKgGUvktbTnlH6Uv4eiO2NTZF%2FGV%2BQ66MMJbss0ZL7BkkK15s2J2UIT51GbJMc1UJCvtPLVuQREUqcH%2B78"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7d0f0b7cfc37b944-AMS
Content-Encoding: br
GET

https://script.4dex.io/adagio.js

chrome.exe

Remote address:

104.26.8.169:443

Request

GET /adagio.js HTTP/1.1
Host: script.4dex.io
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: */*
Origin: https://1fichier.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://1fichier.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
If-None-Match: W/"c56b6332dacf72f135afcd153ae22448"
If-Modified-Since: Tue, 22 Nov 2022 09:44:15 GMT

Response

HTTP/1.1 304 Not Modified

Date: Fri, 02 Jun 2023 10:35:09 GMT
Connection: keep-alive
x-amz-id-2: MGMV5G/tcTtmD6xLU4vgzAjzivz8nmBocEKCe6rfM6/FioAwj0OwU9mIEvpFl8SPG4fzoe99MhE=
x-amz-request-id: Z2C0VFMJ55ZBNCZ2
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3000
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
Last-Modified: Tue, 22 Nov 2022 09:44:15 GMT
ETag: "c56b6332dacf72f135afcd153ae22448"
Cache-Control: public, max-age=1800
CF-Cache-Status: HIT
Age: 521093
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JZfysZVc%2BtTtQAnFg86XDmk0v3F7HjhT8%2FS5LK3AF3BYuKBdALOaSpBwLGiTLFBuzpetfTD%2FgVcKMR7BoGtEYxRS5IaiptaVkzHW2S9V5kY39RHV1H2tbDNthlHiGM%2Fh"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7d0f0c4b2ccbb944-AMS
DNS

secure-assets.rubiconproject.com

chrome.exe

Remote address:

8.8.8.8:53

Request

secure-assets.rubiconproject.com

IN A

Response

secure-assets.rubiconproject.com

IN CNAME

digicertwc.rubiconproject.com.edgekey.net

digicertwc.rubiconproject.com.edgekey.net

IN CNAME

e8960.e2.akamaiedge.net

e8960.e2.akamaiedge.net

IN A

23.52.56.137
DNS

secure-assets.rubiconproject.com

chrome.exe

Remote address:

8.8.8.8:53

Request

secure-assets.rubiconproject.com

IN A

Response

secure-assets.rubiconproject.com

IN CNAME

digicertwc.rubiconproject.com.edgekey.net

digicertwc.rubiconproject.com.edgekey.net

IN CNAME

e8960.e2.akamaiedge.net

e8960.e2.akamaiedge.net

IN A

23.52.56.137
DNS

csync.smartadserver.com

chrome.exe

Remote address:

8.8.8.8:53

Request

csync.smartadserver.com

IN A

Response

csync.smartadserver.com

IN CNAME

csync.smartadserver.com.edgesuite.net

csync.smartadserver.com.edgesuite.net

IN CNAME

a577.dscb.akamai.net

a577.dscb.akamai.net

IN A

2.19.117.162

a577.dscb.akamai.net

IN A

2.19.117.140
GET

https://clients2.googleusercontent.com/crx/blobs/Acy1k0Y5tfy_mKGczNa0dDkmt7a12HgbdnxcjVR6-U3e_uw2BC-pfMB-Me9dp9AjdXp2VFahjiK1I-HMzzjNa-sDy4SQfBK-9e16DWH-h3_kUfWFz8wfAMZSmuXZHrapd-VhQ2wvvo4BfLx01PGKTQ/extension_1_62_0_0.crx

chrome.exe

Remote address:

142.251.36.1:443

Request

GET /crx/blobs/Acy1k0Y5tfy_mKGczNa0dDkmt7a12HgbdnxcjVR6-U3e_uw2BC-pfMB-Me9dp9AjdXp2VFahjiK1I-HMzzjNa-sDy4SQfBK-9e16DWH-h3_kUfWFz8wfAMZSmuXZHrapd-VhQ2wvvo4BfLx01PGKTQ/extension_1_62_0_0.crx HTTP/2.0
host: clients2.googleusercontent.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://csync.smartadserver.com/rtb/csync/CookieSync.html?nwid=3050&dcid=3

chrome.exe

Remote address:

2.19.117.162:443

Request

GET /rtb/csync/CookieSync.html?nwid=3050&dcid=3 HTTP/1.1
Host: csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
Referer: https://cs.seedtag.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=507391=5478394; TestIfCookie=ok; TestIfCookieP=ok; pid=6880727987372587628; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Type: text/html
ETag: "4b81e967df07d41c24270ccf669f7336:1645524912.090457"
Last-Modified: Tue, 22 Feb 2022 09:59:55 GMT
Server: AkamaiNetStorage
Content-Length: 435
Cache-Control: max-age=3600
Date: Fri, 02 Jun 2023 10:34:37 GMT
Connection: keep-alive
GET

https://csync.smartadserver.com/rtb/csync/CookieSync.min.js

chrome.exe

Remote address:

2.19.117.162:443

Request

GET /rtb/csync/CookieSync.min.js HTTP/1.1
Host: csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: */*
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://csync.smartadserver.com/rtb/csync/CookieSync.html?nwid=3050&dcid=3
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=507391=5478394; TestIfCookie=ok; TestIfCookieP=ok; pid=6880727987372587628; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "8b1cb5067890ebc3c725e1d21c5413c1:1684245102.464862"
Last-Modified: Tue, 16 May 2023 13:39:11 GMT
Server: AkamaiNetStorage
Content-Length: 16507
Cache-Control: max-age=3600
Date: Fri, 02 Jun 2023 10:34:37 GMT
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
GET

https://csync.smartadserver.com/rtb/csync/TemplatePool.min.js

chrome.exe

Remote address:

2.19.117.162:443

Request

GET /rtb/csync/TemplatePool.min.js HTTP/1.1
Host: csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: */*
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://csync.smartadserver.com/rtb/csync/CookieSync.html?nwid=3050&dcid=3
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=507391=5478394; TestIfCookie=ok; TestIfCookieP=ok; pid=6880727987372587628; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "4a853571c4d2c55de246f7f6ccd8c493:1684245102.985351"
Last-Modified: Tue, 16 May 2023 13:39:11 GMT
Server: AkamaiNetStorage
Content-Length: 4286
Cache-Control: max-age=3600
Date: Fri, 02 Jun 2023 10:34:37 GMT
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
GET

https://csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=3305&dcid=4&iscname=false&cname=&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

2.19.117.162:443

Request

GET /diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=3305&dcid=4&iscname=false&cname=&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
Referer: https://1fichier.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Type: text/html
ETag: "4b81e967df07d41c24270ccf669f7336:1645524911.683358"
Last-Modified: Tue, 22 Feb 2022 09:59:54 GMT
Server: AkamaiNetStorage
Content-Length: 435
Cache-Control: max-age=3600
Date: Fri, 02 Jun 2023 10:35:15 GMT
Connection: keep-alive
GET

https://csync.smartadserver.com/diff/rtb/csync/CookieSync.min.js

chrome.exe

Remote address:

2.19.117.162:443

Request

GET /diff/rtb/csync/CookieSync.min.js HTTP/1.1
Host: csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: */*
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=3305&dcid=4&iscname=false&cname=&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "8b1cb5067890ebc3c725e1d21c5413c1:1684245101.114224"
Last-Modified: Tue, 16 May 2023 13:39:11 GMT
Server: AkamaiNetStorage
Content-Length: 16507
Cache-Control: max-age=3600
Date: Fri, 02 Jun 2023 10:35:15 GMT
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
GET

https://csync.smartadserver.com/diff/rtb/csync/TemplatePool.min.js

chrome.exe

Remote address:

2.19.117.162:443

Request

GET /diff/rtb/csync/TemplatePool.min.js HTTP/1.1
Host: csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: */*
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=3305&dcid=4&iscname=false&cname=&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "4a853571c4d2c55de246f7f6ccd8c493:1684245102.224778"
Last-Modified: Tue, 16 May 2023 13:39:11 GMT
Server: AkamaiNetStorage
Content-Length: 4286
Cache-Control: max-age=3600
Date: Fri, 02 Jun 2023 10:35:15 GMT
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
GET

https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=seedtag&endpoint=eu

chrome.exe

Remote address:

23.52.56.137:443

Request

GET /utils/xapi/multi-sync.html?p=seedtag&endpoint=eu HTTP/2.0
host: secure-assets.rubiconproject.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 301

server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=seedtag&endpoint=eu
date: Fri, 02 Jun 2023 10:34:37 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
GET

https://eus.rubiconproject.com/usync.html?p=seedtag&endpoint=eu

chrome.exe

Remote address:

23.52.56.137:443

Request

GET /usync.html?p=seedtag&endpoint=eu HTTP/2.0
host: eus.rubiconproject.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: Apache/2.2.15 (CentOS)
last-modified: Wed, 02 Nov 2022 02:30:44 GMT
etag: "403b9-119-5ec73a0a33d00"
accept-ranges: bytes
content-encoding: gzip
content-length: 233
content-type: text/html; charset=UTF-8
date: Fri, 02 Jun 2023 10:34:37 GMT
vary: Accept-Encoding
GET

https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=publicidad

chrome.exe

Remote address:

23.52.56.137:443

Request

GET /utils/xapi/multi-sync.html?p=publicidad HTTP/2.0
host: secure-assets.rubiconproject.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://sync.richaudience.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 301

server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=publicidad
date: Fri, 02 Jun 2023 10:34:37 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
GET

https://eus.rubiconproject.com/usync.js

chrome.exe

Remote address:

23.52.56.137:443

Request

GET /usync.js HTTP/2.0
host: eus.rubiconproject.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://eus.rubiconproject.com/usync.html?p=seedtag&endpoint=eu
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: Apache/2.2.15 (CentOS)
x-powered-by: PHP/5.3.3
p3p: CP="NOI CURa ADMa DEVa TAIa OUR # BUS IND UNI COM NAV INT"
last-modified: Fri, 02 Jun 2023 04:53:36 GMT
content-encoding: gzip
content-length: 10113
content-type: text/html; charset=UTF-8
cache-control: max-age=65954
expires: Sat, 03 Jun 2023 04:53:51 GMT
date: Fri, 02 Jun 2023 10:34:37 GMT
vary: Accept-Encoding
GET

https://eus.rubiconproject.com/usync.html?p=publicidad

chrome.exe

Remote address:

23.52.56.137:443

Request

GET /usync.html?p=publicidad HTTP/2.0
host: eus.rubiconproject.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://sync.richaudience.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

server: Apache/2.2.15 (CentOS)
last-modified: Wed, 02 Nov 2022 02:30:44 GMT
etag: "403b9-119-5ec73a0a33d00"
accept-ranges: bytes
content-encoding: gzip
content-length: 233
content-type: text/html; charset=UTF-8
date: Fri, 02 Jun 2023 10:34:37 GMT
vary: Accept-Encoding
GET

https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=onfocus&endpoint=eu

chrome.exe

Remote address:

23.52.56.137:443

Request

GET /utils/xapi/multi-sync.html?p=onfocus&endpoint=eu HTTP/2.0
host: secure-assets.rubiconproject.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: khaos=LIEFHRWR-1M-G2O5
cookie: audit=1|IRtHOmj7QDif67cgHaeqk8WIdfHqTCJt/tQ1HxvFiMg0P90hfWP7NchSgRxBVQnIx6H7jmlJZg3Lv0ZnN1+t0WpeS2MlTsz5BdZGte+jwC5UZetrWZxhd41+NKdS8Gr63m//ni7J8lAyoEyesc4LgNMOs60WCbFuOaoiJsDfdkxh3o3kFHfNRHhrom+5g3ffFG1fzp472NdOCjUEZLATWAkY13b93QHE9bSf8KfIT5IaZAkNWDa7CcEPscQttmbcKGVY/wcWP3hsPDrYbIxSQzvcCxlUf29jjDoSD1qBBUG5nfWzkHRvLT/rwYkWlu8WKH505InY2vRYQl5g0BP8tNFGWRG+tDh6ia72hziV9unkNBpzn/mhQ7bJxv3NOkAqgiHm2brH4I2WWnQwt5WtudqALwsiPfpWtz5Jrnj8dKYLMUlD48wRFKanpNCCfJ5YLObeoz/fMvP0qxjcN9p7aM/cMJiNCqpZYoDj8Ou/metaz6vifaCUcSg+qpl4/M+twq57TjVmgEYe5nCJJsYjWMnQC35AmPthVLanNodANLpT58CGPQy+PewX2QUzY7aMLkr5Ef5RbiuvWcl8SyhpNWbrpki/nBsN+NkMPXVUfc4fPCNvmtv1hbgWMxzI2+CrL2JUxOqR0YGylXwvWSnZLNNlYeGNiaEym8fQpk1p1ucWk0eD4Mu1gzm7E2ctatlvt3jG2FNfhToFUU+IjrzhLgugNBo9Z5vXVGXra1mcYXeNfjSnUvBq+t5v/54uyfJQMqBMnrHOC4DTDrOtFgmxbjmqIibA33ZMYd6N5BR3zUR4a6JvuYN33xRtX86eO9jXTgo1BGSwE1gJGNd2/d0BxPW0n/CnyE+StL5nr6L7mno=

Response

HTTP/2.0 301

server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=onfocus&endpoint=eu
date: Fri, 02 Jun 2023 10:34:39 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
GET

https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=adyoulike&endpoint=eu

chrome.exe

Remote address:

23.52.56.137:443

Request

GET /utils/xapi/multi-sync.html?p=adyoulike&endpoint=eu HTTP/2.0
host: secure-assets.rubiconproject.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: khaos=LIEFHRWR-1M-G2O5
cookie: audit=1|IRtHOmj7QDif67cgHaeqk8WIdfHqTCJt/tQ1HxvFiMg0P90hfWP7NchSgRxBVQnIpWJBvw4Yu0/Lv0ZnN1+t0WpeS2MlTsz5BdZGte+jwC5UZetrWZxhd41+NKdS8Gr63m//ni7J8lAyoEyesc4LgNMOs60WCbFuOaoiJsDfdkxh3o3kFHfNRHhrom+5g3ffFG1fzp472NdOCjUEZLATWAkY13b93QHE9bSf8KfIT5IaZAkNWDa7CcEPscQttmbcKGVY/wcWP3hsPDrYbIxSQzvcCxlUf29jjDoSD1qBBUG5nfWzkHRvLT/rwYkWlu8WKH505InY2vRYQl5g0BP8tNFGWRG+tDh6ia72hziV9unkNBpzn/mhQ7bJxv3NOkAqgiHm2brH4I2WWnQwt5WtudqALwsiPfpWtz5Jrnj8dKYLMUlD48wRFKanpNCCfJ5YLObeoz/fMvP0qxjcN9p7aM/cMJiNCqpZYoDj8Ou/metaz6vifaCUcSg+qpl4/M+twq57TjVmgEYe5nCJJsYjWMnQC35AmPthVLanNodANLpT58CGPQy+PewX2QUzY7aMLkr5Ef5RbiuvWcl8SyhpNWbrpki/nBsN+NkMPXVUfc4fPCNvmtv1hbgWMxzI2+CrL2JUxOqR0YGylXwvWSnZLNNlYeGNiaEym8fQpk1p1ucWk0eD4Mu1gzm7E2ctatlvt3jG2FNfhToFUU+IjrzhLgugNBo9Z5vXVGXra1mcYXeNfjSnUvBq+t5v/54uyfJQMqBMnrHOC4DTDrOtFgmxbjmqIibA33ZMYd6N5BR3zUR4a6JvuYN33xRtX86eO9jXTgo1BGSwE1gJGNd2/d0BxPW0n/CnyE+SGmQJDVg2uwnBD7HELbZm3ChlWP8HFj94bDw62GyMUkM73AsZVH9vY4w6Eg9agQVBuZ31s5B0by0/68GJFpbvFih+dOSJ2Nr0WEJeYNAT/LTRRlkRvrQ4eomu9oc4lfbp5DQac5/5oUO2ycb9zTpAKoIh5tm6x+CNllp0MLeVrbnagC8LIj36Vrc+Sa54/HSmCzFJQ+PMERSmp6TQgnyeWCzm3qM/3zLz9KsY3Dfae2jP3DCYjQqqWWKA4/Drv5nrWs+r4n2glHEoPqqZePzPrcKue041ZoBGHuZwiSbGI1jJ0At+QJj7YVS2pzaHQDS6U+fAhj0Mvj3sF9kFM2O2jC5K+RH+UW4rr1nJfEsoaTVm66ZIv5wbDfjZDD11VH3OHzwjb5rb9YW4FjMcyNvgqy9iVMTqkdGBspV8L1kp2SzTZWHhjYmhMpvH0KZNadbnFpNHg+DLtYM5uxNnLWrZb7d4xthTX4U6IHeMiXsDmXU=

Response

HTTP/2.0 301

server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=adyoulike&endpoint=eu
date: Fri, 02 Jun 2023 10:34:39 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
GET

https://eus.rubiconproject.com/usync.html?p=onfocus&endpoint=eu

chrome.exe

Remote address:

23.52.56.137:443

Request

GET /usync.html?p=onfocus&endpoint=eu HTTP/2.0
host: eus.rubiconproject.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: khaos=LIEFHRWR-1M-G2O5
cookie: audit=1|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

Response

HTTP/2.0 200

server: Apache/2.2.15 (CentOS)
last-modified: Wed, 02 Nov 2022 02:30:44 GMT
etag: "403b9-119-5ec73a0a33d00"
accept-ranges: bytes
content-encoding: gzip
content-length: 233
content-type: text/html; charset=UTF-8
date: Fri, 02 Jun 2023 10:34:39 GMT
vary: Accept-Encoding
GET

https://eus.rubiconproject.com/usync.html?p=adyoulike&endpoint=eu

chrome.exe

Remote address:

23.52.56.137:443

Request

GET /usync.html?p=adyoulike&endpoint=eu HTTP/2.0
host: eus.rubiconproject.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: khaos=LIEFHRWR-1M-G2O5
cookie: audit=1|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

Response

HTTP/2.0 200

server: Apache/2.2.15 (CentOS)
last-modified: Wed, 02 Nov 2022 02:30:44 GMT
etag: "403b9-119-5ec73a0a33d00"
accept-ranges: bytes
content-encoding: gzip
content-length: 233
content-type: text/html; charset=UTF-8
date: Fri, 02 Jun 2023 10:34:39 GMT
vary: Accept-Encoding
GET

https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=33across&endpoint=us-east&us_privacy=

chrome.exe

Remote address:

23.52.56.137:443

Request

GET /utils/xapi/multi-sync.html?p=33across&endpoint=us-east&us_privacy= HTTP/2.0
host: secure-assets.rubiconproject.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: khaos=LIEFHRWR-1M-G2O5
cookie: audit=1|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

Response

HTTP/2.0 301

server: AkamaiGHost
content-length: 0
location: https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=
date: Fri, 02 Jun 2023 10:34:42 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
GET

https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=

chrome.exe

Remote address:

23.52.56.137:443

Request

GET /usync.html?p=33across&endpoint=us-east&us_privacy= HTTP/2.0
host: eus.rubiconproject.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: khaos=LIEFHRWR-1M-G2O5
cookie: audit=1|IRtHOmj7QDif67cgHaeqk8WIdfHqTCJt/tQ1HxvFiMg0P90hfWP7NchSgRxBVQnIGwTXWCE2VPHLv0ZnN1+t0WpeS2MlTsz5BdZGte+jwC5UZetrWZxhd41+NKdS8Gr63m//ni7J8lAyoEyesc4LgNMOs60WCbFuOaoiJsDfdkxh3o3kFHfNRHhrom+5g3ffFG1fzp472NdOCjUEZLATWAkY13b93QHE9bSf8KfIT5IaZAkNWDa7CcEPscQttmbcKGVY/wcWP3hsPDrYbIxSQzvcCxlUf29jjDoSD1qBBUG5nfWzkHRvLT/rwYkWlu8WKH505InY2vRYQl5g0BP8tNFGWRG+tDh6ia72hziV9unkNBpzn/mhQ7bJxv3NOkAqgiHm2brH4I2WWnQwt5WtudqALwsiPfpWtz5Jrnj8dKYLMUlD48wRFKanpNCCfJ5YLObeoz/fMvP0qxjcN9p7aM/cMJiNCqpZYoDj8Ou/metaz6vifaCUcSg+qpl4/M+twq57TjVmgEYe5nCJJsYjWMnQC35AmPthVLanNodANLpT58CGPQy+PewX2QUzY7aMLkr5Ef5RbiuvWcl8SyhpNWbrpki/nBsN+NkMPXVUfc4fPCNvmtv1hbgWMxzI2+CrL2JUxOqR0YGylXwvWSnZLNNlYeGNiaEym8fQpk1p1ucWk0eD4Mu1gzm7E2ctatlvt3jG2FNfhToFUU+IjrzhLgugNBo9Z5vXVGXra1mcYXeNfjSnUvBq+t5v/54uyfJQMqBMnrHOC4DTDrOtFgmxbjmqIibA33ZMYd6N5BR3zUR4a6JvuYN33xRtX86eO9jXTgo1BGSwE1gJGNd2/d0BxPW0n/CnyE+SGmQJDVg2uwnBD7HELbZm3ChlWP8HFj94bDw62GyMUkM73AsZVH9vY4w6Eg9agQVBuZ31s5B0by0/68GJFpbvFih+dOSJ2Nr0WEJeYNAT/LTRRlkRvrQ4eomu9oc4lfbp5DQac5/5oUO2ycb9zTpAKoIh5tm6x+CNllp0MLeVrbnagC8LIj36Vrc+Sa54/HSmCzFJQ+PMERSmp6TQgnyeWCzm3qM/3zLz9KsY3Dfae2jP3DCYjQqqWWKA4/Drv5nrWs+r4n2glHEoPqqZePzPrcKue041ZoBGHuZwiSbGI1jJ0At+QJj7YVS2pzaHQDS6U+fAhj0Mvj3sF9kFM2O2jC5K+RH+UW4rr1nJfEsoaTVm66ZIv5wbDfjZDD11VH3OHzwjb5rb9YW4FjMcyNvgqy9iVMTqkdGBspV8L1kp2SzTZWHhjYmhMpvH0KZNadbnFpNHg+DLtYM5uxNnLWrZb7d4xthTX4U6IHeMiXsDmXU=

Response

HTTP/2.0 200

server: Apache/2.2.15 (CentOS)
last-modified: Wed, 02 Nov 2022 02:30:44 GMT
etag: "403b9-119-5ec73a0a33d00"
accept-ranges: bytes
content-encoding: gzip
content-length: 233
content-type: text/html; charset=UTF-8
date: Fri, 02 Jun 2023 10:34:42 GMT
vary: Accept-Encoding
DNS

ads.pubmatic.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ads.pubmatic.com

IN A

Response

ads.pubmatic.com

IN CNAME

pubmatic.edgekey.net

pubmatic.edgekey.net

IN CNAME

e6603.g.akamaiedge.net

e6603.g.akamaiedge.net

IN A

96.16.109.9
DNS

ads.pubmatic.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ads.pubmatic.com

IN A

Response

ads.pubmatic.com

IN CNAME

pubmatic.edgekey.net

pubmatic.edgekey.net

IN CNAME

e6603.g.akamaiedge.net

e6603.g.akamaiedge.net

IN A

96.16.109.9
DNS

sync.richaudience.com

chrome.exe

Remote address:

8.8.8.8:53

Request

sync.richaudience.com

IN A

Response

sync.richaudience.com

IN A

168.119.72.236
DNS

ssc-cms.33across.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ssc-cms.33across.com

IN A

Response

ssc-cms.33across.com

IN CNAME

pixel.33across.com

pixel.33across.com

IN A

67.202.105.22

pixel.33across.com

IN A

67.202.105.21
DNS

visitor.omnitagjs.com

chrome.exe

Remote address:

8.8.8.8:53

Request

visitor.omnitagjs.com

IN A

Response

visitor.omnitagjs.com

IN CNAME

visitor-fra02.omnitagjs.com

visitor-fra02.omnitagjs.com

IN A

185.255.84.152

visitor-fra02.omnitagjs.com

IN A

185.255.84.153
DNS

visitor.omnitagjs.com

chrome.exe

Remote address:

8.8.8.8:53

Request

visitor.omnitagjs.com

IN A

Response

visitor.omnitagjs.com

IN CNAME

visitor-fra02.omnitagjs.com

visitor-fra02.omnitagjs.com

IN A

185.255.84.152

visitor-fra02.omnitagjs.com

IN A

185.255.84.153
GET

https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=1685709275488&pubconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&euconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&hasConsent=1

chrome.exe

Remote address:

168.119.72.236:443

Request

GET /dcf3528a0b8aa83634892d50e91c306e/?ord=1685709275488&pubconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&euconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&hasConsent=1 HTTP/2.0
host: sync.richaudience.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

server: nginx
date: Fri, 02 Jun 2023 10:34:36 GMT
content-type: text/html; charset=UTF-8
location: https://sync.richaudience.com/bf7c142f4339da0278e83698a02b0854/?consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&referrer=https%3A%2F%2Fcs.seedtag.com%2F
x-powered-by: PHP/8.2.5
GET

https://sync.richaudience.com/f7872c90c5d3791e2b51f7edce1a0a5d/?p=ns9qrKJLKD&consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&r=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Frichaudience%3Fchanneluid%3D%5BPDID%5D

chrome.exe

Remote address:

168.119.72.236:443

Request

GET /f7872c90c5d3791e2b51f7edce1a0a5d/?p=ns9qrKJLKD&consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&r=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Frichaudience%3Fchanneluid%3D%5BPDID%5D HTTP/2.0
host: sync.richaudience.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

server: nginx
date: Fri, 02 Jun 2023 10:34:36 GMT
content-type: text/html; charset=UTF-8
location: https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=1685709275488&pubconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&euconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&hasConsent=1&rd=1
x-powered-by: PHP/8.2.5
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: pdid=e185b692-b95f-4b0f-87b6-1zz1685702076; expires=Sun, 02 Jul 2023 10:34:36 GMT; Max-Age=2592000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
GET

https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=1685709275488&pubconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&euconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&hasConsent=1&rd=1

chrome.exe

Remote address:

168.119.72.236:443

Request

GET /dcf3528a0b8aa83634892d50e91c306e/?ord=1685709275488&pubconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&euconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&hasConsent=1&rd=1 HTTP/2.0
host: sync.richaudience.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pdid=e185b692-b95f-4b0f-87b6-1zz1685702076

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:36 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.2.5
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: cmpsync=1; expires=Fri, 02 Jun 2023 10:34:46 GMT; Max-Age=10; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
content-encoding: gzip
GET

https://sync.richaudience.com/bf7c142f4339da0278e83698a02b0854/?consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&referrer=https%3A%2F%2Fcs.seedtag.com%2F

chrome.exe

Remote address:

168.119.72.236:443

Request

GET /bf7c142f4339da0278e83698a02b0854/?consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&referrer=https%3A%2F%2Fcs.seedtag.com%2F HTTP/2.0
host: sync.richaudience.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pdid=e185b692-b95f-4b0f-87b6-1zz1685702076

Response

HTTP/2.0 303

server: nginx
date: Fri, 02 Jun 2023 10:34:36 GMT
content-type: text/plain;charset=UTF-8
location: https://x.bidswitch.net/sync?ssp=richaudience&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&user_id=e185b692-b95f-4b0f-87b6-1zz1685702076
x-powered-by: PHP/8.2.5
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
GET

https://sync.richaudience.com/697a8452aebbe5875da0878cfaf3d0d0/?uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_ps=

chrome.exe

Remote address:

168.119.72.236:443

Request

GET /697a8452aebbe5875da0878cfaf3d0d0/?uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_ps= HTTP/2.0
host: sync.richaudience.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pdid=e185b692-b95f-4b0f-87b6-1zz1685702076
cookie: cmpsync=1

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:36 GMT
content-type: image/png
x-powered-by: PHP/8.2.5
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: avcid-bsw-uid=c740f271-9531-49c0-be18-37c71c1598ed; expires=Thu, 31 Aug 2023 10:34:36 GMT; Max-Age=7776000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
GET

https://sync.richaudience.com/a939d25b950298d0a5d324cea4fcd3d1/?uid=4894631733703052721&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

168.119.72.236:443

Request

GET /a939d25b950298d0a5d324cea4fcd3d1/?uid=4894631733703052721&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: sync.richaudience.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sync.richaudience.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pdid=e185b692-b95f-4b0f-87b6-1zz1685702076
cookie: cmpsync=1
cookie: avcid-bsw-uid=c740f271-9531-49c0-be18-37c71c1598ed

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:36 GMT
content-type: image/png
x-powered-by: PHP/8.2.5
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: avcid-apn-uid=4894631733703052721; expires=Thu, 31 Aug 2023 10:34:36 GMT; Max-Age=7776000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
GET

https://sync.richaudience.com/1334b6ec0ff0dc970481738a2374448c/?uid=y-uDBYXH5E2uHPYRwKKyIMm0kX51cfgpej.HhPNDA-~A&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

168.119.72.236:443

Request

GET /1334b6ec0ff0dc970481738a2374448c/?uid=y-uDBYXH5E2uHPYRwKKyIMm0kX51cfgpej.HhPNDA-~A&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: sync.richaudience.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sync.richaudience.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pdid=e185b692-b95f-4b0f-87b6-1zz1685702076
cookie: cmpsync=1
cookie: avcid-bsw-uid=c740f271-9531-49c0-be18-37c71c1598ed

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:36 GMT
content-type: image/png
x-powered-by: PHP/8.2.5
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: avcid-sht-uid=bc21730f-1096-4796-bd58-da49fbcb0fc9; expires=Thu, 31 Aug 2023 10:34:36 GMT; Max-Age=7776000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
GET

https://sync.richaudience.com/6ccbc109824ae3014a36fd8993cc151d/?uid=bc21730f-1096-4796-bd58-da49fbcb0fc9&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

168.119.72.236:443

Request

GET /6ccbc109824ae3014a36fd8993cc151d/?uid=bc21730f-1096-4796-bd58-da49fbcb0fc9&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: sync.richaudience.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sync.richaudience.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pdid=e185b692-b95f-4b0f-87b6-1zz1685702076
cookie: cmpsync=1
cookie: avcid-bsw-uid=c740f271-9531-49c0-be18-37c71c1598ed

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:36 GMT
content-type: image/png
x-powered-by: PHP/8.2.5
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: avcid-yho-uid=y-uDBYXH5E2uHPYRwKKyIMm0kX51cfgpej.HhPNDA-~A; expires=Thu, 31 Aug 2023 10:34:36 GMT; Max-Age=7776000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
GET

https://sync.richaudience.com/e231bbbe91d9e7e900144b910bfcc7d7/?uid=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

168.119.72.236:443

Request

GET /e231bbbe91d9e7e900144b910bfcc7d7/?uid=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: sync.richaudience.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://eus.rubiconproject.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pdid=e185b692-b95f-4b0f-87b6-1zz1685702076
cookie: cmpsync=1
cookie: avcid-bsw-uid=c740f271-9531-49c0-be18-37c71c1598ed
cookie: avcid-apn-uid=4894631733703052721
cookie: avcid-sht-uid=bc21730f-1096-4796-bd58-da49fbcb0fc9
cookie: avcid-yho-uid=y-uDBYXH5E2uHPYRwKKyIMm0kX51cfgpej.HhPNDA-~A

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:38 GMT
content-type: image/png
x-powered-by: PHP/8.2.5
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: avcid-rub-uid=LIEFHRWR-1M-G2O5; expires=Thu, 31 Aug 2023 10:34:38 GMT; Max-Age=7776000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
GET

https://sync.richaudience.com/1575707c462b6525f008e40ae9438a8b/?uid=96e9246feac3709f625d06c16ac55a9e

chrome.exe

Remote address:

168.119.72.236:443

Request

GET /1575707c462b6525f008e40ae9438a8b/?uid=96e9246feac3709f625d06c16ac55a9e HTTP/2.0
host: sync.richaudience.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sync.richaudience.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pdid=e185b692-b95f-4b0f-87b6-1zz1685702076
cookie: cmpsync=1
cookie: avcid-bsw-uid=c740f271-9531-49c0-be18-37c71c1598ed
cookie: avcid-apn-uid=4894631733703052721
cookie: avcid-sht-uid=bc21730f-1096-4796-bd58-da49fbcb0fc9
cookie: avcid-yho-uid=y-uDBYXH5E2uHPYRwKKyIMm0kX51cfgpej.HhPNDA-~A
cookie: avcid-rub-uid=LIEFHRWR-1M-G2O5

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:40 GMT
content-type: image/png
x-powered-by: PHP/8.2.5
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: avcid-smw-uid=96e9246feac3709f625d06c16ac55a9e; expires=Thu, 31 Aug 2023 10:34:40 GMT; Max-Age=7776000; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
GET

https://sync.richaudience.com/502e2341fac2c140295d7b3b0c915c8c/?uid=

chrome.exe

Remote address:

168.119.72.236:443

Request

GET /502e2341fac2c140295d7b3b0c915c8c/?uid= HTTP/2.0
host: sync.richaudience.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=1685709275488&pubconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&euconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&hasConsent=1&rd=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pdid=e185b692-b95f-4b0f-87b6-1zz1685702076
cookie: cmpsync=1
cookie: avcid-bsw-uid=c740f271-9531-49c0-be18-37c71c1598ed
cookie: avcid-apn-uid=4894631733703052721
cookie: avcid-sht-uid=bc21730f-1096-4796-bd58-da49fbcb0fc9
cookie: avcid-yho-uid=y-uDBYXH5E2uHPYRwKKyIMm0kX51cfgpej.HhPNDA-~A
cookie: avcid-rub-uid=LIEFHRWR-1M-G2O5

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:34:40 GMT
content-type: image/png
x-powered-by: PHP/8.2.5
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: avcid-adf-uid=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=.richaudience.com; secure; HttpOnly; SameSite=None
GET

https://ssc-cms.33across.com/ps/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X

chrome.exe

Remote address:

67.202.105.22:443

Request

GET /ps/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X HTTP/2.0
host: ssc-cms.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
set-cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278; Domain=.33across.com; Expires=Sat, 01-Jun-2024 10:34:37 GMT; Path=/; Secure; SameSite=None
referrer-policy: unsafe-url
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01-Jan-70 00:00:01 GMT
x-33x-status: 8340000C
server: 33XP014
location: https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X
content-length: 0
date: Fri, 02 Jun 2023 10:34:37 GMT
GET

https://ssc-cms.33across.com/ps/?_=1685702077797.&ri=0010b00002MptHCAAZ&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X

chrome.exe

Remote address:

67.202.105.22:443

Request

GET /ps/?_=1685702077797.&ri=0010b00002MptHCAAZ&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X HTTP/2.0
host: ssc-cms.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278

Response

HTTP/2.0 302

p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
set-cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278; Domain=.33across.com; Expires=Sat, 01-Jun-2024 10:34:42 GMT; Path=/; Secure; SameSite=None
referrer-policy: unsafe-url
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01-Jan-70 00:00:01 GMT
x-33x-status: 100000000008200000A
server: 33XP008
location: https://s.seedtag.com/cs/cookiesync/33across?channeluid=212175644499687
content-length: 0
date: Fri, 02 Jun 2023 10:34:41 GMT
GET

https://ssc-cms.33across.com/ps/?us_privacy=&ts=1685702077797.4&ri=1&ru=https%3A%2F%2Fsync.mathtag.com%2Fsync%2Fimg%3Fus_privacy%3D%24%7BUS_PRIVACY%7D%26mt_exid%3D73%26redir%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D1%2526external_user_id%253D%255BMM_UUID%255D

chrome.exe

Remote address:

67.202.105.22:443

Request

GET /ps/?us_privacy=&ts=1685702077797.4&ri=1&ru=https%3A%2F%2Fsync.mathtag.com%2Fsync%2Fimg%3Fus_privacy%3D%24%7BUS_PRIVACY%7D%26mt_exid%3D73%26redir%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D1%2526external_user_id%253D%255BMM_UUID%255D HTTP/2.0
host: ssc-cms.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278

Response

HTTP/2.0 302

p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
set-cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278; Domain=.33across.com; Expires=Sat, 01-Jun-2024 10:34:42 GMT; Path=/; Secure; SameSite=None
referrer-policy: unsafe-url
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01-Jan-70 00:00:01 GMT
x-33x-status: 40000000008200000A
server: 33XP006
location: https://sync.mathtag.com/sync/img?us_privacy=&mt_exid=73&redir=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D%26bidder_id%3D1%26external_user_id%3D%5BMM_UUID%5D
content-length: 0
date: Fri, 02 Jun 2023 10:34:41 GMT
GET

https://ssc-cms.33across.com/ps/?us_privacy=&xi=33&xu=2963187305596611584206

chrome.exe

Remote address:

67.202.105.22:443

Request

GET /ps/?us_privacy=&xi=33&xu=2963187305596611584206 HTTP/2.0
host: ssc-cms.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278

Response

HTTP/2.0 302

p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
set-cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278; Domain=.33across.com; Expires=Sat, 01-Jun-2024 10:34:43 GMT; Path=/; Secure; SameSite=None
referrer-policy: unsafe-url
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01-Jan-70 00:00:01 GMT
x-33x-status: 8000000008200000A
server: 33XP020
location: https://events-ssc.33across.com/match?bidder_id=33&external_user_id=2963187305596611584206&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=
content-length: 0
date: Fri, 02 Jun 2023 10:34:42 GMT
GET

https://ssc-cms.33across.com/ps/?xi=99&us_privacy=&xu=y-d.nDxLBE2uF4LVpzqoLZLN.k0gvZcraW~A

chrome.exe

Remote address:

67.202.105.22:443

Request

GET /ps/?xi=99&us_privacy=&xu=y-d.nDxLBE2uF4LVpzqoLZLN.k0gvZcraW~A HTTP/2.0
host: ssc-cms.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278

Response

HTTP/2.0 302

p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
set-cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278; Domain=.33across.com; Expires=Sat, 01-Jun-2024 10:34:43 GMT; Path=/; Secure; SameSite=None
referrer-policy: unsafe-url
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01-Jan-70 00:00:01 GMT
x-33x-status: 8000000008200000A
server: 33XP003
location: https://events-ssc.33across.com/match?bidder_id=99&external_user_id=y-d.nDxLBE2uF4LVpzqoLZLN.k0gvZcraW%7EA&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=
content-length: 0
date: Fri, 02 Jun 2023 10:34:42 GMT
GET

https://ssc-cms.33across.com/ps?xi=64&xu=AAAM5TTobO5AOANRbh-TAAAAAAA&expiration=1685788483&is_secure=true&us_privacy=

chrome.exe

Remote address:

67.202.105.22:443

Request

GET /ps?xi=64&xu=AAAM5TTobO5AOANRbh-TAAAAAAA&expiration=1685788483&is_secure=true&us_privacy= HTTP/2.0
host: ssc-cms.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278

Response

HTTP/2.0 302

p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
set-cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278; Domain=.33across.com; Expires=Sat, 01-Jun-2024 10:34:43 GMT; Path=/; Secure; SameSite=None
referrer-policy: unsafe-url
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01-Jan-70 00:00:01 GMT
x-33x-status: 8000000008200000A
server: 33XP009
location: https://events-ssc.33across.com/match?bidder_id=64&external_user_id=AAAM5TTobO5AOANRbh-TAAAAAAA&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=
content-length: 0
date: Fri, 02 Jun 2023 10:34:42 GMT
GET

https://ssc-cms.33across.com/ps/?xi=10&us_privacy=&xu=c740f271-9531-49c0-be18-37c71c1598ed

chrome.exe

Remote address:

67.202.105.22:443

Request

GET /ps/?xi=10&us_privacy=&xu=c740f271-9531-49c0-be18-37c71c1598ed HTTP/2.0
host: ssc-cms.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278

Response

HTTP/2.0 302

p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
set-cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278; Domain=.33across.com; Expires=Sat, 01-Jun-2024 10:34:43 GMT; Path=/; Secure; SameSite=None
referrer-policy: unsafe-url
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01-Jan-70 00:00:01 GMT
x-33x-status: 8000000008200000A
server: 33XP020
location: https://events-ssc.33across.com/match?bidder_id=10&external_user_id=c740f271-9531-49c0-be18-37c71c1598ed&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=
content-length: 0
date: Fri, 02 Jun 2023 10:34:42 GMT
GET

https://ssc-cms.33across.com/ps/?xi=1&xu=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

67.202.105.22:443

Request

GET /ps/?xi=1&xu=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ssc-cms.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://eus.rubiconproject.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278

Response

HTTP/2.0 302

p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
set-cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278; Domain=.33across.com; Expires=Sat, 01-Jun-2024 10:34:46 GMT; Path=/; Secure; SameSite=None
referrer-policy: unsafe-url
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01-Jan-70 00:00:01 GMT
x-33x-status: 8000000008200000A
server: 33XP015
location: https://events-ssc.33across.com/match?bidder_id=30&external_user_id=LIEFHRWR-1M-G2O5&ts=1685702086&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=
content-length: 0
date: Fri, 02 Jun 2023 10:34:45 GMT
GET

https://visitor.omnitagjs.com/visitor/isync?uid=513c4e190506981c315d38ccadf488f2&name=SEEDTAG&visitor=&gdpr=1&gdpr_consent_string=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/isync?uid=513c4e190506981c315d38ccadf488f2&name=SEEDTAG&visitor=&gdpr=1&gdpr_consent_string=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy= HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/html; charset=UTF-8
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:37 GMT
content-length: 1815
x-envoy-upstream-service-time: 16
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?name=Xandr+%E2%80%93+Invest+DSP+-+Banner&ttl=720&uid=75d56568a11564bfb79a01d2fa9fdb29&visitor=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?name=Xandr+%E2%80%93+Invest+DSP+-+Banner&ttl=720&uid=75d56568a11564bfb79a01d2fa9fdb29&visitor=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 4
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=094e13e3a08b6f25e4d4f7b1fba0b26b&visitor=rpBC7sy2kpGA66dzZidB&name=RTB_HOUSE&pi=adyoulike

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=094e13e3a08b6f25e4d4f7b1fba0b26b&visitor=rpBC7sy2kpGA66dzZidB&name=RTB_HOUSE&pi=adyoulike HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 3
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=8122fdac60517b1efe1389612f3dfb34&visitor=2dc3e055-cffc-4d06-9da4-1904f628f2b7&name=THE_TRADE_DESK

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=8122fdac60517b1efe1389612f3dfb34&visitor=2dc3e055-cffc-4d06-9da4-1904f628f2b7&name=THE_TRADE_DESK HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 2
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?name=Xandr+%E2%80%93+Invest+DSP&ttl=720&uid=48d5713d5c563cba2049f505b2d944b6&visitor=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?name=Xandr+%E2%80%93+Invest+DSP&ttl=720&uid=48d5713d5c563cba2049f505b2d944b6&visitor=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 3
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=e77031af9e62c4ae76bee5b9517c4ef4&visitor=56c59abe3185f691861ab6dc90637e02&name=SMILE_WANTED

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=e77031af9e62c4ae76bee5b9517c4ef4&visitor=56c59abe3185f691861ab6dc90637e02&name=SMILE_WANTED HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 2
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=68c72dd412a8d0f3f6d2276db2509939&name=LOOPME&visitor=e4d2d3a5-65f1-4501-8509-632e10455140%20&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=68c72dd412a8d0f3f6d2276db2509939&name=LOOPME&visitor=e4d2d3a5-65f1-4501-8509-632e10455140%20&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1 HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
pragma: no-cache
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 20
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=0f4b0fcde45fe67019618f4c5f35f52e&name=ADMIXER&visitor=c8a08459659e4f51b9d4ed409082478a

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=0f4b0fcde45fe67019618f4c5f35f52e&name=ADMIXER&visitor=c8a08459659e4f51b9d4ed409082478a HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 31
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?name=ADOTMOB&ttl=720&uid=b989ee06df7dfc250798f7f0dfc4ddee&visitor=092722040797ccbf620f956a&gdpr=1&gdprConsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?name=ADOTMOB&ttl=720&uid=b989ee06df7dfc250798f7f0dfc4ddee&visitor=092722040797ccbf620f956a&gdpr=1&gdprConsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 45
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=4b30a0b1f289a261ab592e1e53c126eb&name=SOVRN&visitor=Gv36uBZHZqrz3My2QlqenXmM

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=4b30a0b1f289a261ab592e1e53c126eb&name=SOVRN&visitor=Gv36uBZHZqrz3My2QlqenXmM HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 75
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/bsync?uid=627080440e659fbe0f85333c665ae1de&name=SMARTADSERVER&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D117%26partneruserid%3DPARTNER_USER_ID%26gdpr%3DGDPR%26gdpr_consent%3DGDPR_CONSENT&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/bsync?uid=627080440e659fbe0f85333c665ae1de&name=SMARTADSERVER&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D117%26partneruserid%3DPARTNER_USER_ID%26gdpr%3DGDPR%26gdpr_consent%3DGDPR_CONSENT&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 2
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=3496f2c9155784213a7b528f78bb441a&visitor=LIEFHRWR-1M-G2O5&name=RUBICON&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=3496f2c9155784213a7b528f78bb441a&visitor=LIEFHRWR-1M-G2O5&name=RUBICON&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://eus.rubiconproject.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 307

cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
expires: 0
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=117&partneruserid=a196af075481adeaad7c11b2e5aa3007&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 0
x-envoy-upstream-service-time: 10
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=f04f5c55f88ffea7a3ce5b2d908a6e71&visitor=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=f04f5c55f88ffea7a3ce5b2d908a6e71&visitor=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0 HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 23
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=9276a8c8d010b77af50144c60047b781&visitor=6880727987372587628&name=SMARTADSERVER&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=9276a8c8d010b77af50144c60047b781&visitor=6880727987372587628&name=SMARTADSERVER&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssbsync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 5
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=74a1ec3b61e72925193cfceeea1b0608&visitor=0-49573c26-a714-5f77-534c-91fc1c2029fe$ip$154.61.71.13&name=STACKADAPT

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=74a1ec3b61e72925193cfceeea1b0608&visitor=0-49573c26-a714-5f77-534c-91fc1c2029fe$ip$154.61.71.13&name=STACKADAPT HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 4
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=bf39a6af2a15b80f82f7ff725f351919&visitor=c2d0f51a-4a26-5299-8c93-81cce8ea4472&name=BETWEENX

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=bf39a6af2a15b80f82f7ff725f351919&visitor=c2d0f51a-4a26-5299-8c93-81cce8ea4472&name=BETWEENX HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 5
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=6ca9493fd95af83951a8d0b213a77e8d&visitor=9d8f3303-0ae3-4294-96d8-cd495dbcc069&name=BIDTELLECT

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=6ca9493fd95af83951a8d0b213a77e8d&visitor=9d8f3303-0ae3-4294-96d8-cd495dbcc069&name=BIDTELLECT HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 11
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=2a62ca3297af454b8f19eb7922ed945f&visitor=c740f271-9531-49c0-be18-37c71c1598ed&name=BIDSWITCH&gdpr=&gdpr_consent=

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=2a62ca3297af454b8f19eb7922ed945f&visitor=c740f271-9531-49c0-be18-37c71c1598ed&name=BIDSWITCH&gdpr=&gdpr_consent= HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:40 GMT
content-length: 49
x-envoy-upstream-service-time: 22
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&name=ZEMANTA_NATIVE_1_2&ttl=720&uid=f2d9136cf53dede7f83ba16171a37fdd&visitor=ha0P7kgew5AP6IcniAHr

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&name=ZEMANTA_NATIVE_1_2&ttl=720&uid=f2d9136cf53dede7f83ba16171a37fdd&visitor=ha0P7kgew5AP6IcniAHr HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:41 GMT
content-length: 49
x-envoy-upstream-service-time: 3
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=2fe1084ffe44c28350116ec0a0a1c2d1&name=PUBMATIC&visitor=00CDED12-08DE-41D7-A730-899A187EB7E5

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=2fe1084ffe44c28350116ec0a0a1c2d1&name=PUBMATIC&visitor=00CDED12-08DE-41D7-A730-899A187EB7E5 HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:42 GMT
content-length: 49
x-envoy-upstream-service-time: 65
server: ayl-lb-fra02
GET

https://visitor.omnitagjs.com/visitor/sync?uid=9f93135e824096b627ff609f5cdee636&visitor=898e8d7677704954&name=OPENWEB

chrome.exe

Remote address:

185.255.84.152:443

Request

GET /visitor/sync?uid=9f93135e824096b627ff609f5cdee636&visitor=898e8d7677704954&name=OPENWEB HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://s.spotim.market/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:34:44 GMT
content-length: 49
x-envoy-upstream-service-time: 8
server: ayl-lb-fra02
DNS

sync.smartadserver.com

chrome.exe

Remote address:

8.8.8.8:53

Request

sync.smartadserver.com

IN A

Response

sync.smartadserver.com

IN CNAME

rtb-csync.smartadserver.com

rtb-csync.smartadserver.com

IN CNAME

rtb-csync-geo.usersync-prod-sas.akadns.net

rtb-csync-geo.usersync-prod-sas.akadns.net

IN CNAME

rtb-csync-itx4.smartadserver.com

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.103

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.93

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.104

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.101

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.94

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.102
DNS

secure.adnxs.com

chrome.exe

Remote address:

8.8.8.8:53

Request

secure.adnxs.com

IN A

Response

secure.adnxs.com

IN CNAME

g.geogslb.com

g.geogslb.com

IN CNAME

ib.anycast.adnxs.com

ib.anycast.adnxs.com

IN A

37.252.171.149

ib.anycast.adnxs.com

IN A

37.252.171.22

ib.anycast.adnxs.com

IN A

37.252.173.215

ib.anycast.adnxs.com

IN A

37.252.172.123

ib.anycast.adnxs.com

IN A

37.252.171.85

ib.anycast.adnxs.com

IN A

37.252.171.53

ib.anycast.adnxs.com

IN A

37.252.171.52

ib.anycast.adnxs.com

IN A

37.252.171.21

ib.anycast.adnxs.com

IN A

37.252.171.84
DNS

b1sync.zemanta.com

chrome.exe

Remote address:

8.8.8.8:53

Request

b1sync.zemanta.com

IN A

Response
DNS

match.adsrvr.org

chrome.exe

Remote address:

8.8.8.8:53

Request

match.adsrvr.org

IN A

Response

match.adsrvr.org

IN A

52.223.40.198

match.adsrvr.org

IN A

35.71.131.137

match.adsrvr.org

IN A

15.197.193.217

match.adsrvr.org

IN A

3.33.220.150
DNS

x.bidswitch.net

chrome.exe

Remote address:

8.8.8.8:53

Request

x.bidswitch.net

IN A

Response

x.bidswitch.net

IN CNAME

alb-aws-fr-bruges-1875226813.eu-central-1.elb.amazonaws.com

alb-aws-fr-bruges-1875226813.eu-central-1.elb.amazonaws.com

IN A

3.124.99.17

alb-aws-fr-bruges-1875226813.eu-central-1.elb.amazonaws.com

IN A

52.28.212.5

alb-aws-fr-bruges-1875226813.eu-central-1.elb.amazonaws.com

IN A

18.198.83.202

alb-aws-fr-bruges-1875226813.eu-central-1.elb.amazonaws.com

IN A

3.122.27.188

alb-aws-fr-bruges-1875226813.eu-central-1.elb.amazonaws.com

IN A

52.28.232.169

alb-aws-fr-bruges-1875226813.eu-central-1.elb.amazonaws.com

IN A

3.127.130.17

alb-aws-fr-bruges-1875226813.eu-central-1.elb.amazonaws.com

IN A

3.75.120.250

alb-aws-fr-bruges-1875226813.eu-central-1.elb.amazonaws.com

IN A

18.157.214.110
DNS

sync.search.spotxchange.com

chrome.exe

Remote address:

8.8.8.8:53

Request

sync.search.spotxchange.com

IN A

Response

sync.search.spotxchange.com

IN CNAME

sync.search-gtm.spotxchange.com.akadns.net

sync.search-gtm.spotxchange.com.akadns.net

IN CNAME

ams01.sync.search.spotxchange.com

ams01.sync.search.spotxchange.com

IN A

185.94.180.126

ams01.sync.search.spotxchange.com

IN A

185.94.180.125
DNS

ssum-sec.casalemedia.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ssum-sec.casalemedia.com

IN A

Response

ssum-sec.casalemedia.com

IN CNAME

um.indexww.com.akadns.net

um.indexww.com.akadns.net

IN CNAME

u12.lb.indexww.com

u12.lb.indexww.com

IN CNAME

fr-xn.lb.indexww.com

fr-xn.lb.indexww.com

IN A

185.80.39.216
DNS

169.8.26.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

169.8.26.104.in-addr.arpa

IN PTR

Response
DNS

46.36.251.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

46.36.251.142.in-addr.arpa

IN PTR

Response

46.36.251.142.in-addr.arpa

IN PTR

ams17s12-in-f141e100net
DNS

30.2.52.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

30.2.52.216.in-addr.arpa

IN PTR

Response
DNS

30.2.52.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

30.2.52.216.in-addr.arpa

IN PTR

Response
DNS

153.63.120.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

153.63.120.34.in-addr.arpa

IN PTR

Response

153.63.120.34.in-addr.arpa

IN PTR

1536312034bcgoogleusercontentcom
DNS

254.9.89.51.in-addr.arpa

Remote address:

8.8.8.8:53

Request

254.9.89.51.in-addr.arpa

IN PTR

Response

254.9.89.51.in-addr.arpa

IN PTR

ip254 ip-51-89-9eu
DNS

114.2.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

114.2.18.104.in-addr.arpa

IN PTR

Response
DNS

b1sync.zemanta.com

chrome.exe

Remote address:

8.8.8.8:53

Request

b1sync.zemanta.com

IN A

Response

b1sync.zemanta.com

IN CNAME

zemanta-nychi.zemanta.com

zemanta-nychi.zemanta.com

IN A

64.202.112.255

zemanta-nychi.zemanta.com

IN A

50.31.142.159

zemanta-nychi.zemanta.com

IN A

64.202.112.63

zemanta-nychi.zemanta.com

IN A

64.202.112.127

zemanta-nychi.zemanta.com

IN A

64.202.112.191

zemanta-nychi.zemanta.com

IN A

70.42.32.191

zemanta-nychi.zemanta.com

IN A

64.74.236.191

zemanta-nychi.zemanta.com

IN A

64.74.236.63

zemanta-nychi.zemanta.com

IN A

64.74.236.127

zemanta-nychi.zemanta.com

IN A

50.31.142.223

zemanta-nychi.zemanta.com

IN A

70.42.32.63

zemanta-nychi.zemanta.com

IN A

64.74.236.31

zemanta-nychi.zemanta.com

IN A

70.42.32.255

zemanta-nychi.zemanta.com

IN A

50.31.142.127

zemanta-nychi.zemanta.com

IN A

64.202.112.31

zemanta-nychi.zemanta.com

IN A

50.31.142.255

zemanta-nychi.zemanta.com

IN A

64.202.112.95

zemanta-nychi.zemanta.com

IN A

50.31.142.63

zemanta-nychi.zemanta.com

IN A

70.42.32.223

zemanta-nychi.zemanta.com

IN A

64.202.112.223

zemanta-nychi.zemanta.com

IN A

70.42.32.95

zemanta-nychi.zemanta.com

IN A

70.42.32.127

zemanta-nychi.zemanta.com

IN A

70.42.32.159

zemanta-nychi.zemanta.com

IN A

64.202.112.159

zemanta-nychi.zemanta.com

IN A

64.74.236.95

zemanta-nychi.zemanta.com

IN A

64.74.236.255

zemanta-nychi.zemanta.com

IN A

50.31.142.95

zemanta-nychi.zemanta.com

IN A

50.31.142.191

zemanta-nychi.zemanta.com

IN A

64.74.236.223

zemanta-nychi.zemanta.com

IN A

70.42.32.31

zemanta-nychi.zemanta.com

IN A

50.31.142.31

zemanta-nychi.zemanta.com

IN A

64.74.236.159
DNS

228.73.67.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

228.73.67.172.in-addr.arpa

IN PTR

Response
DNS

255.142.31.50.in-addr.arpa

Remote address:

8.8.8.8:53

Request

255.142.31.50.in-addr.arpa

IN PTR

Response

255.142.31.50.in-addr.arpa

IN PTR

chioutbraincom
DNS

190.22.0.3.in-addr.arpa

Remote address:

8.8.8.8:53

Request

190.22.0.3.in-addr.arpa

IN PTR

Response

190.22.0.3.in-addr.arpa

IN PTR

ec2-3-0-22-190ap-southeast-1compute amazonawscom
DNS

59.123.83.103.in-addr.arpa

Remote address:

8.8.8.8:53

Request

59.123.83.103.in-addr.arpa

IN PTR

Response
DNS

1.36.251.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

1.36.251.142.in-addr.arpa

IN PTR

Response

1.36.251.142.in-addr.arpa

IN PTR

ams15s44-in-f11e100net
DNS

208.202.140.18.in-addr.arpa

Remote address:

8.8.8.8:53

Request

208.202.140.18.in-addr.arpa

IN PTR

Response

208.202.140.18.in-addr.arpa

IN PTR

ec2-18-140-202-208ap-southeast-1compute amazonawscom
DNS

162.117.19.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

162.117.19.2.in-addr.arpa

IN PTR

Response

162.117.19.2.in-addr.arpa

IN PTR

a2-19-117-162deploystaticakamaitechnologiescom
DNS

162.117.19.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

162.117.19.2.in-addr.arpa

IN PTR

Response

162.117.19.2.in-addr.arpa

IN PTR

a2-19-117-162deploystaticakamaitechnologiescom
GET

https://ssum-sec.casalemedia.com/usermatchredir?s=191730&cb=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Findexexchange%3Fchanneluid%3D

chrome.exe

Remote address:

185.80.39.216:443

Request

GET /usermatchredir?s=191730&cb=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Findexexchange%3Fchanneluid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://cs.seedtag.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 302 Found

Date: Fri, 02 Jun 2023 10:34:37 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: /usermatchredir?cb=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Findexexchange%3Fchanneluid%3D&s=191730&C=1
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:34:37 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPS=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:37 GMT; Max-Age=7776000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:37 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
GET

https://ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Findexexchange%3Fchanneluid%3D&s=191730&C=1

chrome.exe

Remote address:

185.80.39.216:443

Request

GET /usermatchredir?cb=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Findexexchange%3Fchanneluid%3D&s=191730&C=1 HTTP/1.1
Host: ssum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://cs.seedtag.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPS=5292; CMPRO=5292

Response

HTTP/1.1 302 Found

Date: Fri, 02 Jun 2023 10:34:37 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: https://s.seedtag.com/cs/cookiesync/indexexchange?channeluid=ZHnFvVqT2oy7TuXID9kl3wAA%265292
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:34:37 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPS=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:37 GMT; Max-Age=7776000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:37 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
DNS

match.sharethrough.com

chrome.exe

Remote address:

8.8.8.8:53

Request

match.sharethrough.com

IN A

Response

match.sharethrough.com

IN CNAME

match-eu-central-1-ecs.sharethrough.com

match-eu-central-1-ecs.sharethrough.com

IN A

35.158.198.172

match-eu-central-1-ecs.sharethrough.com

IN A

3.126.36.96

match-eu-central-1-ecs.sharethrough.com

IN A

35.159.45.56

match-eu-central-1-ecs.sharethrough.com

IN A

52.28.172.114

match-eu-central-1-ecs.sharethrough.com

IN A

18.197.12.252

match-eu-central-1-ecs.sharethrough.com

IN A

52.28.18.50

match-eu-central-1-ecs.sharethrough.com

IN A

52.59.74.235

match-eu-central-1-ecs.sharethrough.com

IN A

3.122.202.171
DNS

eus.rubiconproject.com

chrome.exe

Remote address:

8.8.8.8:53

Request

eus.rubiconproject.com

IN A

Response

eus.rubiconproject.com

IN CNAME

eus.rubiconproject.com.edgekey.net

eus.rubiconproject.com.edgekey.net

IN CNAME

e8960.b.akamaiedge.net

e8960.b.akamaiedge.net

IN A

23.52.56.137
GET

https://sync.smartadserver.com/getuid?gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&nwid=3050&url=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fsmart%3Fchanneluid%3D%5Bsas_uid%5D

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /getuid?gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&nwid=3050&url=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fsmart%3Fchanneluid%3D%5Bsas_uid%5D HTTP/2.0
host: sync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:37 GMT
location: https://s.seedtag.com/cs/cookiesync/smart?channeluid=6880727987372587628
GET

https://ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=1&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid]

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /api/sync?callerId=5&gdpr=1&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid] HTTP/2.0
host: ssbsync-global.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0

Response

HTTP/2.0 200

content-length: 0
date: Fri, 02 Jun 2023 10:34:39 GMT
GET

https://ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid]

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /api/sync?callerId=5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid] HTTP/2.0
host: ssbsync-global.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:39 GMT
location: https://onetag-sys.com/match/?int_id=107&uid=6880727987372587628
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
location: https://s.amazon-adsystem.com/dcm?pid=72348060-38ad-4586-8e4f-f1e2a8e789b3&id=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=135:TAM_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
location: https://cm.g.doubleclick.net/pixel?google_nid=smartrtb_dbm&google_cm&google_sc&google_hm=Njg4MDcyNzk4NzM3MjU4NzYyOA==&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=76:GOOGLE_HOSTED_SI; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fdcm%3Fpid%3D72348060-38ad-4586-8e4f-f1e2a8e789b3%26id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fdcm%3Fpid%3D72348060-38ad-4586-8e4f-f1e2a8e789b3%26id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
location: https://cm.g.doubleclick.net/pixel?google_nid=smart_adserver_eb&google_hm=Njg4MDcyNzk4NzM3MjU4NzYyOA==&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid]

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /api/sync?callerId=5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid] HTTP/2.0
host: ssbsync-global.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=134:OB_OK

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:39 GMT
location: https://onetag-sys.com/match/?int_id=107&uid=6880727987372587628
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=75&issi=1&partneruserid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?partnerid=75&issi=1&partneruserid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=75:2dc3e055-cffc-4d06-9da4-1904f628f2b7|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=25&partneruserid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=25&partneruserid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=25:86a06479-c5be-4e00-809d-041df6b6e2f1|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=86&partneruserid=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=86&partneruserid=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=22:1897977468389386522|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=22&partneruserid=1897977468389386522&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=22&partneruserid=1897977468389386522&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=49:7240035300118362264|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=49&partneruserid=7240035300118362264&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?partnerid=49&partneruserid=7240035300118362264&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=117:a196af075481adeaad7c11b2e5aa3007|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=147&partneruserid=bc21730f-1096-4796-bd58-da49fbcb0fc9&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?partnerid=147&partneruserid=bc21730f-1096-4796-bd58-da49fbcb0fc9&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=66:092722040797ccbf620f956a|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=117&partneruserid=a196af075481adeaad7c11b2e5aa3007&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=117&partneruserid=a196af075481adeaad7c11b2e5aa3007&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=86:4894631733703052721|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=66&partneruserid=092722040797ccbf620f956a&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=66&partneruserid=092722040797ccbf620f956a&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:39 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=134:OB_OK|147:bc21730f-1096-4796-bd58-da49fbcb0fc9; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=124&partneruserid=e4d2d3a5-65f1-4501-8509-632e10455140&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=124&partneruserid=e4d2d3a5-65f1-4501-8509-632e10455140&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1 HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=124:e4d2d3a5-65f1-4501-8509-632e10455140|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=94&partneruserid=ZHnFvwAEdQe2WgAD&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=94&partneruserid=ZHnFvwAEdQe2WgAD&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1 HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:39 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|134:OB_OK

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
location: https://match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|134:OB_OK|139:0; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=91&partneruserid=00CDED12-08DE-41D7-A730-899A187EB7E5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=91&partneruserid=00CDED12-08DE-41D7-A730-899A187EB7E5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=79&partneruserid=e84a31d9-85d9-4096-8ac9-074966796b19&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=79&partneruserid=e84a31d9-85d9-4096-8ac9-074966796b19&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=79:e84a31d9-85d9-4096-8ac9-074966796b19|94:ZHnFvwAEdQe2WgAD|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir?partnerid=127&partneruserid=AADPM07I84wAACFJuFXTrA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir?partnerid=127&partneruserid=AADPM07I84wAACFJuFXTrA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|127:AADPM07I84wAACFJuFXTrA|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=80&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&partneruserid=ifW2D9z041WS9LABh_WsV96gtgaSo-QOhvCsT7gx

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?partnerid=80&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&partneruserid=ifW2D9z041WS9LABh_WsV96gtgaSo-QOhvCsT7gx HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|127:AADPM07I84wAACFJuFXTrA|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=80:ifW2D9z041WS9LABh_WsV96gtgaSo-QOhvCsT7gx|94:ZHnFvwAEdQe2WgAD|127:AADPM07I84wAACFJuFXTrA|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&google_error=15

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?partnerid=76&partneruserid=&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&google_error=15 HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|127:AADPM07I84wAACFJuFXTrA|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=8117640948868045750&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=32&partneruserid=8117640948868045750&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|127:AADPM07I84wAACFJuFXTrA|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=32:8117640948868045750|94:ZHnFvwAEdQe2WgAD|127:AADPM07I84wAACFJuFXTrA|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=100&partneruserid=7ebef501-c4ef-4f2a-a255-33f2007c1273&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=100&partneruserid=7ebef501-c4ef-4f2a-a255-33f2007c1273&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://eu-u.openx.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|127:AADPM07I84wAACFJuFXTrA|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:39 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:40 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=33&partneruserid=ZHnFvVqT2oy7TuXID9kl3wAA%265292

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=33&partneruserid=ZHnFvVqT2oy7TuXID9kl3wAA%265292 HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssum-sec.casalemedia.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|127:AADPM07I84wAACFJuFXTrA|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=31&partneruserid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?partnerid=31&partneruserid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=31:c740f271-9531-49c0-be18-37c71c1598ed|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:41 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=124&partneruserid=e4d2d3a5-65f1-4501-8509-632e10455140&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=124&partneruserid=e4d2d3a5-65f1-4501-8509-632e10455140&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1 HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssbsync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:41 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:41 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=133&partneruserid=355bd4a3

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=133&partneruserid=355bd4a3 HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=92&partneruserid=pghBpt3yfaU1&ev=1&pid=560288&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=92&partneruserid=pghBpt3yfaU1&ev=1&pid=560288&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1 HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=92:pghBpt3yfaU1|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:41 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=130&partneruserid=1d24ae28-d269-40d9-989b-e6dda52bb579&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=130&partneruserid=1d24ae28-d269-40d9-989b-e6dda52bb579&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:41 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:41 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir?partnerid=127&partneruserid=AADPM07I84wAACFJuFXTrA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir?partnerid=127&partneruserid=AADPM07I84wAACFJuFXTrA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssbsync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|130:1d24ae28-d269-40d9-989b-e6dda52bb579|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:41 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=111&partneruserid=ID5-3300vC3zTw8FuNhWdkDwNWMT0ilyd1Xb7oDH-w26Qg&redirurl=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F102%2F8%2F2.gif%3Fpuid%3DSMART_USER_ID%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?partnerid=111&partneruserid=ID5-3300vC3zTw8FuNhWdkDwNWMT0ilyd1Xb7oDH-w26Qg&redirurl=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F102%2F8%2F2.gif%3Fpuid%3DSMART_USER_ID%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|130:1d24ae28-d269-40d9-989b-e6dda52bb579|134:OB_OK

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
location: https://id5-sync.com/c/102/102/8/2.gif?puid=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|111:ID5-3300vC3zTw8FuNhWdkDwNWMT0ilyd1Xb7oDH-w26Qg|127:AADPM07I84wAACFJuFXTrA|130:1d24ae28-d269-40d9-989b-e6dda52bb579|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:41 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=130&partneruserid=e2850144-dcba-4a6f-837e-990adcbcef1a&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=130&partneruserid=e2850144-dcba-4a6f-837e-990adcbcef1a&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssbsync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|130:1d24ae28-d269-40d9-989b-e6dda52bb579|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:41 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:41 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir?partnerid=127&partneruserid=AADPM07I84wAACFJuFXTrA&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir?partnerid=127&partneruserid=AADPM07I84wAACFJuFXTrA&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:40 GMT
cache-control: no-cache,no-store
location: https://match.prod.bidr.io/cookie-sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&bee_sync_partners=pp%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:41 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=141&partneruserid=8d6P0wV50xeSGuMvDF1tWVY3w&gdpr=0&gdpr_consent=&redirurl=https%3A%2F%2Fa.audrte.com%2Fmatch%3Fuid%3DSMART_USER_ID%26p%3DM501991648%26r%3Dhttps%253A%252F%252Fa.audrte.com%252Fp%253F

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?partnerid=141&partneruserid=8d6P0wV50xeSGuMvDF1tWVY3w&gdpr=0&gdpr_consent=&redirurl=https%3A%2F%2Fa.audrte.com%2Fmatch%3Fuid%3DSMART_USER_ID%26p%3DM501991648%26r%3Dhttps%253A%252F%252Fa.audrte.com%252Fp%253F HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:41 GMT
cache-control: no-cache,no-store
location: https://a.audrte.com/match?uid=6880727987372587628&p=M501991648&r=https%3A%2F%2Fa.audrte.com%2Fp%3F&gdpr=0&gdpr_consent=
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|141:8d6P0wV50xeSGuMvDF1tWVY3w; expires=Sun, 02 Jun 2024 10:34:42 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&issi=1&partnerid=116&partneruserid=ha0P7kgew5AP6IcniAHr

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&issi=1&partnerid=116&partneruserid=ha0P7kgew5AP6IcniAHr HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:41 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:42 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=113&partneruserid=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?partnerid=113&partneruserid=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:42 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:42 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:42 GMT
cache-control: no-cache,no-store
location: https://match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|139:0; expires=Sun, 02 Jun 2024 10:34:42 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/2.0 302

content-length: 0
date: Fri, 02 Jun 2023 10:34:41 GMT
cache-control: no-cache,no-store
location: https://cm.g.doubleclick.net/pixel?google_nid=smart_adserver_eb&google_hm=Njg4MDcyNzk4NzM3MjU4NzYyOA==&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:42 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=113&partneruserid=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.139.103:443

Request

GET /redir/?partnerid=113&partneruserid=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: rtb-csync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: vs=507391=5478394
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: pid=6880727987372587628
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/2.0 200

content-type: image/gif
date: Fri, 02 Jun 2023 10:34:42 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; expires=Sun, 02 Jun 2024 10:34:42 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
DNS

de.tynt.com

chrome.exe

Remote address:

8.8.8.8:53

Request

de.tynt.com

IN A

Response

de.tynt.com

IN A

67.202.105.32

de.tynt.com

IN A

67.202.105.31
DNS

cm.g.doubleclick.net

chrome.exe

Remote address:

8.8.8.8:53

Request

cm.g.doubleclick.net

IN A

Response

cm.g.doubleclick.net

IN A

216.58.208.98
GET

https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X

chrome.exe

Remote address:

67.202.105.32:443

Request

GET /deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X HTTP/2.0
host: de.tynt.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 307

location: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false
expires: Sat, 26 Jul 1997 05:00:00 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile
set-cookie: uid=E9mYH2R5xb01+C1CMtSl+w==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure
referrer-policy: unsafe-url
content-length: 0
date: Fri, 02 Jun 2023 10:34:37 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
GET

https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1

chrome.exe

Remote address:

67.202.105.32:443

Request

GET /deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1 HTTP/2.0
host: hde.tynt.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: uid=E9mYH2R5xb01+C1CMtSl+w==

Response

HTTP/2.0 200

cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false
expires: Sat, 26 Jul 1997 05:00:00 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile
set-cookie: pids=%5B%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1685702077797%7D%2C%7B%22p%22%3A%227daaa56bb0%22%2C%22f%22%3A1%2C%22ts%22%3A1685702077797%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1685702077797%7D%2C%7B%22p%22%3A%22bac1bc34e2%22%2C%22f%22%3A1%2C%22ts%22%3A1685702077797%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1685702077797%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1685702077797%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure
referrer-policy: unsafe-url
content-type: text/html
content-length: 1596
date: Fri, 02 Jun 2023 10:34:36 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
DNS

ups.analytics.yahoo.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ups.analytics.yahoo.com

IN A

Response

ups.analytics.yahoo.com

IN CNAME

prod.ups-ats.aolp-ds-prd.aws.oath.cloud

prod.ups-ats.aolp-ds-prd.aws.oath.cloud

IN CNAME

prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud

prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud

IN CNAME

ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud

ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud

IN A

3.75.62.37

ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud

IN A

3.71.149.231
GET

https://cm.g.doubleclick.net/pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=seedtag&bsw_param=c740f271-9531-49c0-be18-37c71c1598ed&google_hm=Yzc0MGYyNzEtOTUzMS00OWMwLWJlMTgtMzdjNzFjMTU5OGVk

chrome.exe

Remote address:

216.58.208.98:443

Request

GET /pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=seedtag&bsw_param=c740f271-9531-49c0-be18-37c71c1598ed&google_hm=Yzc0MGYyNzEtOTUzMS00OWMwLWJlMTgtMzdjNzFjMTU5OGVk HTTP/2.0
host: cm.g.doubleclick.net
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_sc&gdpr=0&gdpr_consent=%24%7BGDPR_CONSENT_229%7D&us_privacy=

chrome.exe

Remote address:

216.58.208.98:443

Request

GET /pixel?google_nid=spotxchange_dbm&google_cm&google_sc&gdpr=0&gdpr_consent=%24%7BGDPR_CONSENT_229%7D&us_privacy= HTTP/2.0
host: cm.g.doubleclick.net
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

sync.mathtag.com

chrome.exe

Remote address:

8.8.8.8:53

Request

sync.mathtag.com

IN A

Response

sync.mathtag.com

IN CNAME

pixel-origin.mathtag.com

pixel-origin.mathtag.com

IN A

185.29.134.244

pixel-origin.mathtag.com

IN A

185.29.132.245

pixel-origin.mathtag.com

IN A

185.29.134.248

pixel-origin.mathtag.com

IN A

185.29.132.241
GET

https://ups.analytics.yahoo.com/ups/58427/occ

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58427/occ HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://ups.analytics.yahoo.com/ups/58427/occ?verify=true

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58427/occ?verify=true HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
GET

https://ups.analytics.yahoo.com/ups/58368/occ?gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58368/occ?gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sync.richaudience.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
cookie: IDSYNC=192z~2bzm
GET

https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=00CDED12-08DE-41D7-A730-899A187EB7E5&redir=true&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58292/sync?_origin=1&uid=00CDED12-08DE-41D7-A730-899A187EB7E5&redir=true&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
cookie: IDSYNC="192z~2bzm:191c~2bzm"
GET

https://ups.analytics.yahoo.com/ups/58675/occ?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58675/occ?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
cookie: IDSYNC="192z~2bzm:191c~2bzm:18z8~2bzm"
GET

https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=1&gdpr_consent=

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58488/occ?&gdpr=1&gdpr_consent= HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
cookie: IDSYNC="192z~2bzm:191c~2bzm:18z8~2bzm:199v~2bzm"
GET

https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58488/occ?&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
cookie: IDSYNC="192z~2bzm:191c~2bzm:18z8~2bzm:199v~2bzm"
GET

https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58488/occ?&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
cookie: IDSYNC="192z~2bzm:191c~2bzm:18z8~2bzm:199v~2bzm:194o~2bzm"
GET

https://ups.analytics.yahoo.com/ups/58170/sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_origin=1&redir=true

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58170/sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_origin=1&redir=true HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sync.richaudience.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
cookie: IDSYNC="192z~2bzm:191c~2bzm:18z8~2bzm:199v~2bzm:194o~2bzm"
GET

https://ups.analytics.yahoo.com/ups/58350/sync?redir=true

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58350/sync?redir=true HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
cookie: IDSYNC="192z~2bzm:191c~2bzm:18z8~2bzm:199v~2bzm:194o~2bzm:18vu~2bzm"
GET

https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58736/cms?partner_id=LOTME&gdpr=0 HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://bcp.crwdcntrl.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
cookie: IDSYNC="192z~2bzm:191c~2bzm:18z8~2bzm:199v~2bzm:194o~2bzm:18vu~2bzm:190u~2bzm"
GET

https://ups.analytics.yahoo.com/ups/58382/sync?uid=2963187305596611584206&_origin=1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/58382/sync?uid=2963187305596611584206&_origin=1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://eb2.3lift.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
cookie: IDSYNC="192z~2bzm:191c~2bzm:18z8~2bzm:199v~2bzm:194o~2bzm:18vu~2bzm:190u~2bzm:19bk~2bzm"
GET

https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZHnFvVqT2oy7TuXID9kl3wAAFKwAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=

chrome.exe

Remote address:

3.75.62.37:443

Request

GET /ups/55940/sync?_origin=1&redir2=true&uid=ZHnFvVqT2oy7TuXID9kl3wAAFKwAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid= HTTP/2.0
host: ups.analytics.yahoo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssum-sec.casalemedia.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: A3=d=AQABBL3FeWQCECiRBRMNhJ_eYXHVWyMrj7oFEgEBAQEXe2SDZFkWyyMA_eMAAA&S=AQAAAv1nLltSHtjr293Qb42pEaw
cookie: IDSYNC="192z~2bzm:191c~2bzm:18z8~2bzm:199v~2bzm:194o~2bzm:18vu~2bzm:190u~2bzm:19bk~2bzm:191q~2bzm"
DNS

image6.pubmatic.com

chrome.exe

Remote address:

8.8.8.8:53

Request

image6.pubmatic.com

IN A

Response

image6.pubmatic.com

IN CNAME

image6v2.pubmnet.com

image6v2.pubmnet.com

IN CNAME

pugm-lhrc.pubmnet.com

pugm-lhrc.pubmnet.com

IN A

185.64.190.78
DNS

cm.adform.net

chrome.exe

Remote address:

8.8.8.8:53

Request

cm.adform.net

IN A

Response

cm.adform.net

IN CNAME

track-eu.adformnet.akadns.net

track-eu.adformnet.akadns.net

IN A

37.157.5.84

track-eu.adformnet.akadns.net

IN A

37.157.5.132

track-eu.adformnet.akadns.net

IN A

37.157.5.133
DNS

u.openx.net

chrome.exe

Remote address:

8.8.8.8:53

Request

u.openx.net

IN A

Response

u.openx.net

IN A

34.98.64.218

u.openx.net

IN A

35.244.159.8
DNS

event.clientgear.com

chrome.exe

Remote address:

8.8.8.8:53

Request

event.clientgear.com

IN A

Response

event.clientgear.com

IN A

47.252.78.131
GET

https://u.openx.net/w/1.0/cm?id=e297ef35-c932-4587-9b44-3838020a33e7&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&r=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fopenx%3Fchanneluid%3D%7BOPENX_ID%7D

chrome.exe

Remote address:

34.98.64.218:443

Request

GET /w/1.0/cm?id=e297ef35-c932-4587-9b44-3838020a33e7&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&r=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fopenx%3Fchanneluid%3D%7BOPENX_ID%7D HTTP/2.0
host: u.openx.net
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://eu-u.openx.net/w/1.0/cm?id=a547219b-814b-4e3e-8a4f-35c044fa1891&ph=ec81d0b7-c42e-4a42-b97a-9305af647d30&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D100%26partneruserid%3D%7BOPENX_ID%7D&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

34.98.64.218:443

Request

GET /w/1.0/cm?id=a547219b-814b-4e3e-8a4f-35c044fa1891&ph=ec81d0b7-c42e-4a42-b97a-9305af647d30&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D100%26partneruserid%3D%7BOPENX_ID%7D&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: eu-u.openx.net
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: i=b89b5da0-fcaa-4fb1-bf11-45264248fa48|1685702077
GET

https://us-u.openx.net/w/1.0/sd?id=537072971&val=2dc3e055-cffc-4d06-9da4-1904f628f2b7&ttd_puid=6b3762f9-552d-7046-e5c7-8dce266fc9b5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

34.98.64.218:443

Request

GET /w/1.0/sd?id=537072971&val=2dc3e055-cffc-4d06-9da4-1904f628f2b7&ttd_puid=6b3762f9-552d-7046-e5c7-8dce266fc9b5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: us-u.openx.net
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://eu-u.openx.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: i=b89b5da0-fcaa-4fb1-bf11-45264248fa48|1685702077
cookie: pd=v2|1685702080|gekin0vNiygu
GET

https://us-u.openx.net/w/1.0/sd?id=537072956&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&val=oSUZWvQkTAC6JB9UryUDAvZwGVO6c0tbriBGHWW-

chrome.exe

Remote address:

34.98.64.218:443

Request

GET /w/1.0/sd?id=537072956&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&val=oSUZWvQkTAC6JB9UryUDAvZwGVO6c0tbriBGHWW- HTTP/2.0
host: us-u.openx.net
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://eu-u.openx.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: i=b89b5da0-fcaa-4fb1-bf11-45264248fa48|1685702077
cookie: pd=v2|1685702080|gekin0vNiygu
DNS

creativecdn.com

chrome.exe

Remote address:

8.8.8.8:53

Request

creativecdn.com

IN A

Response

creativecdn.com

IN A

185.184.8.90
GET

https://creativecdn.com/cm-notify?pi=seedtag

chrome.exe

Remote address:

185.184.8.90:443

Request

GET /cm-notify?pi=seedtag HTTP/2.0
host: creativecdn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

date: Fri, 02 Jun 2023 10:34:37 GMT
set-cookie: u=rpBC7sy2kpGA66dzZidB;Path=/;Domain=.creativecdn.com;Expires=Sat, 01-Jun-2024 10:34:37 GMT;Max-Age=31536000;Secure;SameSite=None
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: ts=1685702077;Path=/;Domain=.creativecdn.com;Expires=Sat, 01-Jun-2024 10:34:37 GMT;Max-Age=31536000;Secure;SameSite=None
location: https://creativecdn.com/cm-notify?pi=seedtag&tc=1
content-length: 0
GET

https://creativecdn.com/cm-notify?pi=seedtag&tc=1

chrome.exe

Remote address:

185.184.8.90:443

Request

GET /cm-notify?pi=seedtag&tc=1 HTTP/2.0
host: creativecdn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: u=rpBC7sy2kpGA66dzZidB
cookie: ts=1685702077

Response

HTTP/2.0 302

date: Fri, 02 Jun 2023 10:34:37 GMT
location: https://s.seedtag.com/cs/cookiesync/rtbhouse?channeluid=rpBC7sy2kpGA66dzZidB&pi=seedtag&tc=1
cache-control: no-cache, no-store, must-revalidate, private, max-age=0
pragma: no-cache
date: Fri, 02 Jun 2023 10:34:37 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 0
GET

https://creativecdn.com/cm-notify?pi=adyoulike

chrome.exe

Remote address:

185.184.8.90:443

Request

GET /cm-notify?pi=adyoulike HTTP/2.0
host: creativecdn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: u=rpBC7sy2kpGA66dzZidB
cookie: ts=1685702077

Response

HTTP/2.0 302

date: Fri, 02 Jun 2023 10:34:38 GMT
location: https://visitor.omnitagjs.com/visitor/sync?uid=094e13e3a08b6f25e4d4f7b1fba0b26b&visitor=rpBC7sy2kpGA66dzZidB&name=RTB_HOUSE&pi=adyoulike
cache-control: no-cache, no-store, must-revalidate, private, max-age=0
pragma: no-cache
date: Fri, 02 Jun 2023 10:34:38 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 0
DNS

stags.bluekai.com

chrome.exe

Remote address:

8.8.8.8:53

Request

stags.bluekai.com

IN A

Response

stags.bluekai.com

IN CNAME

tags.bluekai.com.edgekey.net

tags.bluekai.com.edgekey.net

IN CNAME

e9126.x.akamaiedge.net

e9126.x.akamaiedge.net

IN A

173.223.113.181
GET

https://stags.bluekai.com/site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS64ZOONSWKZDUMFTS4Y3PNUXWG4ZPMNXW623JMVZXS3TDF5XXK5DCOJQWS3R7MNUGC3TOMVWHK2LEHVUGCMCQG5VWOZLXGVAVANSJMNXGSQKIOITGK6DDNBQW4Z3FHVZWKZLEORQWOJTHMRYHEPJREZTWI4DSL5RW63TTMVXHIPKDKBZXKLLPIFIHG5JNN5AUCS2BN5AUKTSEIZBXGQKQL5AUCSC7IFAUC4KJJJRHIWC7JBPV6YSXHFZDQZRVL5QWM5BQMVMTCUBZL5VDON3VKF5EI2DGJZVS2NCGGNGF6V27JJ3VQNJSIU3U4RRTGZ2HCNCLNVJDIRLVGNGEESKVJZWEQTSIKVKFM3LXMFXWWVTSPFEHGYLLGJRXAVCOJNFDMQSFNNEE2USPGJSFSR2GGV2W26DUNJSVCS2ZGVPXAX3EGNTHQMSEFV2F6ZDWFUZTS6RTPI4DCWDOGNSFUZRNL4YC2UCDMRKTKXZZIRTG4OLGKJTGELJZJFGDSXZXHB3DQ5RYL44V64TLGJPWKWC7GNPTOOK7G5PUQOJNMZPTQNCKMNAUK3KHOJRVCQTENVKU6RCON5DUKVKDJFCVSVTIIFJFCS2BINBWOR2GN5TUSQKGIJ3VKN2JO5BWMV2FKNAUMQKLIFEXOSLHKE2EC33ZJFBECQKBJJAUK2CFIFCWOUSZJFAUCQKCIFEUCQKRIFEUERKJIFDUEZ2FIZAUEWKDIFIUCQLHJ5TVS33IKFAUGQSJKFFEKUSFKFYGOUKGKFFEEQKTGJLEGQ2VIYYGQ4DIIFDFOV2BIZAUS2SZJNAUERKFM5EXEQKBIVBFST2BLFEWWQSLPBMUSRLNJFHG6Z2BI5AUMQKLJJKUWMKGJI3GCQLILF5E2QKBIFAS4ZBUIFAUGSDHIFAUCQKB&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

173.223.113.181:443

Request

GET /site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: stags.bluekai.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://cs.seedtag.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

content-length: 0
location: https://b1sync.zemanta.com/usersync/bluekai/callback/?d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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Fri, 02 Jun 2023 10:34:37 GMT
set-cookie: bku=ikG99nlaKVx+/tLu; Path=/; Domain=.bluekai.com; Expires=Sat, 02 Dec 2023 10:34:37 GMT; Secure; SameSite=None
set-cookie: bkpa=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; Path=/; Domain=.bluekai.com; Expires=Sat, 02 Dec 2023 10:34:37 GMT; Secure; SameSite=None
GET

https://stags.bluekai.com/site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

173.223.113.181:443

Request

GET /site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: stags.bluekai.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: bku=ikG99nlaKVx+/tLu
cookie: bkpa=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

Response

HTTP/2.0 302

content-length: 0
location: https://b1sync.zemanta.com/usersync/bluekai/callback/?d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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Fri, 02 Jun 2023 10:34:40 GMT
set-cookie: bku=ikG99nlaKVx+/tLu; Path=/; Domain=.bluekai.com; Expires=Sat, 02 Dec 2023 10:34:40 GMT; Secure; SameSite=None
set-cookie: bkpa=; Path=/; Domain=.bluekai.com; Max-Age=0; Secure; SameSite=None
GET

https://stags.bluekai.com/site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS6ZDTOVWS243FMMXGGYLTMFWGK3LFMRUWCLTDN5WS6Y3SOVWT6Y3NL5SHG4C7NFSD2MJXEZSXQY3IMFXGOZJ5NFXGIZLYEZSXQ5DFOJXGC3C7OVZWK4S7NFSD22DBGBIDO23HMV3TKQKQGZEWG3TJIFEHE

chrome.exe

Remote address:

173.223.113.181:443

Request

GET /site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS6ZDTOVWS243FMMXGGYLTMFWGK3LFMRUWCLTDN5WS6Y3SOVWT6Y3NL5SHG4C7NFSD2MJXEZSXQY3IMFXGOZJ5NFXGIZLYEZSXQ5DFOJXGC3C7OVZWK4S7NFSD22DBGBIDO23HMV3TKQKQGZEWG3TJIFEHE HTTP/2.0
host: stags.bluekai.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssum-sec.casalemedia.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: bku=ikG99nlaKVx+/tLu

Response

HTTP/2.0 302

content-length: 0
location: https://b1sync.zemanta.com/usersync/bluekai/callback/?d=NB2HI4DTHIXS6ZDTOVWS243FMMXGGYLTMFWGK3LFMRUWCLTDN5WS6Y3SOVWT6Y3NL5SHG4C7NFSD2MJXEZSXQY3IMFXGOZJ5NFXGIZLYEZSXQ5DFOJXGC3C7OVZWK4S7NFSD22DBGBIDO23HMV3TKQKQGZEWG3TJIFEHE
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Fri, 02 Jun 2023 10:34:41 GMT
set-cookie: bku=ikG99nlaKVx+/tLu; Path=/; Domain=.bluekai.com; Expires=Sat, 02 Dec 2023 10:34:41 GMT; Secure; SameSite=None
GET

https://stags.bluekai.com/site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

173.223.113.181:443

Request

GET /site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS64TUMIWWG43ZNZRS443NMFZHIYLEONSXE5TFOIXGG33NF5ZGKZDJOIXT6ZLYMNUGC3THMU6XG3LBOJ2CMZ3EOBZD2MJGM5SHA4S7MNXW443FNZ2D2Q2QON2S232BKBZXKLLPIFAUWQLPIFCU4RCGINZUCUC7IFAUQX2BIFAXCSKKMJ2FQX2IL5PWEVZZOI4GMNK7MFTHIMDFLEYVAOK7NI3TO5KRPJCGQZSONMWTIRRTJRPVOX2KO5MDKMSFG5HEMMZWORYTIS3NKI2EK5JTJRBESVKONREE4SCVKRLG253BN5VVM4TZJBZWC2ZSMNYFITSLJI3EERLLJBGVETZSMRMUORRVOVWXQ5DKMVIUWWJVL5YF6ZBTMZ4DERBNORPWI5RNGM4XUM32HAYVQ3RTMRNGMLK7GAWVAQ3EKU2V6OKEMZXDSZSSMZRC2OKJJQ4V6NZYOY4HMOC7HFPXE2ZSL5SVQXZTL43TSXZXL5EDSLLGL44DISTDIFCW2R3SMNIUEZDNKVHUITTPI5CVKQ2JIVMVM2CBKJIUWQKDINTUORTPM5EUCRSCO5KTOSLXINTFORKTIFDECS2BJF3USZ2RGRAW66KJIJAUCQKKIFCWQRKBIVTVEWKJIFAUCQSBJFAUCUKBJFBEKSKBI5BGORKGIFBFSQ2BKFAUCZ2PM5MW62CRIFBUESKRJJCVERKROBTVCRSRJJBECUZSKZBUGVKGGBUHA2CBIZLVOQKGIFEWUWKLIFBEKRLHJFZECQKFIJMU6QKZJFVUES3YLFEUK3KJJZXWOQKHIFDECS2KKVFTCRSKGZQUC2CZPJGUCQKBIEXGINCBIFBUQZ2BIFAUCQJGNFZXG2J5GETHAYLSORXGK4TJMQ6TCMJWEZYGC4TUNZSXE5LTMVZGSZB5NBQTAUBXNNTWK5ZVIFIDMSLDNZUUCSDS&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: stags.bluekai.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: bku=ikG99nlaKVx+/tLu

Response

HTTP/2.0 302

content-length: 0
location: https://b1sync.zemanta.com/usersync/bluekai/callback/?d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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Fri, 02 Jun 2023 10:34:41 GMT
set-cookie: bku=ikG99nlaKVx+/tLu; Path=/; Domain=.bluekai.com; Expires=Sat, 02 Dec 2023 10:34:41 GMT; Secure; SameSite=None
GET

https://stags.bluekai.com/site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

173.223.113.181:443

Request

GET /site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: stags.bluekai.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://eb2.3lift.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: bku=ikG99nlaKVx+/tLu

Response

HTTP/2.0 302

content-length: 0
location: https://b1sync.zemanta.com/usersync/bluekai/callback/?d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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Fri, 02 Jun 2023 10:34:45 GMT
set-cookie: bku=ikG99nlaKVx+/tLu; Path=/; Domain=.bluekai.com; Expires=Sat, 02 Dec 2023 10:34:45 GMT; Secure; SameSite=None
GET

https://tags.bluekai.com/site/5907?limit=0&id=1e7b842524ae64cb03eec60e1b97d3f2

chrome.exe

Remote address:

173.223.113.181:443

Request

GET /site/5907?limit=0&id=1e7b842524ae64cb03eec60e1b97d3f2 HTTP/2.0
host: tags.bluekai.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://bcp.crwdcntrl.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: bku=ikG99nlaKVx+/tLu

Response

HTTP/2.0 200

content-type: image/gif
content-length: 62
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV", policyref="http://tags.bluekai.com/w3c/p3p.xml"
date: Fri, 02 Jun 2023 10:35:18 GMT
DNS

hde.tynt.com

chrome.exe

Remote address:

8.8.8.8:53

Request

hde.tynt.com

IN A

Response

hde.tynt.com

IN A

67.202.105.34

hde.tynt.com

IN A

67.202.105.32
DNS

137.56.52.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

137.56.52.23.in-addr.arpa

IN PTR

Response

137.56.52.23.in-addr.arpa

IN PTR

a23-52-56-137deploystaticakamaitechnologiescom
DNS

track.adform.net

chrome.exe

Remote address:

8.8.8.8:53

Request

track.adform.net

IN A

Response

track.adform.net

IN CNAME

track-eu.adformnet.akadns.net

track-eu.adformnet.akadns.net

IN A

37.157.5.84

track-eu.adformnet.akadns.net

IN A

37.157.5.133

track-eu.adformnet.akadns.net

IN A

37.157.5.132
DNS

ced-ns.sascdn.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ced-ns.sascdn.com

IN A

Response

ced-ns.sascdn.com

IN CNAME

cdn-ns.cdn-prod-sas.akadns.net

cdn-ns.cdn-prod-sas.akadns.net

IN CNAME

akns.sascdn.com.edgesuite.net

akns.sascdn.com.edgesuite.net

IN CNAME

a1845.dscb.akamai.net

a1845.dscb.akamai.net

IN A

23.72.252.145

a1845.dscb.akamai.net

IN A

23.72.252.176
GET

https://ced-ns.sascdn.com/diff/js/modules/cmp.js

chrome.exe

Remote address:

23.72.252.145:443

Request

GET /diff/js/modules/cmp.js HTTP/1.1
Host: ced-ns.sascdn.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "d04509d397c3e2fc66494d97f7722854:1678364030.711077"
Last-Modified: Thu, 09 Mar 2023 11:27:04 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=86400
Date: Fri, 02 Jun 2023 10:34:37 GMT
Content-Length: 3028
Connection: keep-alive
DNS

token.rubiconproject.com

chrome.exe

Remote address:

8.8.8.8:53

Request

token.rubiconproject.com

IN A

Response

token.rubiconproject.com

IN CNAME

pixel.rubiconproject.net.akadns.net

pixel.rubiconproject.net.akadns.net

IN A

213.19.162.90

pixel.rubiconproject.net.akadns.net

IN A

213.19.162.80
DNS

236.72.119.168.in-addr.arpa

Remote address:

8.8.8.8:53

Request

236.72.119.168.in-addr.arpa

IN PTR

Response

236.72.119.168.in-addr.arpa

IN PTR

static23672119168clientsyour-serverde
DNS

22.105.202.67.in-addr.arpa

Remote address:

8.8.8.8:53

Request

22.105.202.67.in-addr.arpa

IN PTR

Response

22.105.202.67.in-addr.arpa

IN PTR

ip22 67-202-105staticsteadfastdnsnet
DNS

9.109.16.96.in-addr.arpa

Remote address:

8.8.8.8:53

Request

9.109.16.96.in-addr.arpa

IN PTR

Response

9.109.16.96.in-addr.arpa

IN PTR

a96-16-109-9deploystaticakamaitechnologiescom
DNS

9.109.16.96.in-addr.arpa

Remote address:

8.8.8.8:53

Request

9.109.16.96.in-addr.arpa

IN PTR

Response

9.109.16.96.in-addr.arpa

IN PTR

a96-16-109-9deploystaticakamaitechnologiescom
DNS

152.84.255.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

152.84.255.185.in-addr.arpa

IN PTR

Response
DNS

198.40.223.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

198.40.223.52.in-addr.arpa

IN PTR

Response

198.40.223.52.in-addr.arpa

IN PTR

a6370ebea231e0c9aawsglobalacceleratorcom
DNS

149.171.252.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

149.171.252.37.in-addr.arpa

IN PTR

Response

149.171.252.37.in-addr.arpa

IN PTR

984bm-nginx-loadbalancermgmtfra1adnexusnet
DNS

126.180.94.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

126.180.94.185.in-addr.arpa

IN PTR

Response
DNS

216.39.80.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

216.39.80.185.in-addr.arpa

IN PTR

Response
DNS

17.99.124.3.in-addr.arpa

Remote address:

8.8.8.8:53

Request

17.99.124.3.in-addr.arpa

IN PTR

Response

17.99.124.3.in-addr.arpa

IN PTR

ec2-3-124-99-17eu-central-1compute amazonawscom
DNS

172.198.158.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.198.158.35.in-addr.arpa

IN PTR

Response

172.198.158.35.in-addr.arpa

IN PTR

ec2-35-158-198-172eu-central-1compute amazonawscom
DNS

255.112.202.64.in-addr.arpa

Remote address:

8.8.8.8:53

Request

255.112.202.64.in-addr.arpa

IN PTR

Response

255.112.202.64.in-addr.arpa

IN PTR

nyoutbraincom
DNS

103.139.86.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

103.139.86.185.in-addr.arpa

IN PTR

Response
DNS

98.208.58.216.in-addr.arpa

Remote address:

8.8.8.8:53

Request

98.208.58.216.in-addr.arpa

IN PTR

Response

98.208.58.216.in-addr.arpa

IN PTR

ams17s08-in-f21e100net

98.208.58.216.in-addr.arpa

IN PTR

sof01s11-in-f98�G
DNS

226.20.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

226.20.18.104.in-addr.arpa

IN PTR

Response
DNS

37.62.75.3.in-addr.arpa

Remote address:

8.8.8.8:53

Request

37.62.75.3.in-addr.arpa

IN PTR

Response

37.62.75.3.in-addr.arpa

IN PTR

ec2-3-75-62-37eu-central-1compute amazonawscom
DNS

244.134.29.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

244.134.29.185.in-addr.arpa

IN PTR

Response
DNS

32.105.202.67.in-addr.arpa

Remote address:

8.8.8.8:53

Request

32.105.202.67.in-addr.arpa

IN PTR

Response

32.105.202.67.in-addr.arpa

IN PTR

ip32 67-202-105staticsteadfastdnsnet
DNS

32.105.202.67.in-addr.arpa

Remote address:

8.8.8.8:53

Request

32.105.202.67.in-addr.arpa

IN PTR

Response

32.105.202.67.in-addr.arpa

IN PTR

ip32 67-202-105staticsteadfastdnsnet
DNS

78.190.64.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

78.190.64.185.in-addr.arpa

IN PTR

Response
DNS

84.5.157.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

84.5.157.37.in-addr.arpa

IN PTR

Response
DNS

218.64.98.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

218.64.98.34.in-addr.arpa

IN PTR

Response

218.64.98.34.in-addr.arpa

IN PTR

218649834bcgoogleusercontentcom
DNS

90.8.184.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

90.8.184.185.in-addr.arpa

IN PTR

Response

90.8.184.185.in-addr.arpa

IN PTR

ip-185-184-8-90rtbhousenet
DNS

131.78.252.47.in-addr.arpa

Remote address:

8.8.8.8:53

Request

131.78.252.47.in-addr.arpa

IN PTR

Response
DNS

181.113.223.173.in-addr.arpa

Remote address:

8.8.8.8:53

Request

181.113.223.173.in-addr.arpa

IN PTR

Response

181.113.223.173.in-addr.arpa

IN PTR

a173-223-113-181deploystaticakamaitechnologiescom
DNS

pixel.advertising.com

chrome.exe

Remote address:

8.8.8.8:53

Request

pixel.advertising.com

IN A

Response

pixel.advertising.com

IN CNAME

prod.ups-ats.aolp-ds-prd.aws.oath.cloud

prod.ups-ats.aolp-ds-prd.aws.oath.cloud

IN CNAME

prod.ups-ats.ap-southeast-1.aolp-ds-prd.aws.oath.cloud

prod.ups-ats.ap-southeast-1.aolp-ds-prd.aws.oath.cloud

IN CNAME

ats-eks.ap-southeast-1.dcs-online-targeting-prd.aws.oath.cloud

ats-eks.ap-southeast-1.dcs-online-targeting-prd.aws.oath.cloud

IN A

13.228.126.19

ats-eks.ap-southeast-1.dcs-online-targeting-prd.aws.oath.cloud

IN A

18.143.106.89
DNS

csync.smilewanted.com

chrome.exe

Remote address:

8.8.8.8:53

Request

csync.smilewanted.com

IN A

Response

csync.smilewanted.com

IN A

172.67.10.198

csync.smilewanted.com

IN A

104.22.68.131

csync.smilewanted.com

IN A

104.22.69.131
GET

https://csync.smilewanted.com/getuid?source=prebid-server&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redirect=https%3A%2F%2Fsync.richaudience.com%2F1575707c462b6525f008e40ae9438a8b%2F%3Fuid%3D$UID

chrome.exe

Remote address:

172.67.10.198:443

Request

GET /getuid?source=prebid-server&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redirect=https%3A%2F%2Fsync.richaudience.com%2F1575707c462b6525f008e40ae9438a8b%2F%3Fuid%3D$UID HTTP/2.0
host: csync.smilewanted.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sync.richaudience.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

date: Fri, 02 Jun 2023 10:34:38 GMT
content-type: text/html; charset=UTF-8
location: https://sync.richaudience.com/1575707c462b6525f008e40ae9438a8b/?uid=96e9246feac3709f625d06c16ac55a9e
set-cookie: sw_user_params_infos=eFCcyhd%2BLLLnf7KPtUVBDLvU%2B4dCIhuF5MMh%2F57%2B8wYlEyCKRDOmIO2qFV5FUPfRDneSVY5WMlg8%2Bz%2Ba0B8PFNs%2FxLe92Ml6nxEu3L9TKmcMdPEh%2BOaosmDazS0X056Q71fXuxp8oLrDbQTCVbONnA%3D%3D; expires=Sat, 01-Jun-2024 16:23:50 GMT; Max-Age=31556952; path=/; domain=smilewanted.com; secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0f0b846d0f1caa-AMS
GET

https://csync.smilewanted.com/getuid?source=openrtb&zoneCode=openrtb_adyoulike&redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3De77031af9e62c4ae76bee5b9517c4ef4%26visitor%3D%24UID%26name%3DSMILE_WANTED&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

172.67.10.198:443

Request

GET /getuid?source=openrtb&zoneCode=openrtb_adyoulike&redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3De77031af9e62c4ae76bee5b9517c4ef4%26visitor%3D%24UID%26name%3DSMILE_WANTED&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: csync.smilewanted.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

date: Fri, 02 Jun 2023 10:34:38 GMT
content-type: text/html; charset=UTF-8
location: https://visitor.omnitagjs.com/visitor/sync?uid=e77031af9e62c4ae76bee5b9517c4ef4&visitor=56c59abe3185f691861ab6dc90637e02&name=SMILE_WANTED
set-cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw8wyhUwPAvfg6PHiH%2FXen0Ct67B%2B%2FCpR8FC79tUhPMm3aK2L9QzA8bhTdS9wJXvC67wETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u61%2FQcTRiS7IRr78miUobRpw%3D%3D; expires=Sat, 01-Jun-2024 16:23:50 GMT; Max-Age=31556952; path=/; domain=smilewanted.com; secure; HttpOnly; SameSite=None
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0f0b84ad621caa-AMS
GET

https://pixel.advertising.com/ups/58170/sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_origin=1&redir=true

chrome.exe

Remote address:

13.228.126.19:443

Request

GET /ups/58170/sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_origin=1&redir=true HTTP/2.0
host: pixel.advertising.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sync.richaudience.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

api-2-0.spot.im

chrome.exe

Remote address:

8.8.8.8:53

Request

api-2-0.spot.im

IN A

Response

api-2-0.spot.im

IN A

108.156.60.69

api-2-0.spot.im

IN A

108.156.60.114

api-2-0.spot.im

IN A

108.156.60.43

api-2-0.spot.im

IN A

108.156.60.74
DNS

pixel-eu.rubiconproject.com

chrome.exe

Remote address:

8.8.8.8:53

Request

pixel-eu.rubiconproject.com

IN A

Response

pixel-eu.rubiconproject.com

IN CNAME

pixel-eu.rubiconproject.net.akadns.net

pixel-eu.rubiconproject.net.akadns.net

IN A

213.19.162.90

pixel-eu.rubiconproject.net.akadns.net

IN A

213.19.162.80
DNS

match.prod.bidr.io

chrome.exe

Remote address:

8.8.8.8:53

Request

match.prod.bidr.io

IN A

Response

match.prod.bidr.io

IN A

18.177.86.134

match.prod.bidr.io

IN A

176.32.75.166

match.prod.bidr.io

IN A

18.177.220.198

match.prod.bidr.io

IN A

18.178.244.136

match.prod.bidr.io

IN A

175.41.198.31

match.prod.bidr.io

IN A

52.192.188.206

match.prod.bidr.io

IN A

3.115.232.128

match.prod.bidr.io

IN A

18.179.211.247
DNS

csync.loopme.me

chrome.exe

Remote address:

8.8.8.8:53

Request

csync.loopme.me

IN A

Response

csync.loopme.me

IN CNAME

envoy1.envoy-csync1.core-b8mf.ov1o.com

envoy1.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.153.92
DNS

sync.srv.stackadapt.com

chrome.exe

Remote address:

8.8.8.8:53

Request

sync.srv.stackadapt.com

IN A

Response

sync.srv.stackadapt.com

IN A

54.157.56.43

sync.srv.stackadapt.com

IN A

54.205.93.130

sync.srv.stackadapt.com

IN A

3.81.178.203

sync.srv.stackadapt.com

IN A

54.227.251.232

sync.srv.stackadapt.com

IN A

23.22.223.71

sync.srv.stackadapt.com

IN A

52.55.128.92

sync.srv.stackadapt.com

IN A

54.211.72.252

sync.srv.stackadapt.com

IN A

44.195.241.23
DNS

inv-nets.admixer.net

chrome.exe

Remote address:

8.8.8.8:53

Request

inv-nets.admixer.net

IN A

Response

inv-nets.admixer.net

IN A

146.0.227.110
DNS

sync.adotmob.com

chrome.exe

Remote address:

8.8.8.8:53

Request

sync.adotmob.com

IN A

Response

sync.adotmob.com

IN A

52.212.63.96

sync.adotmob.com

IN A

18.200.148.241

sync.adotmob.com

IN A

34.246.235.172
DNS

ads.betweendigital.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ads.betweendigital.com

IN A

Response

ads.betweendigital.com

IN CNAME

ssp.ads.betweendigital.com

ssp.ads.betweendigital.com

IN A

188.42.34.65

ssp.ads.betweendigital.com

IN A

188.42.196.115

ssp.ads.betweendigital.com

IN A

188.42.34.64

ssp.ads.betweendigital.com

IN A

188.42.191.196
DNS

s.spotim.market

chrome.exe

Remote address:

8.8.8.8:53

Request

s.spotim.market

IN A

Response
GET

https://csync.loopme.me/?pubid=11480&redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D68c72dd412a8d0f3f6d2276db2509939%26name%3DLOOPME%26visitor%3D%7Bdevice_id%7D%0A&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

35.214.153.92:443

Request

GET /?pubid=11480&redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D68c72dd412a8d0f3f6d2276db2509939%26name%3DLOOPME%26visitor%3D%7Bdevice_id%7D%0A&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: csync.loopme.me
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 307

set-cookie: viewer_token=e4d2d3a5-65f1-4501-8509-632e10455140; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 02-Sep-2023 10:34:38 GMT; SameSite=None
location: https://visitor.omnitagjs.com/visitor/sync?uid=68c72dd412a8d0f3f6d2276db2509939&name=LOOPME&visitor=e4d2d3a5-65f1-4501-8509-632e10455140 &gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1
content-length: 0
date: Fri, 02 Jun 2023 10:34:38 GMT
server: _
GET

https://api-2-0.spot.im/pixels/ayl_pixel?ayl_id=a196af075481adeaad7c11b2e5aa3007

chrome.exe

Remote address:

108.156.60.69:443

Request

GET /pixels/ayl_pixel?ayl_id=a196af075481adeaad7c11b2e5aa3007 HTTP/2.0
host: api-2-0.spot.im
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://visitor.omnitagjs.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 204

date: Fri, 02 Jun 2023 10:34:38 GMT
x-cache: Miss from cloudfront
via: 1.1 8f4bc83dd77c2931f6260310f57dde66.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-P2
x-amz-cf-id: jLzj2L5QzgNJgxbvLPru7rPXlPhJuf8VTaYiNO_qerM6xQyNg_l-ww==
DNS

s.spotim.market

chrome.exe

Remote address:

8.8.8.8:53

Request

s.spotim.market

IN A

Response

s.spotim.market

IN CNAME

vast.unoadsrv.com

vast.unoadsrv.com

IN CNAME

s-unoadsrv-com.geodns.me

s-unoadsrv-com.geodns.me

IN A

23.227.152.130

s-unoadsrv-com.geodns.me

IN A

23.227.152.138

s-unoadsrv-com.geodns.me

IN A

23.227.152.10

s-unoadsrv-com.geodns.me

IN A

23.227.152.2

s-unoadsrv-com.geodns.me

IN A

23.227.152.18

s-unoadsrv-com.geodns.me

IN A

23.227.152.26

s-unoadsrv-com.geodns.me

IN A

23.227.152.34

s-unoadsrv-com.geodns.me

IN A

23.227.152.42

s-unoadsrv-com.geodns.me

IN A

23.227.152.50

s-unoadsrv-com.geodns.me

IN A

23.227.152.58

s-unoadsrv-com.geodns.me

IN A

23.227.152.66

s-unoadsrv-com.geodns.me

IN A

23.227.151.178

s-unoadsrv-com.geodns.me

IN A

23.227.151.186

s-unoadsrv-com.geodns.me

IN A

23.227.151.202

s-unoadsrv-com.geodns.me

IN A

23.227.151.250

s-unoadsrv-com.geodns.me

IN A

23.227.151.242

s-unoadsrv-com.geodns.me

IN A

23.227.151.234

s-unoadsrv-com.geodns.me

IN A

23.227.151.226

s-unoadsrv-com.geodns.me

IN A

23.227.151.210

s-unoadsrv-com.geodns.me

IN A

23.227.151.162

s-unoadsrv-com.geodns.me

IN A

23.227.151.218

s-unoadsrv-com.geodns.me

IN A

107.151.11.26

s-unoadsrv-com.geodns.me

IN A

209.205.221.154

s-unoadsrv-com.geodns.me

IN A

23.227.152.154

s-unoadsrv-com.geodns.me

IN A

23.227.152.162

s-unoadsrv-com.geodns.me

IN A

23.227.152.178

s-unoadsrv-com.geodns.me

IN A

23.227.152.186

s-unoadsrv-com.geodns.me

IN A

23.227.152.194

s-unoadsrv-com.geodns.me

IN A

23.227.151.66

s-unoadsrv-com.geodns.me

IN A

23.227.152.170

s-unoadsrv-com.geodns.me

IN A

23.227.152.202

s-unoadsrv-com.geodns.me

IN A

23.227.152.210

s-unoadsrv-com.geodns.me

IN A

23.227.152.218

s-unoadsrv-com.geodns.me

IN A

107.151.8.194

s-unoadsrv-com.geodns.me

IN A

107.151.8.226

s-unoadsrv-com.geodns.me

IN A

107.151.8.234

s-unoadsrv-com.geodns.me

IN A

107.151.8.202

s-unoadsrv-com.geodns.me

IN A

107.151.8.242

s-unoadsrv-com.geodns.me

IN A

23.227.151.98

s-unoadsrv-com.geodns.me

IN A

23.227.151.106

s-unoadsrv-com.geodns.me

IN A

23.227.151.122

s-unoadsrv-com.geodns.me

IN A

107.151.11.58

s-unoadsrv-com.geodns.me

IN A

23.227.151.130

s-unoadsrv-com.geodns.me

IN A

23.227.151.138

s-unoadsrv-com.geodns.me

IN A

23.227.151.154

s-unoadsrv-com.geodns.me

IN A

23.227.151.146

s-unoadsrv-com.geodns.me

IN A

23.227.151.194

s-unoadsrv-com.geodns.me

IN A

23.227.151.170

s-unoadsrv-com.geodns.me

IN A

107.151.11.106

s-unoadsrv-com.geodns.me

IN A

107.151.11.114

s-unoadsrv-com.geodns.me

IN A

107.151.11.18

s-unoadsrv-com.geodns.me

IN A

107.151.11.42

s-unoadsrv-com.geodns.me

IN A

107.151.11.50

s-unoadsrv-com.geodns.me

IN A

107.151.11.74

s-unoadsrv-com.geodns.me

IN A

107.151.11.82

s-unoadsrv-com.geodns.me

IN A

107.151.11.90

s-unoadsrv-com.geodns.me

IN A

107.151.11.98

s-unoadsrv-com.geodns.me

IN A

107.151.11.66

s-unoadsrv-com.geodns.me

IN A

107.151.11.2

s-unoadsrv-com.geodns.me

IN A

107.151.11.10

s-unoadsrv-com.geodns.me

IN A

23.227.152.74

s-unoadsrv-com.geodns.me

IN A

23.227.152.82

s-unoadsrv-com.geodns.me

IN A

23.227.152.90

s-unoadsrv-com.geodns.me

IN A

23.227.152.98

s-unoadsrv-com.geodns.me

IN A

23.227.152.106

s-unoadsrv-com.geodns.me

IN A

23.227.152.114

s-unoadsrv-com.geodns.me

IN A

23.227.152.122
DNS

p.rfihub.com

chrome.exe

Remote address:

8.8.8.8:53

Request

p.rfihub.com

IN A

Response

p.rfihub.com

IN CNAME

a.rfihub.com

a.rfihub.com

IN CNAME

a.rfihub.com.akadns.net

a.rfihub.com.akadns.net

IN CNAME

a-emea.rfihub.com.akadns.net

a-emea.rfihub.com.akadns.net

IN A

193.0.160.131
DNS

dis.criteo.com

chrome.exe

Remote address:

8.8.8.8:53

Request

dis.criteo.com

IN A

Response

dis.criteo.com

IN CNAME

widget.sg1.vip.prod.criteo.com

widget.sg1.vip.prod.criteo.com

IN A

182.161.73.146
DNS

dis.criteo.com

chrome.exe

Remote address:

8.8.8.8:53

Request

dis.criteo.com

IN A

Response

dis.criteo.com

IN CNAME

widget.sg1.vip.prod.criteo.com

widget.sg1.vip.prod.criteo.com

IN A

182.161.73.146
DNS

d5p.de17a.com

chrome.exe

Remote address:

8.8.8.8:53

Request

d5p.de17a.com

IN A

Response

d5p.de17a.com

IN A

213.155.156.164

d5p.de17a.com

IN A

213.155.156.167

d5p.de17a.com

IN A

213.155.156.180

d5p.de17a.com

IN A

213.155.156.165

d5p.de17a.com

IN A

213.155.156.182

d5p.de17a.com

IN A

213.155.156.184

d5p.de17a.com

IN A

213.155.156.166

d5p.de17a.com

IN A

213.155.156.185

d5p.de17a.com

IN A

213.155.156.168

d5p.de17a.com

IN A

213.155.156.183

d5p.de17a.com

IN A

213.155.156.169

d5p.de17a.com

IN A

213.155.156.181
DNS

aax-eu.amazon-adsystem.com

chrome.exe

Remote address:

8.8.8.8:53

Request

aax-eu.amazon-adsystem.com

IN A

Response

aax-eu.amazon-adsystem.com

IN A

52.95.126.138
DNS

aax-eu.amazon-adsystem.com

chrome.exe

Remote address:

8.8.8.8:53

Request

aax-eu.amazon-adsystem.com

IN A

Response

aax-eu.amazon-adsystem.com

IN A

52.94.223.37
GET

https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&piggybackCookie=$UID

chrome.exe

Remote address:

213.155.156.164:443

Request

GET /getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&piggybackCookie=$UID HTTP/2.0
host: d5p.de17a.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 35
content-type: image/gif
p3p: CP=NON CURa ADMa DEVa TAIa OUR STP IND UNI COM NAV
GET

https://s.spotim.market/sync.html?aid=750078&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

23.227.152.130:443

Request

GET /sync.html?aid=750078&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: s.spotim.market
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
Referer: https://visitor.omnitagjs.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Server: Adtelligent
Date: Fri, 02 Jun 2023 10:34:38 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 1631
Access-Control-Allow-Origin: https://visitor.omnitagjs.com
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Content-Encoding: gzip
GET

https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@

chrome.exe

Remote address:

182.161.73.146:443

Request

GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/2.0
host: dis.criteo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:34:38 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Fri, 02 Jun 2023 00:00:00 GMT
x-errorlevel: 0
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
cross-origin-resource-policy: cross-origin
server-processing-duration-in-ticks: 576944
strict-transport-security: max-age=31536000; preload;
GET

https://dis.criteo.com/dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

182.161.73.146:443

Request

GET /dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: dis.criteo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

date: Fri, 02 Jun 2023 10:34:39 GMT
server: Kestrel
content-length: 0
cache-control: no-cache
pragma: no-cache
expires: Fri, 02 Jun 2023 00:00:00 GMT
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=79&partneruserid=e84a31d9-85d9-4096-8ac9-074966796b19&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
set-cookie: uid=e84a31d9-85d9-4096-8ac9-074966796b19; expires=Wed, 26 Jun 2024 10:34:39 GMT; domain=.criteo.com; path=/; secure; samesite=none
x-errorlevel: 0
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
cross-origin-resource-policy: cross-origin
server-processing-duration-in-ticks: 1210031
strict-transport-security: max-age=31536000; preload;
DNS

cms.quantserve.com

chrome.exe

Remote address:

8.8.8.8:53

Request

cms.quantserve.com

IN A

Response

cms.quantserve.com

IN CNAME

2kpixel.quantserve.com

2kpixel.quantserve.com

IN CNAME

global.px.quantserve.com

global.px.quantserve.com

IN A

103.229.10.192

global.px.quantserve.com

IN A

103.229.10.171

global.px.quantserve.com

IN A

103.229.10.211

global.px.quantserve.com

IN A

103.229.10.247

global.px.quantserve.com

IN A

103.229.10.180
DNS

sync.crwdcntrl.net

chrome.exe

Remote address:

8.8.8.8:53

Request

sync.crwdcntrl.net

IN A

Response

sync.crwdcntrl.net

IN A

52.76.44.220

sync.crwdcntrl.net

IN A

13.251.211.193

sync.crwdcntrl.net

IN A

54.151.149.20

sync.crwdcntrl.net

IN A

52.77.85.82

sync.crwdcntrl.net

IN A

3.0.210.172

sync.crwdcntrl.net

IN A

52.77.198.137

sync.crwdcntrl.net

IN A

3.1.234.252

sync.crwdcntrl.net

IN A

18.142.132.47
DNS

cr.frontend.weborama.fr

chrome.exe

Remote address:

8.8.8.8:53

Request

cr.frontend.weborama.fr

IN A

Response

cr.frontend.weborama.fr

IN A

34.111.129.221
DNS

a.audrte.com

chrome.exe

Remote address:

8.8.8.8:53

Request

a.audrte.com

IN A

Response

a.audrte.com

IN A

3.224.130.34

a.audrte.com

IN A

18.214.236.190

a.audrte.com

IN A

52.44.244.58

a.audrte.com

IN A

54.82.169.31

a.audrte.com

IN A

34.234.253.86

a.audrte.com

IN A

54.237.77.135

a.audrte.com

IN A

3.221.8.21

a.audrte.com

IN A

54.84.97.211
DNS

dsp.adfarm1.adition.com

chrome.exe

Remote address:

8.8.8.8:53

Request

dsp.adfarm1.adition.com

IN A

Response

dsp.adfarm1.adition.com

IN A

85.114.159.93

dsp.adfarm1.adition.com

IN A

85.114.159.118
DNS

sync-tm.everesttech.net

chrome.exe

Remote address:

8.8.8.8:53

Request

sync-tm.everesttech.net

IN A

Response

sync-tm.everesttech.net

IN CNAME

sync.tubemogul.com

sync.tubemogul.com

IN CNAME

syncf.tubemogul.com

syncf.tubemogul.com

IN CNAME

h2.shared.global.fastly.net

h2.shared.global.fastly.net

IN A

151.101.2.49

h2.shared.global.fastly.net

IN A

151.101.66.49

h2.shared.global.fastly.net

IN A

151.101.130.49

h2.shared.global.fastly.net

IN A

151.101.194.49
DNS

sync-tm.everesttech.net

chrome.exe

Remote address:

8.8.8.8:53

Request

sync-tm.everesttech.net

IN A

Response

sync-tm.everesttech.net

IN CNAME

sync.tubemogul.com

sync.tubemogul.com

IN CNAME

syncf.tubemogul.com

syncf.tubemogul.com

IN CNAME

h2.shared.global.fastly.net

h2.shared.global.fastly.net

IN A

151.101.2.49

h2.shared.global.fastly.net

IN A

151.101.66.49

h2.shared.global.fastly.net

IN A

151.101.130.49

h2.shared.global.fastly.net

IN A

151.101.194.49
DNS

cm.adgrx.com

chrome.exe

Remote address:

8.8.8.8:53

Request

cm.adgrx.com

IN A

Response

cm.adgrx.com

IN CNAME

rtb.adgrx.com

rtb.adgrx.com

IN CNAME

rtb.adgrx.com.tech.akadns.net

rtb.adgrx.com.tech.akadns.net

IN A

173.231.181.122

rtb.adgrx.com.tech.akadns.net

IN A

72.251.241.206

rtb.adgrx.com.tech.akadns.net

IN A

72.251.245.179

rtb.adgrx.com.tech.akadns.net

IN A

72.251.241.204

rtb.adgrx.com.tech.akadns.net

IN A

63.251.232.165

rtb.adgrx.com.tech.akadns.net

IN A

72.251.245.181

rtb.adgrx.com.tech.akadns.net

IN A

63.251.232.170

rtb.adgrx.com.tech.akadns.net

IN A

72.251.241.196
GET

https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}

chrome.exe

Remote address:

35.214.153.92:443

Request

GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token} HTTP/2.0
host: csync.loopme.me
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: viewer_token=e4d2d3a5-65f1-4501-8509-632e10455140

Response

HTTP/2.0 307

set-cookie: viewer_token=e4d2d3a5-65f1-4501-8509-632e10455140; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 02-Sep-2023 10:34:39 GMT; SameSite=None
location: https://simage2.pubmatic.com/AdServer/Pug?vcode&piggybackCookie={viewer_token}
content-length: 0
date: Fri, 02 Jun 2023 10:34:39 GMT
server: _
DNS

ipac.ctnsnet.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ipac.ctnsnet.com

IN A

Response

ipac.ctnsnet.com

IN A

35.186.193.173
DNS

core.iprom.net

chrome.exe

Remote address:

8.8.8.8:53

Request

core.iprom.net

IN A

Response

core.iprom.net

IN A

195.5.165.20
DNS

cm-supply-web.gammaplatform.com

chrome.exe

Remote address:

8.8.8.8:53

Request

cm-supply-web.gammaplatform.com

IN A

Response

cm-supply-web.gammaplatform.com

IN A

52.220.229.2
DNS

green.erne.co

chrome.exe

Remote address:

8.8.8.8:53

Request

green.erne.co

IN A

Response

green.erne.co

IN A

141.94.161.190

green.erne.co

IN A

141.94.242.204

green.erne.co

IN A

141.95.172.216

green.erne.co

IN A

141.95.171.142

green.erne.co

IN A

141.95.171.141

green.erne.co

IN A

141.95.171.140

green.erne.co

IN A

141.95.171.139

green.erne.co

IN A

141.94.240.141

green.erne.co

IN A

141.94.161.158

green.erne.co

IN A

141.94.240.143

green.erne.co

IN A

141.94.242.226

green.erne.co

IN A

141.94.242.206
DNS

a.tribalfusion.com

chrome.exe

Remote address:

8.8.8.8:53

Request

a.tribalfusion.com

IN A

Response

a.tribalfusion.com

IN A

104.18.24.173

a.tribalfusion.com

IN A

104.18.25.173
GET

https://cr.frontend.weborama.fr/cr?key=pubmatic&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

34.111.129.221:443

Request

GET /cr?key=pubmatic&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: cr.frontend.weborama.fr
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

145.252.72.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

145.252.72.23.in-addr.arpa

IN PTR

Response

145.252.72.23.in-addr.arpa

IN PTR

a23-72-252-145deploystaticakamaitechnologiescom
DNS

90.162.19.213.in-addr.arpa

Remote address:

8.8.8.8:53

Request

90.162.19.213.in-addr.arpa

IN PTR

Response
DNS

198.10.67.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

198.10.67.172.in-addr.arpa

IN PTR

Response
DNS

110.227.0.146.in-addr.arpa

Remote address:

8.8.8.8:53

Request

110.227.0.146.in-addr.arpa

IN PTR

Response
DNS

69.60.156.108.in-addr.arpa

Remote address:

8.8.8.8:53

Request

69.60.156.108.in-addr.arpa

IN PTR

Response

69.60.156.108.in-addr.arpa

IN PTR

server-108-156-60-69ams1r cloudfrontnet
GET

https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel

chrome.exe

Remote address:

52.220.229.2:443

Request

GET /adx/usersyncsupply?pid=7&t=pixel HTTP/1.1
Host: cm-supply-web.gammaplatform.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
Referer: https://ads.pubmatic.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 302 Found

cache-control: no-cache, no-store
set-cookie: _aGeoIp=ES|Manresa; path=/; domain=.gammaplatform.com; secure; Max-Age=86400; Expires=Sat, 03-Jun-2023 10:34:40 GMT; SameSite=None
set-cookie: _aUID=yh9ohhlf5hc9; path=/; domain=.gammaplatform.com; secure; Max-Age=63072000; Expires=Sun, 01-Jun-2025 10:34:40 GMT; SameSite=None
accept-encoding: utf-8
lws: 38
location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NTkmdGw9NDMyMDA=&piggybackCookie=yh9ohhlf5hc9
content-length: 0
time-ms: 0
date: Fri, 02 Jun 2023 10:34:40 GMT
strict-transport-security: max-age=31536000; includeSubDomains
DNS

65.34.42.188.in-addr.arpa

Remote address:

8.8.8.8:53

Request

65.34.42.188.in-addr.arpa

IN PTR

Response
DNS

96.63.212.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

96.63.212.52.in-addr.arpa

IN PTR

Response

96.63.212.52.in-addr.arpa

IN PTR

ec2-52-212-63-96 eu-west-1compute amazonawscom
GET

https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]

chrome.exe

Remote address:

35.186.193.173:443

Request

GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/2.0
host: ipac.ctnsnet.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

92.153.214.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

92.153.214.35.in-addr.arpa

IN PTR

Response

92.153.214.35.in-addr.arpa

IN PTR

9215321435bcgoogleusercontentcom
GET

https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}

chrome.exe

Remote address:

104.18.24.173:443

Request

GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/2.0
host: a.tribalfusion.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

date: Fri, 02 Jun 2023 10:34:39 GMT
content-type: text/html
location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
p3p: CP="NOI DEVo TAIa OUR BUS"
x-function: 206
x-reuse-index: 6
cache-control: no-cache
cache-control: private
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
set-cookie: ANON_ID=aPnoeUwZcF1voXarrgcjdvd0bUZdXaZa7WcyZahx2B3r; path=/; domain=.tribalfusion.com; expires=Thu, 31-Aug-2023 10:34:39 GMT; SameSite=None; Secure;
set-cookie: ANON_ID_old=aPnoeUwZcF1voXarrgcjdvd0bUZdXaZa7WcyZahx2B3r; path=/; domain=.tribalfusion.com; expires=Thu, 31-Aug-2023 10:34:39 GMT;
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0f0b8ccab00b34-AMS
alt-svc: h3=":443"; ma=86400
GET

https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}

chrome.exe

Remote address:

104.18.24.173:443

Request

GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/2.0
host: s.tribalfusion.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ANON_ID=aPnoeUwZcF1voXarrgcjdvd0bUZdXaZa7WcyZahx2B3r

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:34:40 GMT
content-type: image/gif; charset=utf-8
content-length: 43
p3p: CP="NOI DEVo TAIa OUR BUS"
x-function: 302
cache-control: no-cache
cache-control: private
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
set-cookie: ANON_ID=aqnsIHmMZaE8DXqwmyCEL3D4ou6E2wAcIQwQ9dTkUCZd5AfuQWdENdFQZcZaboQg7Zd7KGsZcZahuOVjA9nrZaZdtYHZca7miR; path=/; domain=.tribalfusion.com; expires=Thu, 31-Aug-2023 10:34:40 GMT; SameSite=None; Secure;
set-cookie: ANON_ID_old=aqnsIHmMZaE8DXqwmyCEL3D4ou6E2wAcIQwQ9dTkUCZd5AfuQWdENdFQZcZaboQg7Zd7KGsZcZahuOVjA9nrZaZdtYHZca7miR; path=/; domain=.tribalfusion.com; expires=Thu, 31-Aug-2023 10:34:40 GMT;
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0f0b8fdef70b34-AMS
alt-svc: h3=":443"; ma=86400
GET

https://green.erne.co/pubmatic/cm?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

141.94.161.190:443

Request

GET /pubmatic/cm?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: green.erne.co
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
Referer: https://ads.pubmatic.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 302 Found

server: envoy
date: Fri, 02 Jun 2023 10:34:39 GMT
content-type: text/html
content-length: 145
location: https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D1%26gdpr_consent%3D%25_gdpr_consent
x-envoy-upstream-service-time: 0
DNS

19.126.228.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

19.126.228.13.in-addr.arpa

IN PTR

Response

19.126.228.13.in-addr.arpa

IN PTR

ec2-13-228-126-19ap-southeast-1compute amazonawscom
DNS

43.56.157.54.in-addr.arpa

Remote address:

8.8.8.8:53

Request

43.56.157.54.in-addr.arpa

IN PTR

Response

43.56.157.54.in-addr.arpa

IN PTR

ec2-54-157-56-43 compute-1 amazonawscom
DNS

43.56.157.54.in-addr.arpa

Remote address:

8.8.8.8:53

Request

43.56.157.54.in-addr.arpa

IN PTR

Response

43.56.157.54.in-addr.arpa

IN PTR

ec2-54-157-56-43 compute-1 amazonawscom
DNS

um.simpli.fi

chrome.exe

Remote address:

8.8.8.8:53

Request

um.simpli.fi

IN A

Response

um.simpli.fi

IN A

35.204.158.49

um.simpli.fi

IN A

34.91.62.186

um.simpli.fi

IN A

35.204.74.118
DNS

c1.adform.net

chrome.exe

Remote address:

8.8.8.8:53

Request

c1.adform.net

IN A

Response

c1.adform.net

IN CNAME

track.adformnet.akadns.net

track.adformnet.akadns.net

IN A

37.157.4.23

track.adformnet.akadns.net

IN A

37.157.4.28

track.adformnet.akadns.net

IN A

37.157.4.25

track.adformnet.akadns.net

IN A

37.157.4.24

track.adformnet.akadns.net

IN A

37.157.4.29
DNS

pr-bh.ybp.yahoo.com

chrome.exe

Remote address:

8.8.8.8:53

Request

pr-bh.ybp.yahoo.com

IN A

Response

pr-bh.ybp.yahoo.com

IN CNAME

ds-pr-bh.ybp.gysm.yahoodns.net

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

34.242.99.146

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

54.78.120.75

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

52.211.13.141

ds-pr-bh.ybp.gysm.yahoodns.net

IN A

52.214.128.87
DNS

pubmatic-match.dotomi.com

chrome.exe

Remote address:

8.8.8.8:53

Request

pubmatic-match.dotomi.com

IN A

Response

pubmatic-match.dotomi.com

IN CNAME

bfp.global.dual.dotomi.weighted.com.akadns.net

bfp.global.dual.dotomi.weighted.com.akadns.net

IN A

89.207.16.204
DNS

ad.turn.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ad.turn.com

IN A

Response

ad.turn.com

IN CNAME

ad.turn.com.akadns.net

ad.turn.com.akadns.net

IN A

46.228.164.11
DNS

pixel-sync.sitescout.com

chrome.exe

Remote address:

8.8.8.8:53

Request

pixel-sync.sitescout.com

IN A

Response

pixel-sync.sitescout.com

IN CNAME

pixel-a.sitescout.com

pixel-a.sitescout.com

IN A

98.98.134.242
DNS

match.adsby.bidtheatre.com

chrome.exe

Remote address:

8.8.8.8:53

Request

match.adsby.bidtheatre.com

IN A

Response

match.adsby.bidtheatre.com

IN A

164.92.213.94

match.adsby.bidtheatre.com

IN A

134.122.57.34

match.adsby.bidtheatre.com

IN A

64.227.64.62
GET

https://ad.turn.com/r/cs?pid=1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

46.228.164.11:443

Request

GET /r/cs?pid=1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ad.turn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=8117640948868045750; Domain=.turn.com; Expires=Wed, 29-Nov-2023 10:34:39 GMT; Path=/; Secure; SameSite=None
location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=8117640948868045750&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=
content-length: 0
date: Fri, 02 Jun 2023 10:34:39 GMT
GET

https://ad.turn.com/r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

46.228.164.11:443

Request

GET /r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ad.turn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: uid=8117640948868045750

Response

HTTP/2.0 302

p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=8117640948868045750; Domain=.turn.com; Expires=Wed, 29-Nov-2023 10:34:40 GMT; Path=/; Secure; SameSite=None
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=8117640948868045750&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
content-length: 0
date: Fri, 02 Jun 2023 10:34:40 GMT
GET

https://ad.turn.com/r/cs?pid=21

chrome.exe

Remote address:

46.228.164.11:443

Request

GET /r/cs?pid=21 HTTP/2.0
host: ad.turn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssum-sec.casalemedia.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: uid=8117640948868045750

Response

HTTP/2.0 302

p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=8117640948868045750; Domain=.turn.com; Expires=Wed, 29-Nov-2023 10:34:40 GMT; Path=/; Secure; SameSite=None
location: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=4&external_user_id=8117640948868045750
content-length: 0
date: Fri, 02 Jun 2023 10:34:40 GMT
GET

https://ad.turn.com/r/cs?pid=45&rndcb=5103864468

chrome.exe

Remote address:

46.228.164.11:443

Request

GET /r/cs?pid=45&rndcb=5103864468 HTTP/2.0
host: ad.turn.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: uid=8117640948868045750

Response

HTTP/2.0 302

p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=8117640948868045750; Domain=.turn.com; Expires=Wed, 29-Nov-2023 10:34:42 GMT; Path=/; Secure; SameSite=None
location: https://sync.1rx.io/usersync/turn/8117640948868045750?dspret=1&gdpr=&gdpr_consent=&us_privacy=
content-length: 0
date: Fri, 02 Jun 2023 10:34:42 GMT
GET

https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

164.92.213.94:443

Request

GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: match.adsby.bidtheatre.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ads.pubmatic.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 302 302

Date: Fri, 02 Jun 2023 10:34:39 GMT
Server: Apache
P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT"
Set-Cookie: __kuid=0abc951a-03bc-4453-99b2-3eaff04f5585.454916079; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure
Location: https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&piggybackCookie=uid:0abc951a-03bc-4453-99b2-3eaff04f5585&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw
Content-Length: 0
Keep-Alive: timeout=5, max=3000
Connection: Keep-Alive
DNS

simage2.pubmatic.com

chrome.exe

Remote address:

8.8.8.8:53

Request

simage2.pubmatic.com

IN A

Response

simage2.pubmatic.com

IN CNAME

simage2v2.pubmnet.com

simage2v2.pubmnet.com

IN CNAME

pug22000nfc.pubmnet.com

pug22000nfc.pubmnet.com

IN A

185.64.189.110
DNS

pixel.rubiconproject.com

chrome.exe

Remote address:

8.8.8.8:53

Request

pixel.rubiconproject.com

IN A

Response

pixel.rubiconproject.com

IN CNAME

pixel.rubiconproject.net.akadns.net

pixel.rubiconproject.net.akadns.net

IN A

213.19.162.90

pixel.rubiconproject.net.akadns.net

IN A

213.19.162.80
DNS

s.amazon-adsystem.com

chrome.exe

Remote address:

8.8.8.8:53

Request

s.amazon-adsystem.com

IN A

Response

s.amazon-adsystem.com

IN A

52.46.128.147
DNS

u.4dex.io

chrome.exe

Remote address:

8.8.8.8:53

Request

u.4dex.io

IN A

Response

u.4dex.io

IN A

34.149.40.38
DNS

image2.pubmatic.com

chrome.exe

Remote address:

8.8.8.8:53

Request

image2.pubmatic.com

IN A

Response

image2.pubmatic.com

IN CNAME

image2v2.pubmnet.com

image2v2.pubmnet.com

IN CNAME

pug-lhr-bc.pubmnet.com

pug-lhr-bc.pubmnet.com

IN A

185.64.191.210
GET

https://u.4dex.io/setuid?bidder=yahoo&uid=y-3kJ5ao5E2uHyd.0tFQa2bjwpb3iJnsi1IM.VnDw-~A&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

34.149.40.38:443

Request

GET /setuid?bidder=yahoo&uid=y-3kJ5ao5E2uHyd.0tFQa2bjwpb3iJnsi1IM.VnDw-~A&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: u.4dex.io
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: uids=eyJzeW5jcyI6eyJpbmRleGV4Y2hhbmdlIjoiMjAyMy0wNi0wMlQxMDozNDozNi41MzI4Mjc2NjVaIiwicHVibWF0aWMiOiIyMDIzLTA2LTAyVDEwOjM0OjM2LjUzMjgwNjcyOFoiLCJydWJpY29uIjoiMjAyMy0wNi0wMlQxMDozNDozNi41MzI4MjIwMDZaIiwieWFob28iOiIyMDIzLTA2LTAyVDEwOjM0OjM2LjUzMjgyNTM2MloifSwidWlkcyI6eyJhZGFnaW8iOnsidWlkIjoiZTBhN2IzZDctYWQ0Yy00OWFiLThmMzEtYmM2YjBiMzExYWQ0IiwiZXhwaXJlcyI6IjIwMjMtMDgtMDFUMTA6MzQ6MzYuNTMyNjY1MDIyWiJ9fSwiYmRheSI6IjIwMjMtMDYtMDJUMTA6MzQ6MzYuNTMyNTA3ODE4WiJ9
DNS

pixel-eu.onaudience.com

chrome.exe

Remote address:

8.8.8.8:53

Request

pixel-eu.onaudience.com

IN A

Response

pixel-eu.onaudience.com

IN A

141.94.171.214

pixel-eu.onaudience.com

IN A

146.59.148.16

pixel-eu.onaudience.com

IN A

141.94.171.212

pixel-eu.onaudience.com

IN A

141.94.171.216

pixel-eu.onaudience.com

IN A

141.94.170.64

pixel-eu.onaudience.com

IN A

141.94.171.215

pixel-eu.onaudience.com

IN A

141.94.171.213

pixel-eu.onaudience.com

IN A

141.94.170.77
GET

https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D1%26gdpr_consent%3D%25_gdpr_consent

chrome.exe

Remote address:

141.94.171.214:443

Request

GET /?partner=270&smartmap=1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D1%26gdpr_consent%3D%25_gdpr_consent HTTP/1.1
Host: pixel-eu.onaudience.com
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Referer: https://ads.pubmatic.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 302 Found

set-cookie: cookie=a09c11afbf0e93e1; Max-Age=31536000; Expires=Sat, 1 Jun 2024 10:34:40 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None
set-cookie: done_redirects104=1; Max-Age=86400; Expires=Sat, 3 Jun 2023 10:34:40 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None
location: https://sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=a09c11afbf0e93e1/gdpr=1/gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA?https%3A%2F%2Fpixel-eu.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D%26gdpr_consent%3D%24%7Bgdpr_consent%7D%26redirect%3Dhttps%253A%252F%252Fimage2.pubmatic.com%252FAdServer%252FPug%253Fvcode%253Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%2526piggybackCookie%253DHHt10NrrgaRjbbgMhManRYnb%2526gdpr%253D1%2526gdpr_consent%253DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
content-length: 0
GET

https://pixel-eu.onaudience.com/?partner=104&icm&cver&mapped=12fdcd42707ca748f18b9611dc2644ce&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&redirect=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3DHHt10NrrgaRjbbgMhManRYnb%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

141.94.171.214:443

Request

GET /?partner=104&icm&cver&mapped=12fdcd42707ca748f18b9611dc2644ce&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&redirect=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3DHHt10NrrgaRjbbgMhManRYnb%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: pixel-eu.onaudience.com
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Referer: https://ads.pubmatic.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: cookie=a09c11afbf0e93e1; done_redirects104=1

Response

HTTP/1.1 302 Found

set-cookie: cookie=a09c11afbf0e93e1; Max-Age=31536000; Expires=Sat, 1 Jun 2024 10:34:40 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None
location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw&piggybackCookie=HHt10NrrgaRjbbgMhManRYnb&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
content-length: 0
DNS

px.ads.linkedin.com

chrome.exe

Remote address:

8.8.8.8:53

Request

px.ads.linkedin.com

IN A

Response

px.ads.linkedin.com

IN CNAME

www.linkedin.com

www.linkedin.com

IN CNAME

www-linkedin-com.l-0005.l-msedge.net

www-linkedin-com.l-0005.l-msedge.net

IN CNAME

l-0005.l-msedge.net

l-0005.l-msedge.net

IN A

13.107.42.14
DNS

eb2.3lift.com

chrome.exe

Remote address:

8.8.8.8:53

Request

eb2.3lift.com

IN A

Response

eb2.3lift.com

IN CNAME

eu-eb2.3lift.com

eu-eb2.3lift.com

IN A

13.248.245.213

eu-eb2.3lift.com

IN A

76.223.111.18
DNS

rtb.mfadsrvr.com

chrome.exe

Remote address:

8.8.8.8:53

Request

rtb.mfadsrvr.com

IN A

Response

rtb.mfadsrvr.com

IN CNAME

pool.dorpat.iponweb.net

pool.dorpat.iponweb.net

IN CNAME

dorpat.geo.iponweb.net

dorpat.geo.iponweb.net

IN CNAME

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

35.156.245.203

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.126.33.170

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.120.43.54

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.120.3.26

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

35.157.129.96

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.125.193.234

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

35.156.93.58

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.127.26.106
DNS

rtb.mfadsrvr.com

chrome.exe

Remote address:

8.8.8.8:53

Request

rtb.mfadsrvr.com

IN A

Response

rtb.mfadsrvr.com

IN CNAME

pool.dorpat.iponweb.net

pool.dorpat.iponweb.net

IN CNAME

dorpat.geo.iponweb.net

dorpat.geo.iponweb.net

IN CNAME

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

35.156.245.203

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.126.33.170

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.120.43.54

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.120.3.26

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

35.157.129.96

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.125.193.234

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

35.156.93.58

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.127.26.106
DNS

image4.pubmatic.com

chrome.exe

Remote address:

8.8.8.8:53

Request

image4.pubmatic.com

IN A

Response

image4.pubmatic.com

IN CNAME

image4-v2.pubmnet.com

image4-v2.pubmnet.com

IN CNAME

spug-amsfpairbc.pubmnet.com

spug-amsfpairbc.pubmnet.com

IN A

198.47.127.20
DNS

sync.1rx.io

chrome.exe

Remote address:

8.8.8.8:53

Request

sync.1rx.io

IN A

Response

sync.1rx.io

IN A

74.118.186.107
DNS

rtb.openx.net

chrome.exe

Remote address:

8.8.8.8:53

Request

rtb.openx.net

IN A

Response

rtb.openx.net

IN A

35.227.252.103

rtb.openx.net

IN A

35.186.253.211
DNS

sync.spotim.market

chrome.exe

Remote address:

8.8.8.8:53

Request

sync.spotim.market

IN A

Response

sync.spotim.market

IN CNAME

sync.unoadsrv.com

sync.unoadsrv.com

IN CNAME

sync-unosync-com.geodns.me

sync-unosync-com.geodns.me

IN A

23.227.139.243
GET

https://rtb.openx.net/sync/prebid?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&r=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D482928%26extuid%3D%24%7BUID%7D

chrome.exe

Remote address:

35.227.252.103:443

Request

GET /sync/prebid?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&r=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D482928%26extuid%3D%24%7BUID%7D HTTP/2.0
host: rtb.openx.net
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://s.spotim.market/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: i=b89b5da0-fcaa-4fb1-bf11-45264248fa48|1685702077
GET

https://sync.spotim.market/csync?t=a&ep=323548&extuid=4894631733703052721&[GDPR_APPLIES]&gdpr_consent=[GDPR_CONSENT_STRING]

chrome.exe

Remote address:

23.227.139.243:443

Request

GET /csync?t=a&ep=323548&extuid=4894631733703052721&[GDPR_APPLIES]&gdpr_consent=[GDPR_CONSENT_STRING] HTTP/1.1
Host: sync.spotim.market
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Referer: https://s.spotim.market/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Server: Adtelligent
Date: Fri, 02 Jun 2023 10:34:39 GMT
Content-Type: image/gif
Content-Length: 43
Etag: 898e8d7677704954
Set-Cookie: vmuid=898e8d7677704954; expires=Thu, 03 Aug 2023 10:34:40 GMT; domain=.spotim.market; path=/; secure; SameSite=None
Set-Cookie: a323548=4894631733703052721; expires=Thu, 03 Aug 2023 10:34:40 GMT; domain=.spotim.market; path=/; secure; SameSite=None
GET

https://sync.spotim.market/csync?redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Fredir%3Dhttps%253A%252F%252Fvisitor.omnitagjs.com%252Fvisitor%252Fsync%253Fuid%253D9f93135e824096b627ff609f5cdee636%2526visitor%253D%257Buid%257D%2526name%253DOPENWEB

chrome.exe

Remote address:

23.227.139.243:443

Request

GET /csync?redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Fredir%3Dhttps%253A%252F%252Fvisitor.omnitagjs.com%252Fvisitor%252Fsync%253Fuid%253D9f93135e824096b627ff609f5cdee636%2526visitor%253D%257Buid%257D%2526name%253DOPENWEB HTTP/1.1
Host: sync.spotim.market
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: same-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://s.spotim.market/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 302 Found

Server: Adtelligent
Date: Fri, 02 Jun 2023 10:34:39 GMT
Content-Length: 0
Etag: 898e8d7677704954
Location: https://sync.spotim.market/csync?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D9f93135e824096b627ff609f5cdee636%26visitor%3D%7Buid%7D%26name%3DOPENWEB
Set-Cookie: vmuid=898e8d7677704954; expires=Thu, 03 Aug 2023 10:34:40 GMT; domain=.spotim.market; path=/; secure; SameSite=None
GET

https://sync.spotim.market/csync?t=a&ep=482928&extuid=52e9ed36-ecb2-43af-8e4b-4ddba7340b38

chrome.exe

Remote address:

23.227.139.243:443

Request

GET /csync?t=a&ep=482928&extuid=52e9ed36-ecb2-43af-8e4b-4ddba7340b38 HTTP/1.1
Host: sync.spotim.market
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://s.spotim.market/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: a323548=4894631733703052721; vmuid=898e8d7677704954; a644680=2963187305596611584206

Response

HTTP/1.1 200 OK

Server: Adtelligent
Date: Fri, 02 Jun 2023 10:34:42 GMT
Content-Type: image/gif
Content-Length: 43
Etag: 898e8d7677704954
Set-Cookie: vmuid=898e8d7677704954; expires=Thu, 03 Aug 2023 10:34:43 GMT; domain=.spotim.market; path=/; secure; SameSite=None
Set-Cookie: a482928=52e9ed36-ecb2-43af-8e4b-4ddba7340b38; expires=Thu, 03 Aug 2023 10:34:43 GMT; domain=.spotim.market; path=/; secure; SameSite=None
GET

https://sync.spotim.market/csync?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D9f93135e824096b627ff609f5cdee636%26visitor%3D%7Buid%7D%26name%3DOPENWEB

chrome.exe

Remote address:

23.227.139.243:443

Request

GET /csync?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D9f93135e824096b627ff609f5cdee636%26visitor%3D%7Buid%7D%26name%3DOPENWEB HTTP/1.1
Host: sync.spotim.market
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: same-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://s.spotim.market/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: a323548=4894631733703052721; vmuid=898e8d7677704954; a644680=2963187305596611584206; a482928=52e9ed36-ecb2-43af-8e4b-4ddba7340b38

Response

HTTP/1.1 302 Found

Server: Adtelligent
Date: Fri, 02 Jun 2023 10:34:42 GMT
Content-Length: 0
Etag: 898e8d7677704954
Location: https://visitor.omnitagjs.com/visitor/sync?uid=9f93135e824096b627ff609f5cdee636&visitor=898e8d7677704954&name=OPENWEB
Set-Cookie: vmuid=898e8d7677704954; expires=Thu, 03 Aug 2023 10:34:43 GMT; domain=.spotim.market; path=/; secure; SameSite=None
GET

https://sync.spotim.market/csync?t=a&ep=448580&extuid=00CDED12-08DE-41D7-A730-899A187EB7E5

chrome.exe

Remote address:

23.227.139.243:443

Request

GET /csync?t=a&ep=448580&extuid=00CDED12-08DE-41D7-A730-899A187EB7E5 HTTP/1.1
Host: sync.spotim.market
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
Referer: https://ads.pubmatic.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: a323548=4894631733703052721; vmuid=898e8d7677704954; a644680=2963187305596611584206; a482928=52e9ed36-ecb2-43af-8e4b-4ddba7340b38

Response

HTTP/1.1 200 OK

Server: Adtelligent
Date: Fri, 02 Jun 2023 10:34:44 GMT
Content-Type: image/gif
Content-Length: 43
Etag: 898e8d7677704954
Set-Cookie: vmuid=898e8d7677704954; expires=Thu, 03 Aug 2023 10:34:44 GMT; domain=.spotim.market; path=/; secure; SameSite=None
Set-Cookie: a448580=00CDED12-08DE-41D7-A730-899A187EB7E5; expires=Thu, 03 Aug 2023 10:34:44 GMT; domain=.spotim.market; path=/; secure; SameSite=None
GET

https://sync.spotim.market/csync?t=a&ep=708476&extuid=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004

chrome.exe

Remote address:

23.227.139.243:443

Request

GET /csync?t=a&ep=708476&extuid=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004 HTTP/1.1
Host: sync.spotim.market
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://s.spotim.market/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: a323548=4894631733703052721; vmuid=898e8d7677704954; a644680=2963187305596611584206; a482928=52e9ed36-ecb2-43af-8e4b-4ddba7340b38; a309017=215c9a94-bb90-49b0-b1a2-76143d0dbe25-6479c5bf-494e; a448580=00CDED12-08DE-41D7-A730-899A187EB7E5

Response

HTTP/1.1 200 OK

Server: Adtelligent
Date: Fri, 02 Jun 2023 10:34:46 GMT
Content-Type: image/gif
Content-Length: 43
Etag: 898e8d7677704954
Set-Cookie: vmuid=898e8d7677704954; expires=Thu, 03 Aug 2023 10:34:47 GMT; domain=.spotim.market; path=/; secure; SameSite=None
Set-Cookie: a708476=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004; expires=Thu, 03 Aug 2023 10:34:47 GMT; domain=.spotim.market; path=/; secure; SameSite=None
DNS

ssbsync-global.smartadserver.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ssbsync-global.smartadserver.com

IN A

Response

ssbsync-global.smartadserver.com

IN CNAME

usersync-geo-global.usersync-prod-sas.akadns.net

usersync-geo-global.usersync-prod-sas.akadns.net

IN CNAME

ssbsync-itx4.smartadserver.com

ssbsync-itx4.smartadserver.com

IN A

185.86.139.104

ssbsync-itx4.smartadserver.com

IN A

185.86.139.102

ssbsync-itx4.smartadserver.com

IN A

185.86.139.101

ssbsync-itx4.smartadserver.com

IN A

185.86.139.93

ssbsync-itx4.smartadserver.com

IN A

185.86.139.103

ssbsync-itx4.smartadserver.com

IN A

185.86.139.94
DNS

103.251.151.54.in-addr.arpa

chrome.exe

Remote address:

8.8.8.8:53

Request

103.251.151.54.in-addr.arpa

IN PTR

Response

103.251.151.54.in-addr.arpa

IN PTR

ec2-54-151-251-103ap-southeast-1compute amazonawscom
DNS

id.rlcdn.com

chrome.exe

Remote address:

8.8.8.8:53

Request

id.rlcdn.com

IN A

Response

id.rlcdn.com

IN A

35.190.60.146
DNS

image8.pubmatic.com

chrome.exe

Remote address:

8.8.8.8:53

Request

image8.pubmatic.com

IN A

Response

image8.pubmatic.com

IN CNAME

image8-v2.pubmnet.com

image8-v2.pubmnet.com

IN CNAME

imgsync-amsfpairbc.pubmnet.com

imgsync-amsfpairbc.pubmnet.com

IN A

198.47.127.18
GET

https://id.rlcdn.com/711916.gif?ct=4&cv=

chrome.exe

Remote address:

35.190.60.146:443

Request

GET /711916.gif?ct=4&cv= HTTP/2.0
host: id.rlcdn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://id.rlcdn.com/711916.gif?ct=4&cv=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

35.190.60.146:443

Request

GET /711916.gif?ct=4&cv=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: id.rlcdn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

s.tribalfusion.com

chrome.exe

Remote address:

8.8.8.8:53

Request

s.tribalfusion.com

IN A

Response

s.tribalfusion.com

IN A

104.18.24.173

s.tribalfusion.com

IN A

104.18.25.173
GET

https://sync.spotim.market/csync?t=a&ep=644680&extuid=2963187305596611584206

chrome.exe

Remote address:

23.227.139.243:443

Request

GET /csync?t=a&ep=644680&extuid=2963187305596611584206 HTTP/1.1
Host: sync.spotim.market
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Referer: https://s.spotim.market/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Server: Adtelligent
Date: Fri, 02 Jun 2023 10:34:39 GMT
Content-Type: image/gif
Content-Length: 43
Etag: 898e8d7677704954
Set-Cookie: vmuid=898e8d7677704954; expires=Thu, 03 Aug 2023 10:34:40 GMT; domain=.spotim.market; path=/; secure; SameSite=None
Set-Cookie: a644680=2963187305596611584206; expires=Thu, 03 Aug 2023 10:34:40 GMT; domain=.spotim.market; path=/; secure; SameSite=None
GET

https://sync.spotim.market/csync?t=a&ep=309017&extuid=215c9a94-bb90-49b0-b1a2-76143d0dbe25-6479c5bf-494e&gdpr=$0&gdpr_consent=$

chrome.exe

Remote address:

23.227.139.243:443

Request

GET /csync?t=a&ep=309017&extuid=215c9a94-bb90-49b0-b1a2-76143d0dbe25-6479c5bf-494e&gdpr=$0&gdpr_consent=$ HTTP/1.1
Host: sync.spotim.market
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://s.spotim.market/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: a323548=4894631733703052721; vmuid=898e8d7677704954; a644680=2963187305596611584206; a482928=52e9ed36-ecb2-43af-8e4b-4ddba7340b38

Response

HTTP/1.1 200 OK

Server: Adtelligent
Date: Fri, 02 Jun 2023 10:34:44 GMT
Content-Type: image/gif
Content-Length: 43
Etag: 898e8d7677704954
Set-Cookie: vmuid=898e8d7677704954; expires=Thu, 03 Aug 2023 10:34:44 GMT; domain=.spotim.market; path=/; secure; SameSite=None
Set-Cookie: a309017=215c9a94-bb90-49b0-b1a2-76143d0dbe25-6479c5bf-494e; expires=Thu, 03 Aug 2023 10:34:44 GMT; domain=.spotim.market; path=/; secure; SameSite=None
DNS

131.160.0.193.in-addr.arpa

Remote address:

8.8.8.8:53

Request

131.160.0.193.in-addr.arpa

IN PTR

Response
DNS

164.156.155.213.in-addr.arpa

Remote address:

8.8.8.8:53

Request

164.156.155.213.in-addr.arpa

IN PTR

Response
DNS

134.86.177.18.in-addr.arpa

Remote address:

8.8.8.8:53

Request

134.86.177.18.in-addr.arpa

IN PTR

Response

134.86.177.18.in-addr.arpa

IN PTR

ec2-18-177-86-134ap-northeast-1compute amazonawscom
DNS

134.86.177.18.in-addr.arpa

Remote address:

8.8.8.8:53

Request

134.86.177.18.in-addr.arpa

IN PTR

Response

134.86.177.18.in-addr.arpa

IN PTR

ec2-18-177-86-134ap-northeast-1compute amazonawscom
DNS

130.152.227.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

130.152.227.23.in-addr.arpa

IN PTR

Response
DNS

130.152.227.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

130.152.227.23.in-addr.arpa

IN PTR

Response
DNS

138.126.95.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

138.126.95.52.in-addr.arpa

IN PTR

Response
DNS

146.73.161.182.in-addr.arpa

Remote address:

8.8.8.8:53

Request

146.73.161.182.in-addr.arpa

IN PTR

Response
DNS

221.129.111.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

221.129.111.34.in-addr.arpa

IN PTR

Response

221.129.111.34.in-addr.arpa

IN PTR

22112911134bcgoogleusercontentcom
DNS

34.130.224.3.in-addr.arpa

Remote address:

8.8.8.8:53

Request

34.130.224.3.in-addr.arpa

IN PTR

Response

34.130.224.3.in-addr.arpa

IN PTR

ec2-3-224-130-34 compute-1 amazonawscom
DNS

173.24.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

173.24.18.104.in-addr.arpa

IN PTR

Response
DNS

122.181.231.173.in-addr.arpa

Remote address:

8.8.8.8:53

Request

122.181.231.173.in-addr.arpa

IN PTR

Response
DNS

49.2.101.151.in-addr.arpa

Remote address:

8.8.8.8:53

Request

49.2.101.151.in-addr.arpa

IN PTR

Response
DNS

173.193.186.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

173.193.186.35.in-addr.arpa

IN PTR

Response

173.193.186.35.in-addr.arpa

IN PTR

17319318635bcgoogleusercontentcom
DNS

93.159.114.85.in-addr.arpa

Remote address:

8.8.8.8:53

Request

93.159.114.85.in-addr.arpa

IN PTR

Response

93.159.114.85.in-addr.arpa

IN PTR

dspadfarm1aditioncom
DNS

190.161.94.141.in-addr.arpa

Remote address:

8.8.8.8:53

Request

190.161.94.141.in-addr.arpa

IN PTR

Response

190.161.94.141.in-addr.arpa

IN PTR

bixel-2cloudyovh
DNS

11.164.228.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

11.164.228.46.in-addr.arpa

IN PTR

Response
DNS

20.165.5.195.in-addr.arpa

Remote address:

8.8.8.8:53

Request

20.165.5.195.in-addr.arpa

IN PTR

Response
DNS

94.213.92.164.in-addr.arpa

Remote address:

8.8.8.8:53

Request

94.213.92.164.in-addr.arpa

IN PTR

Response
DNS

49.158.204.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

49.158.204.35.in-addr.arpa

IN PTR

Response

49.158.204.35.in-addr.arpa

IN PTR

4915820435bcgoogleusercontentcom
DNS

242.134.98.98.in-addr.arpa

Remote address:

8.8.8.8:53

Request

242.134.98.98.in-addr.arpa

IN PTR

Response
DNS

242.134.98.98.in-addr.arpa

Remote address:

8.8.8.8:53

Request

242.134.98.98.in-addr.arpa

IN PTR

Response
DNS

204.16.207.89.in-addr.arpa

Remote address:

8.8.8.8:53

Request

204.16.207.89.in-addr.arpa

IN PTR

Response

204.16.207.89.in-addr.arpa

IN PTR

ams04-nessy-float2dotomicom
DNS

23.4.157.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

23.4.157.37.in-addr.arpa

IN PTR

Response
DNS

110.189.64.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

110.189.64.185.in-addr.arpa

IN PTR

Response
DNS

146.99.242.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

146.99.242.34.in-addr.arpa

IN PTR

Response

146.99.242.34.in-addr.arpa

IN PTR

ec2-34-242-99-146 eu-west-1compute amazonawscom
DNS

220.44.76.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

220.44.76.52.in-addr.arpa

IN PTR

Response

220.44.76.52.in-addr.arpa

IN PTR

ec2-52-76-44-220ap-southeast-1compute amazonawscom
DNS

101.15.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

101.15.18.104.in-addr.arpa

IN PTR

Response
DNS

2.229.220.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

2.229.220.52.in-addr.arpa

IN PTR

Response

2.229.220.52.in-addr.arpa

IN PTR

ec2-52-220-229-2ap-southeast-1compute amazonawscom
DNS

38.40.149.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

38.40.149.34.in-addr.arpa

IN PTR

Response

38.40.149.34.in-addr.arpa

IN PTR

384014934bcgoogleusercontentcom
DNS

147.128.46.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

147.128.46.52.in-addr.arpa

IN PTR

Response
DNS

210.191.64.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

210.191.64.185.in-addr.arpa

IN PTR

Response
DNS

214.171.94.141.in-addr.arpa

Remote address:

8.8.8.8:53

Request

214.171.94.141.in-addr.arpa

IN PTR

Response

214.171.94.141.in-addr.arpa

IN PTR

pikafka-eu-8cloudyovh
DNS

14.42.107.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.42.107.13.in-addr.arpa

IN PTR

Response
DNS

213.245.248.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

213.245.248.13.in-addr.arpa

IN PTR

Response

213.245.248.13.in-addr.arpa

IN PTR

a0f671730127a0812awsglobalacceleratorcom
DNS

20.127.47.198.in-addr.arpa

Remote address:

8.8.8.8:53

Request

20.127.47.198.in-addr.arpa

IN PTR

Response
DNS

103.252.227.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

103.252.227.35.in-addr.arpa

IN PTR

Response

103.252.227.35.in-addr.arpa

IN PTR

10325222735bcgoogleusercontentcom
DNS

18.127.47.198.in-addr.arpa

Remote address:

8.8.8.8:53

Request

18.127.47.198.in-addr.arpa

IN PTR

Response
DNS

146.60.190.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

146.60.190.35.in-addr.arpa

IN PTR

Response

146.60.190.35.in-addr.arpa

IN PTR

1466019035bcgoogleusercontentcom
DNS

203.245.156.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

203.245.156.35.in-addr.arpa

IN PTR

Response

203.245.156.35.in-addr.arpa

IN PTR

ec2-35-156-245-203eu-central-1compute amazonawscom
DNS

243.139.227.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

243.139.227.23.in-addr.arpa

IN PTR

Response
DNS

sync.aniview.com

chrome.exe

Remote address:

8.8.8.8:53

Request

sync.aniview.com

IN A

Response

sync.aniview.com

IN CNAME

cookie-sync-1380929930.us-east-1.elb.amazonaws.com

cookie-sync-1380929930.us-east-1.elb.amazonaws.com

IN A

18.214.94.14

cookie-sync-1380929930.us-east-1.elb.amazonaws.com

IN A

52.2.228.97

cookie-sync-1380929930.us-east-1.elb.amazonaws.com

IN A

44.206.122.152

cookie-sync-1380929930.us-east-1.elb.amazonaws.com

IN A

3.226.73.215

cookie-sync-1380929930.us-east-1.elb.amazonaws.com

IN A

52.44.51.221

cookie-sync-1380929930.us-east-1.elb.amazonaws.com

IN A

18.210.168.111

cookie-sync-1380929930.us-east-1.elb.amazonaws.com

IN A

3.222.50.10

cookie-sync-1380929930.us-east-1.elb.amazonaws.com

IN A

3.220.29.54
DNS

ssbsync.smartadserver.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ssbsync.smartadserver.com

IN A

Response

ssbsync.smartadserver.com

IN CNAME

ssbsync-geo.smartadserver.com

ssbsync-geo.smartadserver.com

IN CNAME

usersync-geo-global.usersync-prod-sas.akadns.net

usersync-geo-global.usersync-prod-sas.akadns.net

IN CNAME

ssbsync-itx5.smartadserver.com

ssbsync-itx5.smartadserver.com

IN A

185.86.138.155

ssbsync-itx5.smartadserver.com

IN A

185.86.138.154

ssbsync-itx5.smartadserver.com

IN A

185.86.138.151

ssbsync-itx5.smartadserver.com

IN A

185.86.138.153

ssbsync-itx5.smartadserver.com

IN A

185.86.138.152

ssbsync-itx5.smartadserver.com

IN A

185.86.138.150
GET

https://ssbsync.smartadserver.com/api/sync?callerId=22&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.86.138.155:443

Request

GET /api/sync?callerId=22&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: ssbsync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
Referer: https://visitor.omnitagjs.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=507391=5478394; TestIfCookie=ok; TestIfCookieP=ok; pid=6880727987372587628; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0

Response

HTTP/1.1 200 OK

content-length: 3220
content-type: text/html
date: Fri, 02 Jun 2023 10:34:40 GMT
GET

https://ssum-sec.casalemedia.com/usermatchredir?s=194558&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&cb=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dindexexchange%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26uid%3D

chrome.exe

Remote address:

185.80.39.216:443

Request

GET /usermatchredir?s=194558&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&cb=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dindexexchange%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26uid%3D HTTP/1.1
Host: ssum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://1fichier.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPS=5292; CMPRO=5292

Response

HTTP/1.1 302 Found

Date: Fri, 02 Jun 2023 10:34:40 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: https://u.4dex.io/setuid?bidder=indexexchange&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&uid=ZHnFvVqT2oy7TuXID9kl3wAAFKwAAAAB
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:34:40 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:40 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
GET

https://ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

185.80.39.216:443

Request

GET /usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: ssum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:34:40 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: text/html
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 1704
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:34:40 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:40 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
DNS

ads.playground.xyz

chrome.exe

Remote address:

8.8.8.8:53

Request

ads.playground.xyz

IN A

Response

ads.playground.xyz

IN A

34.102.253.54
DNS

bttrack.com

chrome.exe

Remote address:

8.8.8.8:53

Request

bttrack.com

IN A

Response

bttrack.com

IN A

192.132.33.46
GET

https://ads.playground.xyz/usersync/apn?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MDEmdGw9NDMyMDA=&piggybackCookie=$UID

chrome.exe

Remote address:

34.102.253.54:443

Request

GET /usersync/apn?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MDEmdGw9NDMyMDA=&piggybackCookie=$UID HTTP/2.0
host: ads.playground.xyz
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://onetag-sys.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

rtb-csync.smartadserver.com

chrome.exe

Remote address:

8.8.8.8:53

Request

rtb-csync.smartadserver.com

IN A

Response

rtb-csync.smartadserver.com

IN CNAME

rtb-csync-geo.usersync-prod-sas.akadns.net

rtb-csync-geo.usersync-prod-sas.akadns.net

IN CNAME

rtb-csync-itx4.smartadserver.com

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.103

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.93

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.104

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.102

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.101

rtb-csync-itx4.smartadserver.com

IN A

185.86.139.94
DNS

bh.contextweb.com

chrome.exe

Remote address:

8.8.8.8:53

Request

bh.contextweb.com

IN A

Response

bh.contextweb.com

IN CNAME

sjc-bh.contextweb.com

sjc-bh.contextweb.com

IN CNAME

sjc-direct-bgp.contextweb.com

sjc-direct-bgp.contextweb.com

IN A

74.214.196.131
GET

https://csync.loopme.me/?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

35.214.153.92:443

Request

GET /?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: csync.loopme.me
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: viewer_token=e4d2d3a5-65f1-4501-8509-632e10455140

Response

HTTP/2.0 307

set-cookie: viewer_token=e4d2d3a5-65f1-4501-8509-632e10455140; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 02-Sep-2023 10:34:40 GMT; SameSite=None
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=124&partneruserid=e4d2d3a5-65f1-4501-8509-632e10455140&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1
content-length: 0
date: Fri, 02 Jun 2023 10:34:40 GMT
server: _
GET

https://csync.loopme.me/?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

35.214.153.92:443

Request

GET /?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: csync.loopme.me
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssbsync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: viewer_token=e4d2d3a5-65f1-4501-8509-632e10455140

Response

HTTP/2.0 307

set-cookie: viewer_token=e4d2d3a5-65f1-4501-8509-632e10455140; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 02-Sep-2023 10:34:40 GMT; SameSite=None
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=124&partneruserid=e4d2d3a5-65f1-4501-8509-632e10455140&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1
content-length: 0
date: Fri, 02 Jun 2023 10:34:40 GMT
server: _
DNS

eu-u.openx.net

chrome.exe

Remote address:

8.8.8.8:53

Request

eu-u.openx.net

IN A

Response

eu-u.openx.net

IN A

35.244.159.8

eu-u.openx.net

IN A

34.98.64.218
GET

https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

74.214.196.131:443

Request

GET /bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: bh.contextweb.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version
cw-server: bh-deployment-5c88bf657c-mxgr9
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
set-cookie: V=pghBpt3yfaU1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 27-May-2024 10:34:41 GMT;Max-Age=31104000;SameSite=None
set-cookie: gdpr=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 02-Jul-2023 10:34:41 GMT;Max-Age=2592000;SameSite=None
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=92&partneruserid=pghBpt3yfaU1&ev=1&pid=560288&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1
server: Jetty(10.0.14)
strict-transport-security: max-age=15768000
set-cookie: INGRESSCOOKIE=062d6aa72b582620; path=/; HttpOnly; Secure; SameSite=None
GET

https://bh.contextweb.com/bh/rtset?do=add&pid=558502&ev=AADPM07I84wAACFJuFXTrA&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26userid%3D6880727987372587628%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

74.214.196.131:443

Request

GET /bh/rtset?do=add&pid=558502&ev=AADPM07I84wAACFJuFXTrA&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26userid%3D6880727987372587628%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: bh.contextweb.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: V=pghBpt3yfaU1
cookie: gdpr=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
cookie: INGRESSCOOKIE=062d6aa72b582620

Response

HTTP/2.0 302

p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version
cw-server: bh-deployment-5c88bf657c-mxgr9
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
set-cookie: pb_rtb_ev=3-1kxh|7dN.0.AADPM07I84wAACFJuFXTrA;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sat, 01-Jun-2024 10:34:41 GMT;Max-Age=31536000;SameSite=None
set-cookie: V=pghBpt3yfaU1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 27-May-2024 10:34:41 GMT;Max-Age=31104000;SameSite=None
set-cookie: gdpr=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 02-Jul-2023 10:34:41 GMT;Max-Age=2592000;SameSite=None
location: https://match.prod.bidr.io/cookie-sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&userid=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AADPM07I84wAACFJuFXTrA&pid=558502&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&do=add&gdpr=1
server: Jetty(10.0.14)
strict-transport-security: max-age=15768000
DNS

simage4.pubmatic.com

chrome.exe

Remote address:

8.8.8.8:53

Request

simage4.pubmatic.com

IN A

Response

simage4.pubmatic.com

IN CNAME

image4-v2.pubmnet.com

image4-v2.pubmnet.com

IN CNAME

spug-sg4c.pubmnet.com

spug-sg4c.pubmnet.com

IN A

67.199.150.85
DNS

id5-sync.com

chrome.exe

Remote address:

8.8.8.8:53

Request

id5-sync.com

IN A

Response

id5-sync.com

IN A

141.95.98.64

id5-sync.com

IN A

162.19.138.116

id5-sync.com

IN A

162.19.138.120

id5-sync.com

IN A

162.19.138.117

id5-sync.com

IN A

141.95.98.65

id5-sync.com

IN A

162.19.138.82

id5-sync.com

IN A

162.19.138.83

id5-sync.com

IN A

141.95.33.111

id5-sync.com

IN A

162.19.138.119

id5-sync.com

IN A

162.19.138.118
DNS

cs.admanmedia.com

chrome.exe

Remote address:

8.8.8.8:53

Request

cs.admanmedia.com

IN A

Response

cs.admanmedia.com

IN A

80.77.87.162
DNS

s.ad.smaato.net

chrome.exe

Remote address:

8.8.8.8:53

Request

s.ad.smaato.net

IN A

Response

s.ad.smaato.net

IN A

52.222.139.67

s.ad.smaato.net

IN A

52.222.139.37

s.ad.smaato.net

IN A

52.222.139.80

s.ad.smaato.net

IN A

52.222.139.43
GET

https://id5-sync.com/i/102/9.gif?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

141.95.98.64:443

Request

GET /i/102/9.gif?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#1; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://id5-sync.com/c/102/0/9/1.gif?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:34:40 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/c/102/0/9/1.gif?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=

chrome.exe

Remote address:

141.95.98.64:443

Request

GET /c/102/0/9/1.gif?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy= HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: cf=; cip=; cnac=; car=; gdpr=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#1; callback=

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#2; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:34:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: 3pi=; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:34:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://rtb-csync.smartadserver.com/redir/?partnerid=111&partneruserid=ID5-3300vC3zTw8FuNhWdkDwNWMT0ilyd1Xb7oDH-w26Qg&redirurl=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F102%2F8%2F2.gif%3Fpuid%3DSMART_USER_ID%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:34:41 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/c/102/102/8/2.gif?puid=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

141.95.98.64:443

Request

GET /c/102/102/8/2.gif?puid=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: cf=; cip=; cnac=; car=; gdpr=; callback=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#2; 3pi=

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=102#1685702081431#1307457184; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:34:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=gif; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=102; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=7; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=3; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=1|CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:41 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:34:41 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/k/264.gif?puid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&ttl=%%TTL%%

chrome.exe

Remote address:

141.95.98.64:443

Request

GET /k/264.gif?puid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&ttl=%%TTL%% HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: callback=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#2; 3pi=102#1685702081431#1307457184; cf=gif; cip=102; cnac=7; car=3; gdpr=1|CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:34:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:42 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://ps.eyeota.net/match?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&bid=1mpr7m0&r=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F123%2F6%2F4.gif%3Fpuid%3D%7BUUID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:34:41 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/c/102/123/6/4.gif?puid=1887bac8526-5148000001084d6e&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

141.95.98.64:443

Request

GET /c/102/123/6/4.gif?puid=1887bac8526-5148000001084d6e&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: callback=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#2; 3pi=102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7; cf=; cip=; cnac=; car=; gdpr=

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:34:45 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:45 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:45 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:45 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:45 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:45 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:45 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://sync.mathtag.com/sync/img?mt_exid=10089&mt_exuid=ID5-3300vC3zTw8FuNhWdkDwNWMT0ilyd1Xb7oDH-w26Qg&redir=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F3%2F5%2F5.gif%3Fpuid%3D%5BUUID%5D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:34:45 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/c/102/3/5/5.gif?puid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

141.95.98.64:443

Request

GET /c/102/3/5/5.gif?puid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: callback=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#2; cf=; cip=; cnac=; car=; gdpr=; 3pi=102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:34:46 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:46 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:46 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:46 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:46 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:46 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:46 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://cookie-matching.mediarithmics.com/v1/get_user_agent_id?dom_token=id517&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:34:46 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/qp/18.gif?puid=vec%3A37376318896&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY

chrome.exe

Remote address:

141.95.98.64:443

Request

GET /qp/18.gif?puid=vec%3A37376318896&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: callback=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#2; cf=; cip=; cnac=; car=; gdpr=; 3pi=3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=18#1685702087658#88908163|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:34:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://ib.adnxs.com/getuid?https://id5-sync.com/c/102/2/3/7.gif?puid=$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:34:47 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/c/102/2/3/7.gif?puid=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

141.95.98.64:443

Request

GET /c/102/2/3/7.gif?puid=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: callback=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#2; cf=; cip=; cnac=; car=; gdpr=; 3pi=18#1685702087658#88908163|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:34:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:39:47 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://uipglob.semasio.net/id5/1/get?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F2%2F8.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:34:47 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://s.ad.smaato.net/c/?adExInit=sas&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D133%26partneruserid%3D$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

52.222.139.67:443

Request

GET /c/?adExInit=sas&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D133%26partneruserid%3D$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: s.ad.smaato.net
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

server: CloudFront
date: Fri, 02 Jun 2023 10:34:41 GMT
content-length: 0
cache-control: no-cache, must-revalidate
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=133&partneruserid=355bd4a3
set-cookie: SCM=355bd4a3; Expires=Fri, 23 Jun 2023 10:34:41 GMT; Domain=.smaato.net; SameSite=None; Path=/; Secure
set-cookie: SCMsas=355bd4a3; Expires=Mon, 12 Jun 2023 22:34:41 GMT; Domain=.smaato.net; Path=/; SameSite=None; Secure
x-cache: FunctionGeneratedResponse from cloudfront
via: 1.1 ef2cb74895744344a0ea2100fbbb760a.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: KN9VCTayIYv2W_ifXQdE_SsVVw9lj_RTgamuGByBJAQZ9bY1FaxN8Q==
GET

https://s.ad.smaato.net/c/?adExInit=sas&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D133%26partneruserid%3D$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

52.222.139.67:443

Request

GET /c/?adExInit=sas&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D133%26partneruserid%3D$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: s.ad.smaato.net
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: SCM=355bd4a3
cookie: SCMsas=355bd4a3

Response

HTTP/2.0 302

server: CloudFront
date: Fri, 02 Jun 2023 10:35:15 GMT
content-length: 0
cache-control: no-cache, must-revalidate
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=133&partneruserid=355bd4a3
set-cookie: SCM=355bd4a3; Expires=Fri, 23 Jun 2023 10:35:15 GMT; Domain=.smaato.net; SameSite=None; Path=/; Secure
set-cookie: SCMsas=355bd4a3; Expires=Mon, 12 Jun 2023 22:35:15 GMT; Domain=.smaato.net; Path=/; SameSite=None; Secure
x-cache: FunctionGeneratedResponse from cloudfront
via: 1.1 ef2cb74895744344a0ea2100fbbb760a.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: zG4b6vXQEmuqwMkHNUy4Jm9o9Yv5ZrFlNziCFMmHbcV61Ki_Pa4SNQ==
DNS

dmp.adform.net

chrome.exe

Remote address:

8.8.8.8:53

Request

dmp.adform.net

IN A

Response

dmp.adform.net

IN CNAME

track.adformnet.akadns.net

track.adformnet.akadns.net

IN A

37.157.3.29

track.adformnet.akadns.net

IN A

37.157.3.28
DNS

dsum-sec.casalemedia.com

chrome.exe

Remote address:

8.8.8.8:53

Request

dsum-sec.casalemedia.com

IN A

Response

dsum-sec.casalemedia.com

IN CNAME

um.indexww.com.akadns.net

um.indexww.com.akadns.net

IN CNAME

u12.lb.indexww.com

u12.lb.indexww.com

IN CNAME

fr-xn.lb.indexww.com

fr-xn.lb.indexww.com

IN A

185.80.39.216
GET

https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D

chrome.exe

Remote address:

185.80.39.216:443

Request

GET /rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D HTTP/1.1
Host: dsum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: same-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 302 Found

Date: Fri, 02 Jun 2023 10:34:41 GMT
Server: Apache
Cache-Control: no-cache
Expires: 0
Location: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dbm&google_cm&google_sc&google_hm=ZHnFvVqT2oy7TuXID9kl3wAA
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 0
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:34:41 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:41 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
GET

https://dsum-sec.casalemedia.com/rum?cm_dsp_id=4&external_user_id=8117640948868045750

chrome.exe

Remote address:

185.80.39.216:443

Request

GET /rum?cm_dsp_id=4&external_user_id=8117640948868045750 HTTP/1.1
Host: dsum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:34:41 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 43
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:34:41 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:41 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
GET

https://dsum-sec.casalemedia.com/crum?cm_dsp_id=111&external_user_id=1897977468389386522&expiration=1686911680

chrome.exe

Remote address:

185.80.39.216:443

Request

GET /crum?cm_dsp_id=111&external_user_id=1897977468389386522&expiration=1686911680 HTTP/1.1
Host: dsum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:34:41 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 43
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:34:41 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:41 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=498
Connection: Keep-Alive
DNS

107.186.118.74.in-addr.arpa

Remote address:

8.8.8.8:53

Request

107.186.118.74.in-addr.arpa

IN PTR

Response
DNS

107.186.118.74.in-addr.arpa

Remote address:

8.8.8.8:53

Request

107.186.118.74.in-addr.arpa

IN PTR

Response
DNS

14.94.214.18.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.94.214.18.in-addr.arpa

IN PTR

Response

14.94.214.18.in-addr.arpa

IN PTR

ec2-18-214-94-14 compute-1 amazonawscom
DNS

54.253.102.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

54.253.102.34.in-addr.arpa

IN PTR

Response

54.253.102.34.in-addr.arpa

IN PTR

5425310234bcgoogleusercontentcom
DNS

155.138.86.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

155.138.86.185.in-addr.arpa

IN PTR

Response
DNS

46.33.132.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

46.33.132.192.in-addr.arpa

IN PTR

Response

46.33.132.192.in-addr.arpa

IN PTR

46 bidtellectcom
DNS

131.196.214.74.in-addr.arpa

Remote address:

8.8.8.8:53

Request

131.196.214.74.in-addr.arpa

IN PTR

Response
DNS

131.196.214.74.in-addr.arpa

Remote address:

8.8.8.8:53

Request

131.196.214.74.in-addr.arpa

IN PTR

Response
DNS

67.139.222.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

67.139.222.52.in-addr.arpa

IN PTR

Response

67.139.222.52.in-addr.arpa

IN PTR

server-52-222-139-67ams50r cloudfrontnet
DNS

64.98.95.141.in-addr.arpa

Remote address:

8.8.8.8:53

Request

64.98.95.141.in-addr.arpa

IN PTR

Response

64.98.95.141.in-addr.arpa

IN PTR

ns3216658ip-141-95-98eu
GET

https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=2dc3e055-cffc-4d06-9da4-1904f628f2b7&expiration=1688294080&gdpr=0&gdpr_consent=

chrome.exe

Remote address:

185.80.39.216:443

Request

GET /rum?cm_dsp_id=39&external_user_id=2dc3e055-cffc-4d06-9da4-1904f628f2b7&expiration=1688294080&gdpr=0&gdpr_consent= HTTP/1.1
Host: dsum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:34:41 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 43
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:34:41 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:41 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
DNS

dsum.casalemedia.com

chrome.exe

Remote address:

8.8.8.8:53

Request

dsum.casalemedia.com

IN A

Response

dsum.casalemedia.com

IN CNAME

um.indexww.com.akadns.net

um.indexww.com.akadns.net

IN CNAME

u12.lb.indexww.com

u12.lb.indexww.com

IN CNAME

fr-xn.lb.indexww.com

fr-xn.lb.indexww.com

IN A

185.80.39.216
GET

https://dsum.casalemedia.com/crum?cm_dsp_id=190&external_user_id=4894631733703052721

chrome.exe

Remote address:

185.80.39.216:443

Request

GET /crum?cm_dsp_id=190&external_user_id=4894631733703052721 HTTP/1.1
Host: dsum.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:34:41 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 43
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:34:41 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:41 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
DNS

162.87.77.80.in-addr.arpa

Remote address:

8.8.8.8:53

Request

162.87.77.80.in-addr.arpa

IN PTR

Response
DNS

29.3.157.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

29.3.157.37.in-addr.arpa

IN PTR

Response
DNS

85.150.199.67.in-addr.arpa

Remote address:

8.8.8.8:53

Request

85.150.199.67.in-addr.arpa

IN PTR

Response
DNS

sync.targeting.unrulymedia.com

chrome.exe

Remote address:

8.8.8.8:53

Request

sync.targeting.unrulymedia.com

IN A

Response

sync.targeting.unrulymedia.com

IN CNAME

sync.1rx.io

sync.1rx.io

IN A

213.19.147.44
DNS

33across-match.dotomi.com

chrome.exe

Remote address:

8.8.8.8:53

Request

33across-match.dotomi.com

IN A

Response

33across-match.dotomi.com

IN CNAME

bfp.global.dual.dotomi.weighted.com.akadns.net

bfp.global.dual.dotomi.weighted.com.akadns.net

IN A

63.215.202.140
DNS

ad.mrtnsvr.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ad.mrtnsvr.com

IN A

Response

ad.mrtnsvr.com

IN A

34.102.163.6
DNS

matching.truffle.bid

chrome.exe

Remote address:

8.8.8.8:53

Request

matching.truffle.bid

IN A

Response

matching.truffle.bid

IN A

157.90.40.26

matching.truffle.bid

IN A

23.88.86.2

matching.truffle.bid

IN A

162.55.120.196
GET

https://ad.mrtnsvr.com/sync/pubmatic?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

34.102.163.6:443

Request

GET /sync/pubmatic?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ad.mrtnsvr.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

acdn.adnxs.com

chrome.exe

Remote address:

8.8.8.8:53

Request

acdn.adnxs.com

IN A

Response

acdn.adnxs.com

IN CNAME

secure-adnxs.edgekey.net

secure-adnxs.edgekey.net

IN CNAME

e6115.g.akamaiedge.net

e6115.g.akamaiedge.net

IN A

96.16.108.246
DNS

mwzeom.zeotap.com

chrome.exe

Remote address:

8.8.8.8:53

Request

mwzeom.zeotap.com

IN A

Response

mwzeom.zeotap.com

IN A

172.67.13.182

mwzeom.zeotap.com

IN A

104.22.24.87

mwzeom.zeotap.com

IN A

104.22.25.87
DNS

uipglob.semasio.net

chrome.exe

Remote address:

8.8.8.8:53

Request

uipglob.semasio.net

IN A

Response

uipglob.semasio.net

IN CNAME

uipglob.trafficmanager.net

uipglob.trafficmanager.net

IN CNAME

uipapac.semasio.net

uipapac.semasio.net

IN A

119.9.108.180

uipapac.semasio.net

IN A

119.9.108.211

uipapac.semasio.net

IN A

119.9.108.191
DNS

uipglob.semasio.net

chrome.exe

Remote address:

8.8.8.8:53

Request

uipglob.semasio.net

IN A

Response

uipglob.semasio.net

IN CNAME

uipglob.trafficmanager.net

uipglob.trafficmanager.net

IN CNAME

uipapac.semasio.net

uipapac.semasio.net

IN A

119.9.108.211

uipapac.semasio.net

IN A

119.9.108.180

uipapac.semasio.net

IN A

119.9.108.191
DNS

pixel.onaudience.com

chrome.exe

Remote address:

8.8.8.8:53

Request

pixel.onaudience.com

IN A

Response

pixel.onaudience.com

IN A

141.94.171.212

pixel.onaudience.com

IN A

141.94.171.215

pixel.onaudience.com

IN A

141.94.171.214

pixel.onaudience.com

IN A

141.94.170.77

pixel.onaudience.com

IN A

15.235.15.221

pixel.onaudience.com

IN A

146.59.148.16

pixel.onaudience.com

IN A

141.94.170.64

pixel.onaudience.com

IN A

51.222.80.231

pixel.onaudience.com

IN A

141.94.171.216

pixel.onaudience.com

IN A

141.94.171.213
GET

https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&cid=00CDED12-08DE-41D7-A730-899A187EB7E5

chrome.exe

Remote address:

172.67.13.182:443

Request

GET /mw?zpartnerid=1384&env=mWeb&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&cid=00CDED12-08DE-41D7-A730-899A187EB7E5 HTTP/2.0
host: mwzeom.zeotap.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Fri, 02 Jun 2023 10:34:42 GMT
content-type: image/png
content-length: 95
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-origin: https://ads.pubmatic.com
set-cookie: zc=2bc01098-0f19-4321-4129-ad565ca8eaf8; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure
vary: Origin
via: 1.1 google
cf-cache-status: DYNAMIC
strict-transport-security: max-age=2592000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7d0f0ba25df20e2e-AMS
GET

https://pixel.onaudience.com/?partner=214&mapped=00CDED12-08DE-41D7-A730-899A187EB7E5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

141.94.171.212:443

Request

GET /?partner=214&mapped=00CDED12-08DE-41D7-A730-899A187EB7E5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: pixel.onaudience.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ads.pubmatic.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: done_redirects104=1; cookie=a09c11afbf0e93e1

Response

HTTP/1.1 302 Found

set-cookie: cookie=a09c11afbf0e93e1; Max-Age=31536000; Expires=Sat, 1 Jun 2024 10:34:42 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None
set-cookie: done_redirects162=1; Max-Age=86400; Expires=Sat, 3 Jun 2023 10:34:42 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None
location: https://pixel.onaudience.com/?partner=162&icm&cver&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26pid%3Ddn5h51u%26t%3Dgif%26uid%3D%25m
content-length: 0
GET

https://pixel.onaudience.com/?partner=162&icm&cver&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26pid%3Ddn5h51u%26t%3Dgif%26uid%3D%25m

chrome.exe

Remote address:

141.94.171.212:443

Request

GET /?partner=162&icm&cver&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26pid%3Ddn5h51u%26t%3Dgif%26uid%3D%25m HTTP/1.1
Host: pixel.onaudience.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ads.pubmatic.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: done_redirects104=1; cookie=a09c11afbf0e93e1; done_redirects162=1

Response

HTTP/1.1 302 Found

set-cookie: cookie=a09c11afbf0e93e1; Max-Age=31536000; Expires=Sat, 1 Jun 2024 10:34:43 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None
location: https://ps.eyeota.net/pixel?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&pid=dn5h51u&t=gif&uid=54a39e90ee4e187a
content-length: 0
GET

https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=00CDED12-08DE-41D7-A730-899A187EB7E5&sInitiator=external&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

119.9.108.180:443

Request

GET /pubmatic/1/info?sType=sync&sExtCookieId=00CDED12-08DE-41D7-A730-899A187EB7E5&sInitiator=external&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: uipglob.semasio.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ads.pubmatic.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 302 Found

location: https://uipus.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=00CDED12-08DE-41D7-A730-899A187EB7E5&sInitiator=external&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
date: Fri, 02 Jun 2023 10:34:43 GMT
content-length: 0
routing-server-id: 1
GET

https://uipglob.semasio.net/id5/1/get?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F2%2F8.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

119.9.108.180:443

Request

GET /id5/1/get?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F2%2F8.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: uipglob.semasio.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: SEUNCY=654C09E0D22D16EA

Response

HTTP/1.1 302 Found

location: https://uipus.semasio.net/id5/1/get?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F2%2F8.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
date: Fri, 02 Jun 2023 10:34:47 GMT
content-length: 0
routing-server-id: 1
GET

https://uipglob.semasio.net/id5/1/get?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F7%2F3.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

chrome.exe

Remote address:

119.9.108.180:443

Request

GET /id5/1/get?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F7%2F3.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: uipglob.semasio.net
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: SEUNCY=654C09E0D22D16EA

Response

HTTP/1.1 302 Found

location: https://uipus.semasio.net/id5/1/get?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F7%2F3.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
date: Fri, 02 Jun 2023 10:35:16 GMT
content-length: 0
routing-server-id: 1
DNS

44.147.19.213.in-addr.arpa

Remote address:

8.8.8.8:53

Request

44.147.19.213.in-addr.arpa

IN PTR

Response
DNS

140.202.215.63.in-addr.arpa

Remote address:

8.8.8.8:53

Request

140.202.215.63.in-addr.arpa

IN PTR

Response

140.202.215.63.in-addr.arpa

IN PTR

ams01-nessy-float2dotomicom
DNS

26.40.90.157.in-addr.arpa

Remote address:

8.8.8.8:53

Request

26.40.90.157.in-addr.arpa

IN PTR

Response

26.40.90.157.in-addr.arpa

IN PTR

static264090157clientsyour-serverde
DNS

6.163.102.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

6.163.102.34.in-addr.arpa

IN PTR

Response

6.163.102.34.in-addr.arpa

IN PTR

616310234bcgoogleusercontentcom
DNS

246.108.16.96.in-addr.arpa

Remote address:

8.8.8.8:53

Request

246.108.16.96.in-addr.arpa

IN PTR

Response

246.108.16.96.in-addr.arpa

IN PTR

a96-16-108-246deploystaticakamaitechnologiescom
DNS

182.13.67.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

182.13.67.172.in-addr.arpa

IN PTR

Response
DNS

ps.eyeota.net

chrome.exe

Remote address:

8.8.8.8:53

Request

ps.eyeota.net

IN A

Response

ps.eyeota.net

IN A

18.140.27.177
DNS

events-ssc.33across.com

chrome.exe

Remote address:

8.8.8.8:53

Request

events-ssc.33across.com

IN A

Response

events-ssc.33across.com

IN A

34.117.239.71
GET

https://events-ssc.33across.com/match?bidder_id=33&external_user_id=2963187305596611584206&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=

chrome.exe

Remote address:

34.117.239.71:443

Request

GET /match?bidder_id=33&external_user_id=2963187305596611584206&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/2.0
host: events-ssc.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278
GET

https://events-ssc.33across.com/match?liv=h&us_privacy=&bidder_id=1&external_user_id=86a06479-c5be-4e00-809d-041df6b6e2f1

chrome.exe

Remote address:

34.117.239.71:443

Request

GET /match?liv=h&us_privacy=&bidder_id=1&external_user_id=86a06479-c5be-4e00-809d-041df6b6e2f1 HTTP/2.0
host: events-ssc.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278
GET

https://events-ssc.33across.com/match?bidder_id=99&external_user_id=y-d.nDxLBE2uF4LVpzqoLZLN.k0gvZcraW%7EA&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=

chrome.exe

Remote address:

34.117.239.71:443

Request

GET /match?bidder_id=99&external_user_id=y-d.nDxLBE2uF4LVpzqoLZLN.k0gvZcraW%7EA&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/2.0
host: events-ssc.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278
GET

https://events-ssc.33across.com/match?bidder_id=64&external_user_id=AAAM5TTobO5AOANRbh-TAAAAAAA&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=

chrome.exe

Remote address:

34.117.239.71:443

Request

GET /match?bidder_id=64&external_user_id=AAAM5TTobO5AOANRbh-TAAAAAAA&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/2.0
host: events-ssc.33across.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: 33x_ps=u%3D212175644499687%3As1%3D1685702077278%3Ats%3D1685702077278
DNS

us-u.openx.net

chrome.exe

Remote address:

8.8.8.8:53

Request

us-u.openx.net

IN A

Response

us-u.openx.net

IN A

35.244.159.8

us-u.openx.net

IN A

34.98.64.218
GET

https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=ha0P7kgew5AP6IcniAHr

chrome.exe

Remote address:

185.80.39.216:443

Request

GET /crum?cm_dsp_id=17&external_user_id=ha0P7kgew5AP6IcniAHr HTTP/1.1
Host: dsum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:34:43 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 43
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:34:43 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:34:43 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
DNS

uipus.semasio.net

chrome.exe

Remote address:

8.8.8.8:53

Request

uipus.semasio.net

IN A

Response

uipus.semasio.net

IN A

50.57.31.206
DNS

212.171.94.141.in-addr.arpa

Remote address:

8.8.8.8:53

Request

212.171.94.141.in-addr.arpa

IN PTR

Response

212.171.94.141.in-addr.arpa

IN PTR

pikafka-eu-4cloudyovh
DNS

180.108.9.119.in-addr.arpa

Remote address:

8.8.8.8:53

Request

180.108.9.119.in-addr.arpa

IN PTR

Response
DNS

180.108.9.119.in-addr.arpa

Remote address:

8.8.8.8:53

Request

180.108.9.119.in-addr.arpa

IN PTR

Response
DNS

71.239.117.34.in-addr.arpa

Remote address:

8.8.8.8:53

Request

71.239.117.34.in-addr.arpa

IN PTR

Response

71.239.117.34.in-addr.arpa

IN PTR

7123911734bcgoogleusercontentcom
DNS

177.27.140.18.in-addr.arpa

Remote address:

8.8.8.8:53

Request

177.27.140.18.in-addr.arpa

IN PTR

Response

177.27.140.18.in-addr.arpa

IN PTR

ec2-18-140-27-177ap-southeast-1compute amazonawscom
DNS

tags.crwdcntrl.net

chrome.exe

Remote address:

8.8.8.8:53

Request

tags.crwdcntrl.net

IN A

Response

tags.crwdcntrl.net

IN A

52.222.139.7

tags.crwdcntrl.net

IN A

52.222.139.100

tags.crwdcntrl.net

IN A

52.222.139.112

tags.crwdcntrl.net

IN A

52.222.139.35
GET

https://tags.crwdcntrl.net/lt/c/15926/lt.min.js

chrome.exe

Remote address:

52.222.139.7:443

Request

GET /lt/c/15926/lt.min.js HTTP/2.0
host: tags.crwdcntrl.net
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _cc_dc=2
cookie: _cc_id=12fdcd42707ca748f18b9611dc2644ce

Response

HTTP/2.0 200

content-type: text/javascript
date: Thu, 01 Jun 2023 20:50:12 GMT
last-modified: Wed, 31 May 2023 20:21:17 GMT
x-amz-server-side-encryption: AES256
cache-control: public, max-age=86400
server: AmazonS3
content-encoding: gzip
etag: W/"470af38a99c3bcab986ab861203e5d53"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0b3cd120321973f1462a42e82c43c1cc.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: hl6MEVLgqL9KU7tXwjjIpz4-Q5Dg9TUQRfTHkk6WVlJh9DHUpxmE0w==
age: 49473
GET

https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=15926

chrome.exe

Remote address:

52.222.139.7:443

Request

GET /lt/shared/2/lt.iframe.html?c=15926 HTTP/2.0
host: tags.crwdcntrl.net
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: _cc_dc=2
cookie: _cc_id=12fdcd42707ca748f18b9611dc2644ce
cookie: _cc_cc="ACZ4XmNQMDRKS0lOMTEyNzBPTjQ3sUgztEiyNDM0TEk2MjMxSU5lAIKUyqNH%2Fvz%2F%2F58fxAED7m23p2ozbqth%2BM%2FIyPBuyRwWpg%2BMIDZU5NzRQ8yoIrv3XRZAFZm7%2BYUuqsjhxejmvH3xEU3N941T0OzqPLFEH9WcZxjmXD%2BvjqoEAJ0DVAM%3D"
cookie: _cc_aud="ABR4XmNgYGBIqTx6BEhBABMDj049mMk1A0gAAEnKA8I%3D"

Response

HTTP/2.0 200

content-type: text/html
last-modified: Tue, 25 Apr 2023 19:53:12 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Thu, 01 Jun 2023 20:50:11 GMT
cache-control: public, max-age=86400
etag: W/"ab50484458d62eef36ef1969b84da1b5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0b3cd120321973f1462a42e82c43c1cc.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: Y8SFiPk9Hsgnu7l-LlhFaufduhEbx_DL63ycR431gailW4f6EbKi9Q==
age: 49475
DNS

bcp.crwdcntrl.net

chrome.exe

Remote address:

8.8.8.8:53

Request

bcp.crwdcntrl.net

IN A

Response

bcp.crwdcntrl.net

IN A

54.151.251.103

bcp.crwdcntrl.net

IN A

18.139.242.221

bcp.crwdcntrl.net

IN A

3.1.234.252

bcp.crwdcntrl.net

IN A

52.74.170.61

bcp.crwdcntrl.net

IN A

54.151.149.20

bcp.crwdcntrl.net

IN A

52.77.85.82

bcp.crwdcntrl.net

IN A

52.77.198.137

bcp.crwdcntrl.net

IN A

52.76.206.236
DNS

pixel-us-east.rubiconproject.com

chrome.exe

Remote address:

8.8.8.8:53

Request

pixel-us-east.rubiconproject.com

IN A

Response

pixel-us-east.rubiconproject.com

IN CNAME

pixel-us-east.rubiconproject.net.akadns.net

pixel-us-east.rubiconproject.net.akadns.net

IN A

8.43.72.97

pixel-us-east.rubiconproject.net.akadns.net

IN A

8.43.72.98
DNS

217.106.137.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

217.106.137.52.in-addr.arpa

IN PTR

Response
DNS

7.139.222.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

7.139.222.52.in-addr.arpa

IN PTR

Response

7.139.222.52.in-addr.arpa

IN PTR

server-52-222-139-7ams50r cloudfrontnet
DNS

206.31.57.50.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.31.57.50.in-addr.arpa

IN PTR

Response
DNS

c.bing.com

chrome.exe

Remote address:

8.8.8.8:53

Request

c.bing.com

IN A

Response

c.bing.com

IN CNAME

c-bing-com.a-0001.a-msedge.net

c-bing-com.a-0001.a-msedge.net

IN CNAME

dual-a-0001.a-msedge.net

dual-a-0001.a-msedge.net

IN A

204.79.197.200

dual-a-0001.a-msedge.net

IN A

13.107.21.200
DNS

cms.analytics.yahoo.com

chrome.exe

Remote address:

8.8.8.8:53

Request

cms.analytics.yahoo.com

IN A

Response

cms.analytics.yahoo.com

IN CNAME

spcms-global.pbp.gysm.yahoodns.net

spcms-global.pbp.gysm.yahoodns.net

IN A

212.82.100.182
DNS

dmp.truoptik.com

chrome.exe

Remote address:

8.8.8.8:53

Request

dmp.truoptik.com

IN A

Response

dmp.truoptik.com

IN A

104.17.217.204

dmp.truoptik.com

IN A

104.17.216.204

dmp.truoptik.com

IN A

104.17.219.204

dmp.truoptik.com

IN A

104.17.218.204

dmp.truoptik.com

IN A

104.17.215.204
GET

https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP

chrome.exe

Remote address:

104.17.217.204:443

Request

GET /f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP HTTP/2.0
host: dmp.truoptik.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://bcp.crwdcntrl.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

date: Fri, 02 Jun 2023 10:34:45 GMT
content-type: text/html
content-length: 142
location: https://sync.crwdcntrl.net/map/c=10832/tp=TRUP/tpid=e0b5ec4680a5a0c5cf8d5067bffa7b28
set-cookie: to_master_s=e0b5ec4680a5a0c5cf8d5067bffa7b28; Expires=Sat, 01-Jun-24 10:34:45 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None
to-dmp-sync: s1a-dmp-use1-aws.truoptik.com
user-agent: Tru Optik DMP 1.3.1
cache-control: no-store
expires: 0
pragma: no-cache
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
set-cookie: to_version_s=b2; Expires=Sat, 01-Jun-24 10:34:45 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7d0f0bb23d78b90f-AMS
DNS

97.72.43.8.in-addr.arpa

Remote address:

8.8.8.8:53

Request

97.72.43.8.in-addr.arpa

IN PTR

Response
DNS

97.72.43.8.in-addr.arpa

Remote address:

8.8.8.8:53

Request

97.72.43.8.in-addr.arpa

IN PTR

Response
DNS

200.197.79.204.in-addr.arpa

Remote address:

8.8.8.8:53

Request

200.197.79.204.in-addr.arpa

IN PTR

Response

200.197.79.204.in-addr.arpa

IN PTR

a-0001a-msedgenet
DNS

200.197.79.204.in-addr.arpa

Remote address:

8.8.8.8:53

Request

200.197.79.204.in-addr.arpa

IN PTR

Response

200.197.79.204.in-addr.arpa

IN PTR

a-0001a-msedgenet
DNS

204.217.17.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

204.217.17.104.in-addr.arpa

IN PTR

Response
DNS

182.100.82.212.in-addr.arpa

Remote address:

8.8.8.8:53

Request

182.100.82.212.in-addr.arpa

IN PTR

Response

182.100.82.212.in-addr.arpa

IN PTR

spcmspbpvipir2yahoocom
DNS

182.100.82.212.in-addr.arpa

Remote address:

8.8.8.8:53

Request

182.100.82.212.in-addr.arpa

IN PTR

Response

182.100.82.212.in-addr.arpa

IN PTR

spcmspbpvipir2yahoocom
DNS

tags.bluekai.com

Remote address:

8.8.8.8:53

Request

tags.bluekai.com

IN A

Response

tags.bluekai.com

IN CNAME

tags.bluekai.com.edgekey.net

tags.bluekai.com.edgekey.net

IN CNAME

e9126.x.akamaiedge.net

e9126.x.akamaiedge.net

IN A

173.223.113.181
DNS

cookie-matching.mediarithmics.com

chrome.exe

Remote address:

8.8.8.8:53

Request

cookie-matching.mediarithmics.com

IN A

Response

cookie-matching.mediarithmics.com

IN CNAME

lb.mediarithmics.com

lb.mediarithmics.com

IN A

54.36.150.184

lb.mediarithmics.com

IN A

54.36.150.186

lb.mediarithmics.com

IN A

54.36.150.183

lb.mediarithmics.com

IN A

54.36.150.185

lb.mediarithmics.com

IN A

141.95.144.168

lb.mediarithmics.com

IN A

54.36.150.180

lb.mediarithmics.com

IN A

54.36.150.187

lb.mediarithmics.com

IN A

54.36.150.181
GET

https://cookie-matching.mediarithmics.com/v1/get_user_agent_id?dom_token=id517&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY

chrome.exe

Remote address:

54.36.150.184:443

Request

GET /v1/get_user_agent_id?dom_token=id517&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY HTTP/2.0
host: cookie-matching.mediarithmics.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 303

location: /v1/get_or_create?gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&domid=1033
content-length: 0
date: Fri, 02 Jun 2023 10:34:46 GMT
strict-transport-security: max-age=63072000;includeSubDomains;preload
GET

https://cookie-matching.mediarithmics.com/v1/get_or_create?gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&domid=1033

chrome.exe

Remote address:

54.36.150.184:443

Request

GET /v1/get_or_create?gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&domid=1033 HTTP/2.0
host: cookie-matching.mediarithmics.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 303

location: https://cm.g.doubleclick.net/pixel?google_nid=medr&google_cm&key=GOO&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&action=GET_ID&opid=goo&etid=&domid=1033&ops=apx
content-length: 0
date: Fri, 02 Jun 2023 10:34:47 GMT
strict-transport-security: max-age=63072000;includeSubDomains;preload
GET

https://cookie-matching.mediarithmics.com/input?key=GOO&key=GOO&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&action=GET_ID&opid=goo&etid=&domid=1033&ops=apx&google_error=15

chrome.exe

Remote address:

54.36.150.184:443

Request

GET /input?key=GOO&key=GOO&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&action=GET_ID&opid=goo&etid=&domid=1033&ops=apx&google_error=15 HTTP/2.0
host: cookie-matching.mediarithmics.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 303

location: https://ib.adnxs.com/getuid?https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=$UID&opid=apx&ops=&utidl=&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&action=GET_ID&etid=&domid=1033
content-length: 0
date: Fri, 02 Jun 2023 10:34:47 GMT
strict-transport-security: max-age=63072000;includeSubDomains;preload
GET

https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=4894631733703052721&opid=apx&ops=&utidl=&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&action=GET_ID&etid=&domid=1033

chrome.exe

Remote address:

54.36.150.184:443

Request

GET /input?key=APX&apx_uid=4894631733703052721&opid=apx&ops=&utidl=&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&action=GET_ID&etid=&domid=1033 HTTP/2.0
host: cookie-matching.mediarithmics.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 303

location: https://id5-sync.com/qp/18.gif?puid=vec%3A37376318896&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY
set-cookie: mics_vid=37376318896; Max-Age=31497913; Expires=Sat, 01 Jun 2024 00:00:00 GMT; SameSite=None; Path=/; Domain=.mediarithmics.com; Secure; HTTPOnly
set-cookie: mics_uaid=web:1:1f71ae3f-0dff-4dfc-b875-11a621cd0fc4; Max-Age=31497913; Expires=Sat, 01 Jun 2024 00:00:00 GMT; SameSite=None; Path=/; Domain=.mediarithmics.com; Secure; HTTPOnly
set-cookie: mics_lts=1685702087566; Max-Age=31497913; Expires=Sat, 01 Jun 2024 00:00:00 GMT; SameSite=None; Path=/; Domain=.mediarithmics.com; Secure; HTTPOnly
content-length: 0
date: Fri, 02 Jun 2023 10:34:47 GMT
strict-transport-security: max-age=63072000;includeSubDomains;preload
DNS

184.150.36.54.in-addr.arpa

Remote address:

8.8.8.8:53

Request

184.150.36.54.in-addr.arpa

IN PTR

Response

184.150.36.54.in-addr.arpa

IN PTR

ip184ip-54-36-150eu
DNS

50.23.12.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

50.23.12.20.in-addr.arpa

IN PTR

Response
DNS

i.w55c.net

chrome.exe

Remote address:

8.8.8.8:53

Request

i.w55c.net

IN A

Response

i.w55c.net

IN CNAME

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

3.126.192.167

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

35.159.47.190

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

35.156.77.117

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

35.157.43.161

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

18.195.124.86

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

35.157.134.200
DNS

pm.w55c.net

chrome.exe

Remote address:

8.8.8.8:53

Request

pm.w55c.net

IN A

Response

pm.w55c.net

IN CNAME

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

35.159.47.190

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

3.126.192.167

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

35.156.77.117

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

35.157.43.161

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

18.195.124.86

dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com

IN A

35.157.134.200
DNS

2.36.159.162.in-addr.arpa

Remote address:

8.8.8.8:53

Request

2.36.159.162.in-addr.arpa

IN PTR

Response
DNS

167.192.126.3.in-addr.arpa

Remote address:

8.8.8.8:53

Request

167.192.126.3.in-addr.arpa

IN PTR

Response

167.192.126.3.in-addr.arpa

IN PTR

ec2-3-126-192-167eu-central-1compute amazonawscom
DNS

190.47.159.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

190.47.159.35.in-addr.arpa

IN PTR

Response

190.47.159.35.in-addr.arpa

IN PTR

ec2-35-159-47-190eu-central-1compute amazonawscom
DNS

d.turn.com

chrome.exe

Remote address:

8.8.8.8:53

Request

d.turn.com

IN A

Response

d.turn.com

IN CNAME

d.turn.com.akadns.net

d.turn.com.akadns.net

IN A

46.228.164.13
GET

https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=4&dc_mr=5&dc_orig=dn5h51u&&referrer_pid=dn5h51u

chrome.exe

Remote address:

46.228.164.13:443

Request

GET /r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=4&dc_mr=5&dc_orig=dn5h51u&&referrer_pid=dn5h51u HTTP/2.0
host: d.turn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ads.pubmatic.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: uid=8117640948868045750

Response

HTTP/2.0 302

p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=8117640948868045750; Domain=.turn.com; Expires=Wed, 29-Nov-2023 10:34:49 GMT; Path=/; Secure; SameSite=None
location: https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=8117640948868045750&newuser=1&dc_rc=4&dc_mr=5&dc_orig=dn5h51u&&referrer_pid=dn5h51u
content-length: 0
date: Fri, 02 Jun 2023 10:34:48 GMT
DNS

58.55.71.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

58.55.71.13.in-addr.arpa

IN PTR

Response
DNS

13.164.228.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

13.164.228.46.in-addr.arpa

IN PTR

Response
DNS

103.169.127.40.in-addr.arpa

Request

103.169.127.40.in-addr.arpa

IN PTR

Response
DNS

139.238.32.23.in-addr.arpa

Request

139.238.32.23.in-addr.arpa

IN PTR

Response

139.238.32.23.in-addr.arpa

IN PTR

a23-32-238-139deploystaticakamaitechnologiescom
DNS

198.187.3.20.in-addr.arpa

Request

198.187.3.20.in-addr.arpa

IN PTR

Response
DNS

157.123.68.40.in-addr.arpa

Request

157.123.68.40.in-addr.arpa

IN PTR

Response
DNS

1fichier.com

Request

1fichier.com

IN A

Response

1fichier.com

IN A

5.39.224.140
GET

https://1fichier.com/?71buuig24j82m9ubo7dw

Request

GET /?71buuig24j82m9ubo7dw HTTP/2.0
host: 1fichier.com
cache-control: max-age=0
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: euconsent-v2=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
cookie: addtl_consent=1~39.4.3.9.6.9.13.6.4.15.9.5.2.11.1.7.1.3.2.10.3.5.4.21.4.6.9.7.10.2.9.2.18.7.20.5.20.6.5.1.4.11.29.4.14.4.5.3.10.6.2.9.6.6.9.4.4.29.4.5.3.1.6.2.2.17.1.17.10.9.1.8.6.2.8.3.4.146.8.42.15.1.14.3.1.18.25.3.7.25.5.18.9.7.41.2.4.18.21.3.4.2.7.6.5.2.14.18.7.3.2.2.8.20.8.8.6.3.10.4.20.2.13.4.6.4.11.1.3.22.16.2.6.8.2.4.11.6.5.33.11.8.1.10.28.12.1.3.21.2.7.6.1.9.30.17.4.9.15.8.7.3.6.6.7.2.4.1.7.12.13.22.13.2.12.2.10.1.4.15.2.4.9.4.5.4.7.13.5.15.4.13.4.14.10.15.2.5.6.2.2.1.2.14.7.4.8.2.9.10.18.12.13.2.18.1.1.3.1.1.9.25.4.1.19.8.4.5.3.5.4.8.4.2.2.2.14.2.13.4.2.6.9.6.3.2.2.3.5.2.3.6.10.11.6.3.16.3.11.3.1.2.3.9.19.11.15.3.10.7.6.4.3.4.6.3.3.3.3.1.1.1.6.11.3.1.1.11.6.1.10.5.2.6.3.2.2.4.3.2.2.7.15.7.14.1.3.3.4.5.4.3.2.2.5.4.1.1.2.9.1.6.9.1.5.2.1.7.10.11.1.3.1.1.2.1.3.2.6.1.12.5.3.1.3.1.1.2.2.7.7.1.4.1.2.6.1.2.1.1.3.1.1.4.1.1.2.1.8.1.7.4.3.2.1.3.5.3.9.6.1.15.10.28.1.2.2.12.3.4.1.6.3.4.7.1.3.1.1.3.1.5.3.1.3.4.1.1.4.2.1.2.1.2.2.2.4.2.1.2.2.2.4.1.1.1.2.2.1.1.1.1.2.1.1.1.2.2.1.1.2.1.2.1.7.1.2.1.1.1.2.1.1.1.1.2.1.1.3.2.1.1.8.1.1.6.2.1.6.2.3.2.1.1.1.2.2.3.1.1.4.1.1.2.2.1.1.4.3.1.2.2.1.2.1.2.3.1.1.2.4.1.1.1.5.1.3.6.3.1.5.2.3.4.1.2.3.1.4.2.1.2.2.2.1.1.1.1.1.1.11.1.3.1.1.2.2.5.2.3.3.5.1.1.1.4.2.1.1.2.5.1.9.4.1.1.3.1.7.1.4.5.1.7.2.1.1.1.2.1.1.1.4.2.1.12.1.1.3.1.2.2.3.1.2.1.1.1.2.1.1.2.1.1.1.1.2.4.1.5.1.2.4.3.8.2.2.9.7.2.2.1.2.1.4.6.1.1.6.1.1.2.6.3.1.2.201.300.100
cookie: _pbjs_userid_consent_data=3065744399435763
cookie: _sharedID=a488c654-68de-419f-b936-5cb8e66ac3d4
cookie: __qca=P0-1892718206-1685709275385
cookie: show_cm=no
cookie: pbjs-unifiedid=%7B%22TDID%22%3A%222dc3e055-cffc-4d06-9da4-1904f628f2b7%22%2C%22TDID_LOOKUP%22%3A%22TRUE%22%2C%22TDID_CREATED_AT%22%3A%222023-05-02T10%3A34%3A42%22%7D
cookie: _cc_id=12fdcd42707ca748f18b9611dc2644ce

Response

HTTP/2.0 200

server: nginx
date: Fri, 02 Jun 2023 10:35:10 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate
content-security-policy: frame-ancestors 'self'
expires: 0
pragma: no-cache
x-content-type-options: nosniff
x-frame-options: DENY
content-encoding: gzip
DNS

t.seedtag.com

Request

t.seedtag.com

IN A

Response

t.seedtag.com

IN A

104.18.135.145

t.seedtag.com

IN A

104.18.133.145

t.seedtag.com

IN A

104.18.132.145

t.seedtag.com

IN A

104.18.134.145

t.seedtag.com

IN A

104.18.131.145
DNS

ib.adnxs.com

Request

ib.adnxs.com

IN A

Response

ib.adnxs.com

IN CNAME

g.geogslb.com

g.geogslb.com

IN CNAME

ib.anycast.adnxs.com

ib.anycast.adnxs.com

IN A

185.89.210.180

ib.anycast.adnxs.com

IN A

185.89.210.20

ib.anycast.adnxs.com

IN A

185.89.210.46

ib.anycast.adnxs.com

IN A

185.89.210.153

ib.anycast.adnxs.com

IN A

185.89.210.90

ib.anycast.adnxs.com

IN A

185.89.210.101

ib.anycast.adnxs.com

IN A

185.89.210.82

ib.anycast.adnxs.com

IN A

185.89.210.141

ib.anycast.adnxs.com

IN A

185.89.211.84

ib.anycast.adnxs.com

IN A

185.83.142.19

ib.anycast.adnxs.com

IN A

185.89.211.116

ib.anycast.adnxs.com

IN A

185.89.210.244
DNS

prg.smartadserver.com

Request

prg.smartadserver.com

IN A

Response

prg.smartadserver.com

IN CNAME

prga.smartadserver.com

prga.smartadserver.com

IN CNAME

hb-geo.delivery-prod-sas.akadns.net

hb-geo.delivery-prod-sas.akadns.net

IN CNAME

itx5.smartadserver.com

itx5.smartadserver.com

IN A

185.86.138.32

itx5.smartadserver.com

IN A

185.86.138.122

itx5.smartadserver.com

IN A

185.86.138.123

itx5.smartadserver.com

IN A

185.86.138.124

itx5.smartadserver.com

IN A

185.86.138.121

itx5.smartadserver.com

IN A

185.86.138.16
DNS

adx.adform.net

Request

adx.adform.net

IN A

Response

adx.adform.net

IN CNAME

track-eu.adformnet.akadns.net

track-eu.adformnet.akadns.net

IN A

37.157.6.233

track-eu.adformnet.akadns.net

IN A

37.157.6.254

track-eu.adformnet.akadns.net

IN A

37.157.6.237

track-eu.adformnet.akadns.net

IN A

37.157.6.243
DNS

tlx.3lift.com

Request

tlx.3lift.com

IN A

Response

tlx.3lift.com

IN CNAME

eu-tlx.3lift.com

eu-tlx.3lift.com

IN A

3.68.1.82

eu-tlx.3lift.com

IN A

3.75.50.146

eu-tlx.3lift.com

IN A

54.93.152.197

eu-tlx.3lift.com

IN A

52.57.230.236

eu-tlx.3lift.com

IN A

3.64.229.193

eu-tlx.3lift.com

IN A

3.66.140.118

eu-tlx.3lift.com

IN A

18.185.163.149

eu-tlx.3lift.com

IN A

18.198.8.85
POST

https://prg.smartadserver.com/prebid/v1

Request

POST /prebid/v1 HTTP/1.1
Host: prg.smartadserver.com
Connection: keep-alive
Content-Length: 4183
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Content-Type: text/plain
Accept: */*
Origin: https://1fichier.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://1fichier.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; vs=507391=5478394; TestIfCookie=ok; TestIfCookieP=ok; pid=6880727987372587628; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/1.1 200 OK

content-type: application/json; charset=UTF-8
date: Fri, 02 Jun 2023 10:35:09 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://1fichier.com
cache-control: no-cache,no-store
content-encoding: br
pragma: no-cache
set-cookie: vs=507391=5478395; domain=.smartadserver.com; path=/; secure; samesite=none
set-cookie: pid=6880727987372587628; expires=Sun, 02 Jun 2024 10:35:09 GMT; domain=.smartadserver.com; path=/; secure; samesite=none
transfer-encoding: chunked
vary: Accept-Encoding
vary: Origin
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
DNS

ap.lijit.com

Request

ap.lijit.com

IN A

Response

ap.lijit.com

IN CNAME

vap.lijit.com

vap.lijit.com

IN CNAME

emeas.vap.lijit.com

emeas.vap.lijit.com

IN CNAME

oeu.vap.lijit.com

oeu.vap.lijit.com

IN A

216.52.2.6

oeu.vap.lijit.com

IN A

216.52.2.86

oeu.vap.lijit.com

IN A

216.52.2.30

oeu.vap.lijit.com

IN A

216.52.2.16

oeu.vap.lijit.com

IN A

216.52.2.39

oeu.vap.lijit.com

IN A

216.52.2.91

oeu.vap.lijit.com

IN A

216.52.2.48
DNS

b1h.zemanta.com

Request

b1h.zemanta.com

IN A

Response

b1h.zemanta.com

IN CNAME

b1-use1.zemanta.com

b1-use1.zemanta.com

IN CNAME

zemanta-nychi2.outbrain.org

zemanta-nychi2.outbrain.org

IN CNAME

chidc2.outbrain.org

chidc2.outbrain.org

IN A

64.74.236.159
DNS

prebid.media.net

Request

prebid.media.net

IN A

Response

prebid.media.net

IN A

34.120.63.153
DNS

btlr.sharethrough.com

Request

btlr.sharethrough.com

IN A

Response

btlr.sharethrough.com

IN CNAME

btlr-eu-central-1.sharethrough.com

btlr-eu-central-1.sharethrough.com

IN A

52.57.1.88

btlr-eu-central-1.sharethrough.com

IN A

35.157.138.233

btlr-eu-central-1.sharethrough.com

IN A

18.158.207.197

btlr-eu-central-1.sharethrough.com

IN A

35.158.17.173

btlr-eu-central-1.sharethrough.com

IN A

3.125.251.6

btlr-eu-central-1.sharethrough.com

IN A

52.29.242.209

btlr-eu-central-1.sharethrough.com

IN A

54.93.172.238

btlr-eu-central-1.sharethrough.com

IN A

3.126.109.121
POST

https://ap.lijit.com/rtb/bid?src=prebid_prebid_6.29.3

Request

POST /rtb/bid?src=prebid_prebid_6.29.3 HTTP/1.1
Host: ap.lijit.com
Connection: keep-alive
Content-Length: 1296
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Content-Type: text/plain
Accept: */*
Origin: https://1fichier.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://1fichier.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: ljt_reader=Gv36uBZHZqrz3My2QlqenXmM

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:35:09 GMT
Set-Cookie: ljt_reader=Gv36uBZHZqrz3My2QlqenXmM;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None;
Content-Type: application/json
Access-Control-Allow-Origin: https://1fichier.com
Access-Control-Allow-Methods: GET, POST, DELETE, PUT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type
Vary: Accept-Encoding, User-Agent
Content-Length: 24
X-Sovrn-Pod: ad_ap2ams1
DNS

180.210.89.185.in-addr.arpa

Request

180.210.89.185.in-addr.arpa

IN PTR

Response

180.210.89.185.in-addr.arpa

IN PTR

958bm-nginx-loadbalancermgmtams3adnexusnet
DNS

32.138.86.185.in-addr.arpa

Request

32.138.86.185.in-addr.arpa

IN PTR

Response
DNS

6.2.52.216.in-addr.arpa

Request

6.2.52.216.in-addr.arpa

IN PTR

Response
DNS

88.1.57.52.in-addr.arpa

Request

88.1.57.52.in-addr.arpa

IN PTR

Response

88.1.57.52.in-addr.arpa

IN PTR

ec2-52-57-1-88eu-central-1compute amazonawscom
DNS

159.236.74.64.in-addr.arpa

Request

159.236.74.64.in-addr.arpa

IN PTR

Response

159.236.74.64.in-addr.arpa

IN PTR

chioutbraincom
DNS

ice.360yield.com

Request

ice.360yield.com

IN A

Response

ice.360yield.com

IN CNAME

in-ice.360yield.com

in-ice.360yield.com

IN CNAME

ap-ice.360yield.com

ap-ice.360yield.com

IN A

13.228.204.187

ap-ice.360yield.com

IN A

52.220.81.229

ap-ice.360yield.com

IN A

13.250.162.97

ap-ice.360yield.com

IN A

18.139.81.52

ap-ice.360yield.com

IN A

3.0.22.190

ap-ice.360yield.com

IN A

3.1.66.105

ap-ice.360yield.com

IN A

13.215.109.61

ap-ice.360yield.com

IN A

18.138.82.20
DNS

sync.ipredictive.com

Request

sync.ipredictive.com

IN A

Response

sync.ipredictive.com

IN A

54.166.10.135

sync.ipredictive.com

IN A

54.87.13.148

sync.ipredictive.com

IN A

3.220.81.91

sync.ipredictive.com

IN A

54.83.14.45

sync.ipredictive.com

IN A

52.7.147.27

sync.ipredictive.com

IN A

34.238.29.96

sync.ipredictive.com

IN A

52.203.108.176

sync.ipredictive.com

IN A

54.81.99.181
DNS

pixel-sync.sitescout.com

Request

pixel-sync.sitescout.com

IN A

Response

pixel-sync.sitescout.com

IN CNAME

pixel-a.sitescout.com

pixel-a.sitescout.com

IN A

98.98.134.243
DNS

sync.srv.stackadapt.com

Request

sync.srv.stackadapt.com

IN A

Response

sync.srv.stackadapt.com

IN A

44.195.241.23

sync.srv.stackadapt.com

IN A

35.174.47.147

sync.srv.stackadapt.com

IN A

54.205.93.130

sync.srv.stackadapt.com

IN A

52.55.128.92

sync.srv.stackadapt.com

IN A

52.20.224.27

sync.srv.stackadapt.com

IN A

54.211.72.252

sync.srv.stackadapt.com

IN A

54.227.251.232

sync.srv.stackadapt.com

IN A

52.73.187.111
DNS

ad.turn.com

Request

ad.turn.com

IN A

Response

ad.turn.com

IN CNAME

ad.turn.com.akadns.net

ad.turn.com.akadns.net

IN A

46.228.164.11
GET

https://ad.turn.com/r/cs?pid=49&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /r/cs?pid=49&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ad.turn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://eb2.3lift.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: uid=8117640948868045750

Response

HTTP/2.0 302

p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=8117640948868045750; Domain=.turn.com; Expires=Wed, 29-Nov-2023 10:35:12 GMT; Path=/; Secure; SameSite=None
location: https://eb2.3lift.com/xuid?mid=4771&xuid=8117640948868045750&dongle=d407&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
content-length: 0
date: Fri, 02 Jun 2023 10:35:11 GMT
GET

https://ad.turn.com/r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ad.turn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: uid=8117640948868045750

Response

HTTP/2.0 302

p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV"
cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0
pragma: no-cache
set-cookie: uid=8117640948868045750; Domain=.turn.com; Expires=Wed, 29-Nov-2023 10:35:15 GMT; Path=/; Secure; SameSite=None
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=8117640948868045750&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
content-length: 0
date: Fri, 02 Jun 2023 10:35:15 GMT
DNS

ssbsync.smartadserver.com

Request

ssbsync.smartadserver.com

IN A

Response

ssbsync.smartadserver.com

IN CNAME

ssbsync-geo.smartadserver.com

ssbsync-geo.smartadserver.com

IN CNAME

usersync-geo-global.usersync-prod-sas.akadns.net

usersync-geo-global.usersync-prod-sas.akadns.net

IN CNAME

ssbsync-itx4.smartadserver.com

ssbsync-itx4.smartadserver.com

IN A

185.86.139.93

ssbsync-itx4.smartadserver.com

IN A

185.86.139.103

ssbsync-itx4.smartadserver.com

IN A

185.86.139.104

ssbsync-itx4.smartadserver.com

IN A

185.86.139.102

ssbsync-itx4.smartadserver.com

IN A

185.86.139.94

ssbsync-itx4.smartadserver.com

IN A

185.86.139.101
GET

https://ssbsync.smartadserver.com/api/sync?callerId=43&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /api/sync?callerId=43&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: ssbsync.smartadserver.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://1fichier.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: pbw=%24b%3d16999%3b%24o%3d11100
cookie: TestIfCookie=ok
cookie: TestIfCookieP=ok
cookie: sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1
cookie: sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0
cookie: pid=6880727987372587628
cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK
cookie: vs=507391=5478395

Response

HTTP/2.0 200

content-length: 3199
content-type: text/html
date: Fri, 02 Jun 2023 10:35:12 GMT
DNS

dsp.adfarm1.adition.com

Request

dsp.adfarm1.adition.com

IN A

Response

dsp.adfarm1.adition.com

IN A

85.114.159.93

dsp.adfarm1.adition.com

IN A

85.114.159.118
DNS

rtb-csync.smartadserver.com

Request

rtb-csync.smartadserver.com

IN A

Response

rtb-csync.smartadserver.com

IN CNAME

rtb-csync-geo.usersync-prod-sas.akadns.net

rtb-csync-geo.usersync-prod-sas.akadns.net

IN CNAME

rtb-csync-itx5.smartadserver.com

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.153

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.150

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.151

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.155

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.152

rtb-csync-itx5.smartadserver.com

IN A

185.86.138.154
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fdcm%3Fpid%3D72348060-38ad-4586-8e4f-f1e2a8e789b3%26id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fdcm%3Fpid%3D72348060-38ad-4586-8e4f-f1e2a8e789b3%26id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: same-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssbsync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; vs=507391=5478395

Response

HTTP/1.1 302 Found

content-length: 0
date: Fri, 02 Jun 2023 10:35:12 GMT
cache-control: no-cache,no-store
location: https://s.amazon-adsystem.com/dcm?pid=72348060-38ad-4586-8e4f-f1e2a8e789b3&id=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK; expires=Sun, 02 Jun 2024 10:35:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=49&partneruserid=7240035300118362264&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?partnerid=49&partneruserid=7240035300118362264&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssbsync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; vs=507391=5478395

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:12 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=49:7240035300118362264|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; expires=Sun, 02 Jun 2024 10:35:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=141&partneruserid=8d6P0wV50xeSGuMvDF1tWVY3w

Request

GET /redir/?issi=1&partnerid=141&partneruserid=8d6P0wV50xeSGuMvDF1tWVY3w HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssbsync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; vs=507391=5478395

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:12 GMT
transfer-encoding: chunked
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&google_error=15

Request

GET /redir/?partnerid=76&partneruserid=&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&google_error=15 HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssbsync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:12 GMT
transfer-encoding: chunked
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fdcm%3Fpid%3D72348060-38ad-4586-8e4f-f1e2a8e789b3%26id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fdcm%3Fpid%3D72348060-38ad-4586-8e4f-f1e2a8e789b3%26id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: same-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK

Response

HTTP/1.1 302 Found

content-length: 0
date: Fri, 02 Jun 2023 10:35:14 GMT
cache-control: no-cache,no-store
location: https://s.amazon-adsystem.com/dcm?pid=72348060-38ad-4586-8e4f-f1e2a8e789b3&id=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=76:GOOGLE_HOSTED_SI|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK; expires=Sun, 02 Jun 2024 10:35:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: same-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK

Response

HTTP/1.1 302 Found

content-length: 0
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
location: https://match.sharethrough.com/sync/v1?source_id=98KUz37ype9D3X2sf9ovgeTt&source_user_id=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0; expires=Sun, 02 Jun 2024 10:35:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=22&partneruserid=1897977468389386522&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=22&partneruserid=1897977468389386522&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=22:1897977468389386522|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0; expires=Sun, 02 Jun 2024 10:35:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=141&partneruserid=8d6P0wV50xeSGuMvDF1tWVY3w

Request

GET /redir/?issi=1&partnerid=141&partneruserid=8d6P0wV50xeSGuMvDF1tWVY3w HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=22:1897977468389386522|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
transfer-encoding: chunked
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=124&partneruserid=e4d2d3a5-65f1-4501-8509-632e10455140&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

Request

GET /redir/?issi=1&partnerid=124&partneruserid=e4d2d3a5-65f1-4501-8509-632e10455140&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1 HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0; expires=Sun, 02 Jun 2024 10:35:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=117&partneruserid=a196af075481adeaad7c11b2e5aa3007&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=117&partneruserid=a196af075481adeaad7c11b2e5aa3007&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|117:a196af075481adeaad7c11b2e5aa3007|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0; expires=Sun, 02 Jun 2024 10:35:16 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=33&partneruserid=ZHnFvVqT2oy7TuXID9kl3wAA%265292

Request

GET /redir/?issi=1&partnerid=33&partneruserid=ZHnFvVqT2oy7TuXID9kl3wAA%265292 HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|117:a196af075481adeaad7c11b2e5aa3007|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
transfer-encoding: chunked
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=80&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&partneruserid=ifW2D9z041WS9LABh_WsV96gtgaSo-QOhvCsT7gx

Request

GET /redir/?partnerid=80&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&partneruserid=ifW2D9z041WS9LABh_WsV96gtgaSo-QOhvCsT7gx HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|117:a196af075481adeaad7c11b2e5aa3007|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|80:ifW2D9z041WS9LABh_WsV96gtgaSo-QOhvCsT7gx|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|117:a196af075481adeaad7c11b2e5aa3007|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0; expires=Sun, 02 Jun 2024 10:35:16 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: same-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssbsync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; csync=94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; vs=507391=5478395

Response

HTTP/1.1 302 Found

content-length: 0
date: Fri, 02 Jun 2023 10:35:12 GMT
cache-control: no-cache,no-store
location: https://cm.g.doubleclick.net/pixel?google_nid=smartrtb_dbm&google_cm&google_sc&google_hm=Njg4MDcyNzk4NzM3MjU4NzYyOA==&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
pragma: no-cache
set-cookie: csync=76:GOOGLE_HOSTED_SI|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK; expires=Sun, 02 Jun 2024 10:35:13 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=8117640948868045750&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=32&partneruserid=8117640948868045750&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=32:8117640948868045750|76:GOOGLE_HOSTED_SI|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK; expires=Sun, 02 Jun 2024 10:35:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=75&issi=1&partneruserid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?partnerid=75&issi=1&partneruserid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=75:2dc3e055-cffc-4d06-9da4-1904f628f2b7|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0; expires=Sun, 02 Jun 2024 10:35:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=133&partneruserid=355bd4a3

Request

GET /redir/?issi=1&partnerid=133&partneruserid=355bd4a3 HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
transfer-encoding: chunked
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=91&partneruserid=00CDED12-08DE-41D7-A730-899A187EB7E5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=91&partneruserid=00CDED12-08DE-41D7-A730-899A187EB7E5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK; expires=Sun, 02 Jun 2024 10:35:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=49&partneruserid=7240035300118362264&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?partnerid=49&partneruserid=7240035300118362264&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=49:7240035300118362264|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0; expires=Sun, 02 Jun 2024 10:35:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=86&partneruserid=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=86&partneruserid=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=76:GOOGLE_HOSTED_SI|86:4894631733703052721|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0; expires=Sun, 02 Jun 2024 10:35:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=25&partneruserid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=25&partneruserid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=25:86a06479-c5be-4e00-809d-041df6b6e2f1|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0; expires=Sun, 02 Jun 2024 10:35:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=66&partneruserid=092722040797ccbf620f956a&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=66&partneruserid=092722040797ccbf620f956a&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0; expires=Sun, 02 Jun 2024 10:35:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?partnerid=147&partneruserid=bc21730f-1096-4796-bd58-da49fbcb0fc9&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?partnerid=147&partneruserid=bc21730f-1096-4796-bd58-da49fbcb0fc9&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|117:a196af075481adeaad7c11b2e5aa3007|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|117:a196af075481adeaad7c11b2e5aa3007|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0|147:bc21730f-1096-4796-bd58-da49fbcb0fc9; expires=Sun, 02 Jun 2024 10:35:16 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=92&partneruserid=pghBpt3yfaU1&ev=1&pid=560288&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

Request

GET /redir/?issi=1&partnerid=92&partneruserid=pghBpt3yfaU1&ev=1&pid=560288&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1 HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|117:a196af075481adeaad7c11b2e5aa3007|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0|147:bc21730f-1096-4796-bd58-da49fbcb0fc9

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:16 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|92:pghBpt3yfaU1|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|117:a196af075481adeaad7c11b2e5aa3007|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0|147:bc21730f-1096-4796-bd58-da49fbcb0fc9; expires=Sun, 02 Jun 2024 10:35:16 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
GET

https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=79&partneruserid=e84a31d9-85d9-4096-8ac9-074966796b19&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /redir/?issi=1&partnerid=79&partneruserid=e84a31d9-85d9-4096-8ac9-074966796b19&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: rtb-csync.smartadserver.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: pbw=%24b%3d16999%3b%24o%3d11100; TestIfCookie=ok; TestIfCookieP=ok; sasd2=q=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0&c=1&l=1251548209&lo=558070541&lt=638212988763178871&o=1; sasd=%24qc%3D1307002411%3B%24ql%3DHigh%3B%24qpc%3D1101%3B%24qt%3D212_914_28045t%3B%24dma%3D0; pid=6880727987372587628; vs=507391=5478395; csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|91:00CDED12-08DE-41D7-A730-899A187EB7E5|92:pghBpt3yfaU1|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|117:a196af075481adeaad7c11b2e5aa3007|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0|147:bc21730f-1096-4796-bd58-da49fbcb0fc9

Response

HTTP/1.1 200 OK

content-type: image/gif
date: Fri, 02 Jun 2023 10:35:15 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: csync=66:092722040797ccbf620f956a|76:GOOGLE_HOSTED_SI|79:e84a31d9-85d9-4096-8ac9-074966796b19|91:00CDED12-08DE-41D7-A730-899A187EB7E5|92:pghBpt3yfaU1|94:ZHnFvwAEdQe2WgAD|100:7ebef501-c4ef-4f2a-a255-33f2007c1273|113:RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004|116:ha0P7kgew5AP6IcniAHr|117:a196af075481adeaad7c11b2e5aa3007|124:e4d2d3a5-65f1-4501-8509-632e10455140|127:AADPM07I84wAACFJuFXTrA|130:e2850144-dcba-4a6f-837e-990adcbcef1a|134:OB_OK|135:TAM_OK|139:0|147:bc21730f-1096-4796-bd58-da49fbcb0fc9; expires=Sun, 02 Jun 2024 10:35:16 GMT; domain=smartadserver.com; path=/; SameSite=None; secure
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
DNS

243.134.98.98.in-addr.arpa

Request

243.134.98.98.in-addr.arpa

IN PTR

Response
DNS

135.10.166.54.in-addr.arpa

Request

135.10.166.54.in-addr.arpa

IN PTR

Response

135.10.166.54.in-addr.arpa

IN PTR

ec2-54-166-10-135 compute-1 amazonawscom
DNS

23.241.195.44.in-addr.arpa

Request

23.241.195.44.in-addr.arpa

IN PTR

Response

23.241.195.44.in-addr.arpa

IN PTR

ec2-44-195-241-23 compute-1 amazonawscom
DNS

93.139.86.185.in-addr.arpa

Request

93.139.86.185.in-addr.arpa

IN PTR

Response
DNS

128.232.115.3.in-addr.arpa

Request

128.232.115.3.in-addr.arpa

IN PTR

Response

128.232.115.3.in-addr.arpa

IN PTR

ec2-3-115-232-128ap-northeast-1compute amazonawscom
DNS

153.138.86.185.in-addr.arpa

Request

153.138.86.185.in-addr.arpa

IN PTR

Response
DNS

pixel.mathtag.com

Request

pixel.mathtag.com

IN A

Response

pixel.mathtag.com

IN CNAME

pixel.mathtag.com.edgekey.net

pixel.mathtag.com.edgekey.net

IN CNAME

e6791.b.akamaiedge.net

e6791.b.akamaiedge.net

IN A

104.123.40.204
DNS

secure.adnxs.com

Request

secure.adnxs.com

IN A

Response

secure.adnxs.com

IN CNAME

g.geogslb.com

g.geogslb.com

IN CNAME

ib.anycast.adnxs.com

ib.anycast.adnxs.com

IN A

37.252.171.84

ib.anycast.adnxs.com

IN A

37.252.172.123

ib.anycast.adnxs.com

IN A

37.252.171.21

ib.anycast.adnxs.com

IN A

37.252.171.22

ib.anycast.adnxs.com

IN A

37.252.173.215

ib.anycast.adnxs.com

IN A

37.252.171.85

ib.anycast.adnxs.com

IN A

37.252.171.52

ib.anycast.adnxs.com

IN A

37.252.171.149

ib.anycast.adnxs.com

IN A

37.252.171.53
DNS

ap-ice.360yield.com

Request

ap-ice.360yield.com

IN A

Response

ap-ice.360yield.com

IN A

3.1.171.8

ap-ice.360yield.com

IN A

13.250.162.97

ap-ice.360yield.com

IN A

13.228.204.187

ap-ice.360yield.com

IN A

18.138.198.66

ap-ice.360yield.com

IN A

3.0.22.190

ap-ice.360yield.com

IN A

54.169.202.70

ap-ice.360yield.com

IN A

18.139.81.52

ap-ice.360yield.com

IN A

3.1.66.105
DNS

match.sharethrough.com

Request

match.sharethrough.com

IN A

Response

match.sharethrough.com

IN CNAME

match-ap-southeast-1-ecs.sharethrough.com

match-ap-southeast-1-ecs.sharethrough.com

IN A

18.139.129.88

match-ap-southeast-1-ecs.sharethrough.com

IN A

52.77.157.116

match-ap-southeast-1-ecs.sharethrough.com

IN A

54.251.48.176

match-ap-southeast-1-ecs.sharethrough.com

IN A

3.1.70.95

match-ap-southeast-1-ecs.sharethrough.com

IN A

3.0.77.19

match-ap-southeast-1-ecs.sharethrough.com

IN A

52.77.149.253

match-ap-southeast-1-ecs.sharethrough.com

IN A

54.169.120.25

match-ap-southeast-1-ecs.sharethrough.com

IN A

52.76.239.241
DNS

triplelift-match.dotomi.com

Request

triplelift-match.dotomi.com

IN A

Response

triplelift-match.dotomi.com

IN CNAME

bfp.global.dual.dotomi.weighted.com.akadns.net

bfp.global.dual.dotomi.weighted.com.akadns.net

IN A

63.215.202.137
DNS

rtb.mfadsrvr.com

Request

rtb.mfadsrvr.com

IN A

Response

rtb.mfadsrvr.com

IN CNAME

pool.dorpat.iponweb.net

pool.dorpat.iponweb.net

IN CNAME

dorpat.geo.iponweb.net

dorpat.geo.iponweb.net

IN CNAME

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

35.157.129.96

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

35.156.245.203

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.126.33.170

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.120.3.26

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.125.193.234

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.127.26.106

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

3.120.43.54

elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com

IN A

35.156.93.58
DNS

us.creativecdn.com

Request

us.creativecdn.com

IN A

Response

us.creativecdn.com

IN A

185.184.10.30
DNS

rtb.adentifi.com

Request

rtb.adentifi.com

IN A

Response

rtb.adentifi.com

IN A

54.204.181.100

rtb.adentifi.com

IN A

35.173.115.238

rtb.adentifi.com

IN A

34.192.101.54

rtb.adentifi.com

IN A

54.144.147.217

rtb.adentifi.com

IN A

34.232.49.172

rtb.adentifi.com

IN A

34.206.101.164

rtb.adentifi.com

IN A

54.165.35.122

rtb.adentifi.com

IN A

52.45.162.216
DNS

csync.smartadserver.com

Request

csync.smartadserver.com

IN A

Response

csync.smartadserver.com

IN CNAME

csync.smartadserver.com.edgesuite.net

csync.smartadserver.com.edgesuite.net

IN CNAME

a577.dscb.akamai.net

a577.dscb.akamai.net

IN A

173.222.108.225

a577.dscb.akamai.net

IN A

173.222.108.234
GET

https://us.creativecdn.com/cm-notify?pi=triplelift&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /cm-notify?pi=triplelift&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: us.creativecdn.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://eb2.3lift.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: u=rpBC7sy2kpGA66dzZidB
cookie: ts=1685702077

Response

HTTP/2.0 302

date: Fri, 02 Jun 2023 10:35:15 GMT
location: https://eb2.3lift.com/xuid?mid=6547&xuid=rpBC7sy2kpGA66dzZidB&dongle=45fg&pi=triplelift&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
cache-control: no-cache, no-store, must-revalidate, private, max-age=0
pragma: no-cache
date: Fri, 02 Jun 2023 10:35:15 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 0
DNS

ssum-sec.casalemedia.com

Request

ssum-sec.casalemedia.com

IN A

Response

ssum-sec.casalemedia.com

IN CNAME

um.indexww.com.akadns.net

um.indexww.com.akadns.net

IN CNAME

u12.lb.indexww.com

u12.lb.indexww.com

IN CNAME

fr-xn.lb.indexww.com

fr-xn.lb.indexww.com

IN A

185.80.39.216
GET

https://ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: ssum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:35:15 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: text/html
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 1755
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:35:15 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:35:15 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
DNS

x.bidswitch.net

Request

x.bidswitch.net

IN A

Response

x.bidswitch.net

IN CNAME

user-data-apac-jp.bidswitch.net

user-data-apac-jp.bidswitch.net

IN A

35.213.12.39
DNS

bh.contextweb.com

Request

bh.contextweb.com

IN A

Response

bh.contextweb.com

IN CNAME

sjc-bh.contextweb.com

sjc-bh.contextweb.com

IN CNAME

sjc-direct-bgp.contextweb.com

sjc-direct-bgp.contextweb.com

IN A

74.214.196.131
DNS

visitor.omnitagjs.com

Request

visitor.omnitagjs.com

IN A

Response

visitor.omnitagjs.com

IN CNAME

visitor-fra02.omnitagjs.com

visitor-fra02.omnitagjs.com

IN A

185.255.84.153

visitor-fra02.omnitagjs.com

IN A

185.255.84.152
DNS

id.rlcdn.com

Request

id.rlcdn.com

IN A

Response

id.rlcdn.com

IN A

35.190.60.146
DNS

dis.criteo.com

Request

dis.criteo.com

IN A

Response

dis.criteo.com

IN CNAME

widget.sg1.vip.prod.criteo.com

widget.sg1.vip.prod.criteo.com

IN A

182.161.73.146
DNS

csync.loopme.me

Request

csync.loopme.me

IN A

Response

csync.loopme.me

IN CNAME

envoy1.envoy-csync1.core-b8mf.ov1o.com

envoy1.envoy-csync1.core-b8mf.ov1o.com

IN A

35.214.153.92
DNS

id5-sync.com

Request

id5-sync.com

IN A

Response

id5-sync.com

IN A

162.19.138.117

id5-sync.com

IN A

141.95.98.64

id5-sync.com

IN A

162.19.138.116

id5-sync.com

IN A

141.95.98.65

id5-sync.com

IN A

162.19.138.82

id5-sync.com

IN A

162.19.138.120

id5-sync.com

IN A

162.19.138.119

id5-sync.com

IN A

162.19.138.118

id5-sync.com

IN A

141.95.33.111

id5-sync.com

IN A

162.19.138.83
GET

https://visitor.omnitagjs.com/visitor/bsync?uid=627080440e659fbe0f85333c665ae1de&name=SMARTADSERVER&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D117%26partneruserid%3DPARTNER_USER_ID%26gdpr%3DGDPR%26gdpr_consent%3DGDPR_CONSENT&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /visitor/bsync?uid=627080440e659fbe0f85333c665ae1de&name=SMARTADSERVER&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D117%26partneruserid%3DPARTNER_USER_ID%26gdpr%3DGDPR%26gdpr_consent%3DGDPR_CONSENT&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: visitor.omnitagjs.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007

Response

HTTP/2.0 307

cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
expires: 0
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=117&partneruserid=a196af075481adeaad7c11b2e5aa3007&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=a196af075481adeaad7c11b2e5aa3007; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Fri, 02 Jun 2023 10:35:15 GMT
content-length: 0
x-envoy-upstream-service-time: 35
server: ayl-lb-fra02
GET

https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: bh.contextweb.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: INGRESSCOOKIE=062d6aa72b582620
cookie: V=pghBpt3yfaU1
cookie: gdpr=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
cookie: pb_rtb_ev=3-1kxh|7dN.0.AADPM07I84wAACFJuFXTrA

Response

HTTP/2.0 302

p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT"
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version
cw-server: bh-deployment-5c88bf657c-mxgr9
cache-control: private, max-age=0, no-cache, no-store
expires: -1
content-language: en-US
set-cookie: V=pghBpt3yfaU1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Mon, 27-May-2024 10:35:16 GMT;Max-Age=31104000;SameSite=None
set-cookie: gdpr=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 02-Jul-2023 10:35:16 GMT;Max-Age=2592000;SameSite=None
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=92&partneruserid=pghBpt3yfaU1&ev=1&pid=560288&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1
server: Jetty(10.0.14)
strict-transport-security: max-age=15768000
GET

https://csync.loopme.me/?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: csync.loopme.me
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: viewer_token=e4d2d3a5-65f1-4501-8509-632e10455140

Response

HTTP/2.0 307

set-cookie: viewer_token=e4d2d3a5-65f1-4501-8509-632e10455140; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Sat, 02-Sep-2023 10:35:15 GMT; SameSite=None
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=124&partneruserid=e4d2d3a5-65f1-4501-8509-632e10455140&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1
content-length: 0
date: Fri, 02 Jun 2023 10:35:15 GMT
server: _
GET

https://dis.criteo.com/dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/2.0
host: dis.criteo.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://csync.smartadserver.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: uid=e84a31d9-85d9-4096-8ac9-074966796b19

Response

HTTP/2.0 302

date: Fri, 02 Jun 2023 10:35:16 GMT
server: Kestrel
content-length: 0
cache-control: no-cache
pragma: no-cache
expires: Fri, 02 Jun 2023 00:00:00 GMT
location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=79&partneruserid=e84a31d9-85d9-4096-8ac9-074966796b19&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
x-errorlevel: 0
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
cross-origin-resource-policy: cross-origin
server-processing-duration-in-ticks: 876545
strict-transport-security: max-age=31536000; preload;
GET

https://id5-sync.com/i/102/9.gif?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /i/102/9.gif?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: callback=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#2; cf=; cip=; cnac=; car=; gdpr=; 3pi=18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#3; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:35:15 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: 3pi=18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:35:15 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=gif; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:15 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=102; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:15 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=8; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:15 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=2; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:15 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=1|CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:15 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:15 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://match.prod.bidr.io/cookie-sync/id5?us_privacy=
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:35:15 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/k/155.gif?id5AccountNum=155&numCascadesAllowed=9&puid=AADPM07I84wAACFJuFXTrA

Request

GET /k/155.gif?id5AccountNum=155&numCascadesAllowed=9&puid=AADPM07I84wAACFJuFXTrA HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: callback=; 3pi=18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#3; cf=gif; cip=102; cnac=8; car=2; gdpr=1|CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014|155#1685702116353#197682089#AADPM07I84wAACFJuFXTrA; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:35:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://uipglob.semasio.net/id5/1/get?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F7%2F3.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:35:16 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/c/102/112/7/3.gif?puid=654C09E0D22D16EA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /c/102/112/7/3.gif?puid=654C09E0D22D16EA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: callback=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#3; 3pi=18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014|155#1685702116353#197682089#AADPM07I84wAACFJuFXTrA; cf=; cip=; cnac=; car=; gdpr=

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=112#1685702116738#-11291229#654C09E0D22D16EA|18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014|155#1685702116353#197682089#AADPM07I84wAACFJuFXTrA; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:35:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://pm.w55c.net/ping_match.gif?st=ID5&rurl=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F163%2F6%2F4.gif%3Fpuid%3D_wfivefivec_%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:35:16 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/c/102/163/6/4.gif?puid=L48aDcU01Q527l5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /c/102/163/6/4.gif?puid=L48aDcU01Q527l5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: callback=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#3; cf=; cip=; cnac=; car=; gdpr=; 3pi=112#1685702116738#-11291229#654C09E0D22D16EA|18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014|155#1685702116353#197682089#AADPM07I84wAACFJuFXTrA

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=112#1685702116738#-11291229#654C09E0D22D16EA|18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|163#1685702116805#210594296|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014|155#1685702116353#197682089#AADPM07I84wAACFJuFXTrA; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:35:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F104%2F5%2F5.gif%3Fpuid%3D%24%7BBSW_UUID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:35:16 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/c/102/104/5/5.gif?puid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /c/102/104/5/5.gif?puid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: callback=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#3; cf=; cip=; cnac=; car=; gdpr=; 3pi=112#1685702116738#-11291229#654C09E0D22D16EA|18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|163#1685702116805#210594296|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|123#1685702085906#1790409014|155#1685702116353#197682089#AADPM07I84wAACFJuFXTrA

Response

HTTP/1.1 302

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=112#1685702116738#-11291229#654C09E0D22D16EA|18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|163#1685702116805#210594296|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|104#1685702117115#1297568688#c740f271-9531-49c0-be18-37c71c1598ed|123#1685702085906#1790409014|155#1685702116353#197682089#AADPM07I84wAACFJuFXTrA; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:35:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
location: https://c1.adform.net/serving/cookie/match?party=1135&callback=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F10%2F4%2F6.gif%3Fpuid%3D%5Badformuid%5D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:35:16 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
GET

https://id5-sync.com/c/102/10/4/6.gif?puid=1897977468389386522&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

Request

GET /c/102/10/4/6.gif?puid=1897977468389386522&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA HTTP/1.1
Host: id5-sync.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://csync.smartadserver.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: callback=; id5=7bca94b3-0cf3-708a-8890-38eecc177110#1685702081001#3; cf=; cip=; cnac=; car=; gdpr=; 3pi=112#1685702116738#-11291229#654C09E0D22D16EA|18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|163#1685702116805#210594296|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|104#1685702117115#1297568688#c740f271-9531-49c0-be18-37c71c1598ed|123#1685702085906#1790409014|155#1685702116353#197682089#AADPM07I84wAACFJuFXTrA

Response

HTTP/1.1 200

vary: Origin
vary: Access-Control-Request-Method
vary: Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: 3pi=112#1685702116738#-11291229#654C09E0D22D16EA|18#1685702087658#88908163|2#1685702087747#1469410657#4894631733703052721|3#1685702086691#-1443033671#86a06479-c5be-4e00-809d-041df6b6e2f1|163#1685702116805#210594296|102#1685702081431#1307457184|264#1685702082255#1322488552#2dc3e055-cffc-4d06-9da4-1904f628f2b7|104#1685702117115#1297568688#c740f271-9531-49c0-be18-37c71c1598ed|10#1685702117190#1561818262#1897977468389386522|123#1685702085906#1790409014|155#1685702116353#197682089#AADPM07I84wAACFJuFXTrA; Max-Age=7776000; Expires=Thu, 31-Aug-2023 10:35:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cf=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cip=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: cnac=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: car=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: gdpr=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
set-cookie: callback=; Max-Age=300; Expires=Fri, 02-Jun-2023 10:40:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
content-type: image/gif;charset=UTF-8
transfer-encoding: chunked
date: Fri, 02 Jun 2023 10:35:16 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
DNS

dsum-sec.casalemedia.com

Request

dsum-sec.casalemedia.com

IN A

Response

dsum-sec.casalemedia.com

IN CNAME

um.indexww.com.akadns.net

um.indexww.com.akadns.net

IN CNAME

u12.lb.indexww.com

u12.lb.indexww.com

IN CNAME

fr-xn.lb.indexww.com

fr-xn.lb.indexww.com

IN A

185.80.39.216
DNS

euexchangesync.digitaleast.mobi

Request

euexchangesync.digitaleast.mobi

IN A

Response

euexchangesync.digitaleast.mobi

IN A

34.95.81.168
DNS

dpm.demdex.net

Request

dpm.demdex.net

IN A

Response

dpm.demdex.net

IN CNAME

gslb-2.demdex.net

gslb-2.demdex.net

IN CNAME

edge-irl1.demdex.net

edge-irl1.demdex.net

IN CNAME

dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com

dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com

IN A

52.19.115.14

dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com

IN A

54.171.19.100

dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com

IN A

54.229.40.109

dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com

IN A

52.215.230.29

dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com

IN A

54.73.43.225

dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com

IN A

34.242.195.86

dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com

IN A

34.251.115.24

dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com

IN A

52.51.52.84
GET

https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZHnFvwAEdQe2WgAD

Request

GET /rum?cm_dsp_id=88&external_user_id=ZHnFvwAEdQe2WgAD HTTP/1.1
Host: dsum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:35:16 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 43
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:35:16 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:35:16 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
GET

https://dsum-sec.casalemedia.com/crum?cm_dsp_id=11&external_user_id=531c7070-348f-4271-885a-cfb88c0d4895

Request

GET /crum?cm_dsp_id=11&external_user_id=531c7070-348f-4271-885a-cfb88c0d4895 HTTP/1.1
Host: dsum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:35:16 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 43
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:35:16 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:35:16 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=499
Connection: Keep-Alive
GET

https://dsum-sec.casalemedia.com/crum?cm_dsp_id=130&external_user_id=AADPM07I84wAACFJuFXTrA&expiration=1686911716

Request

GET /crum?cm_dsp_id=130&external_user_id=AADPM07I84wAACFJuFXTrA&expiration=1686911716 HTTP/1.1
Host: dsum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:35:16 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 43
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:35:16 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:35:16 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=498
Connection: Keep-Alive
GET

https://dsum-sec.casalemedia.com/crum?cm_dsp_id=46&external_user_id=4894631733703052721

Request

GET /crum?cm_dsp_id=46&external_user_id=4894631733703052721 HTTP/1.1
Host: dsum-sec.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:35:16 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 43
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:35:16 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:35:16 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
GET

https://euexchangesync.digitaleast.mobi/usersync/index.gif?us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid=

Request

GET /usersync/index.gif?us_privacy=&gdpr=&gdpr_consent=&gpp=&gpp_sid= HTTP/2.0
host: euexchangesync.digitaleast.mobi
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssum-sec.casalemedia.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

84.171.252.37.in-addr.arpa

Request

84.171.252.37.in-addr.arpa

IN PTR

Response

84.171.252.37.in-addr.arpa

IN PTR

1002bm-nginx-loadbalancermgmtfra1adnexusnet
DNS

204.40.123.104.in-addr.arpa

Request

204.40.123.104.in-addr.arpa

IN PTR

Response

204.40.123.104.in-addr.arpa

IN PTR

a104-123-40-204deploystaticakamaitechnologiescom
DNS

137.202.215.63.in-addr.arpa

Request

137.202.215.63.in-addr.arpa

IN PTR

Response

137.202.215.63.in-addr.arpa

IN PTR

ams01-nessy-float1dotomicom
DNS

96.129.157.35.in-addr.arpa

Request

96.129.157.35.in-addr.arpa

IN PTR

Response

96.129.157.35.in-addr.arpa

IN PTR

ec2-35-157-129-96eu-central-1compute amazonawscom
DNS

225.108.222.173.in-addr.arpa

Request

225.108.222.173.in-addr.arpa

IN PTR

Response

225.108.222.173.in-addr.arpa

IN PTR

a173-222-108-225deploystaticakamaitechnologiescom
DNS

30.10.184.185.in-addr.arpa

Request

30.10.184.185.in-addr.arpa

IN PTR

Response

30.10.184.185.in-addr.arpa

IN PTR

ip-185-184-10-30rtbhousenet
DNS

100.181.204.54.in-addr.arpa

Request

100.181.204.54.in-addr.arpa

IN PTR

Response

100.181.204.54.in-addr.arpa

IN PTR

ec2-54-204-181-100 compute-1 amazonawscom
DNS

88.129.139.18.in-addr.arpa

Request

88.129.139.18.in-addr.arpa

IN PTR

Response

88.129.139.18.in-addr.arpa

IN PTR

ec2-18-139-129-88ap-southeast-1compute amazonawscom
DNS

153.84.255.185.in-addr.arpa

Request

153.84.255.185.in-addr.arpa

IN PTR

Response
DNS

117.138.19.162.in-addr.arpa

Request

117.138.19.162.in-addr.arpa

IN PTR

Response

117.138.19.162.in-addr.arpa

IN PTR

ns31533568 ip-162-19-138eu
DNS

168.81.95.34.in-addr.arpa

Request

168.81.95.34.in-addr.arpa

IN PTR

Response

168.81.95.34.in-addr.arpa

IN PTR

168819534bcgoogleusercontentcom
DNS

14.115.19.52.in-addr.arpa

Request

14.115.19.52.in-addr.arpa

IN PTR

Response

14.115.19.52.in-addr.arpa

IN PTR

ec2-52-19-115-14 eu-west-1compute amazonawscom
DNS

39.12.213.35.in-addr.arpa

Request

39.12.213.35.in-addr.arpa

IN PTR

Response

39.12.213.35.in-addr.arpa

IN PTR

391221335bcgoogleusercontentcom
DNS

a.sportradarserving.com

Request

a.sportradarserving.com

IN A

Response

a.sportradarserving.com

IN CNAME

zagreb.geo.iponweb.net

zagreb.geo.iponweb.net

IN CNAME

pool-jp.zagreb.iponweb.net

pool-jp.zagreb.iponweb.net

IN A

35.213.93.179
GET

https://a.sportradarserving.com/sync?ssp=bidswitch&bidswitch_ssp_id=index

Request

GET /sync?ssp=bidswitch&bidswitch_ssp_id=index HTTP/2.0
host: a.sportradarserving.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssum-sec.casalemedia.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://a.sportradarserving.com/ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=index

Request

GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=index HTTP/2.0
host: a.sportradarserving.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://ssum-sec.casalemedia.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: zuuid=4ce8e7bf-a943-41d1-9b59-3e717bd55105
cookie: c=1685702117
cookie: zuuid_lu=1685702117
DNS

179.93.213.35.in-addr.arpa

Request

179.93.213.35.in-addr.arpa

IN PTR

Response

179.93.213.35.in-addr.arpa

IN PTR

1799321335bcgoogleusercontentcom
DNS

63.13.109.52.in-addr.arpa

Request

63.13.109.52.in-addr.arpa

IN PTR

Response
DNS

pixel.tapad.com

Request

pixel.tapad.com

IN A

Response

pixel.tapad.com

IN A

34.111.113.62
GET

https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=12fdcd42707ca748f18b9611dc2644ce&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22106.0.5249.119%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22106.0.5249.119%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%2299.0.0.0%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D

Request

GET /idsync/ex/receive?partner_id=LOTAME&partner_device_id=12fdcd42707ca748f18b9611dc2644ce&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22106.0.5249.119%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22106.0.5249.119%22%7D%2C%7B%22brand%22%3A%22Not%3BA%5Cu003dBrand%22%2C%22version%22%3A%2299.0.0.0%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/2.0
host: pixel.tapad.com
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://bcp.crwdcntrl.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

dsum.casalemedia.com

Request

dsum.casalemedia.com

IN A

Response

dsum.casalemedia.com

IN CNAME

um.indexww.com.akadns.net

um.indexww.com.akadns.net

IN CNAME

u12.lb.indexww.com

u12.lb.indexww.com

IN CNAME

fr-xn.lb.indexww.com

fr-xn.lb.indexww.com

IN A

185.80.39.216
GET

https://dsum.casalemedia.com/rum?cm_dsp_id=51&external_user_id=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=&gdpr_consent=&us_privacy=

Request

GET /rum?cm_dsp_id=51&external_user_id=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1
Host: dsum.casalemedia.com
Connection: keep-alive
sec-ch-ua: "Chromium";v="106", "Google Chrome";v="106", "Not;A=Brand";v="99"
sec-ch-ua-mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://ssum-sec.casalemedia.com/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: CMPS=5292; CMID=ZHnFvVqT2oy7TuXID9kl3wAA; CMPRO=5292

Response

HTTP/1.1 200 OK

Date: Fri, 02 Jun 2023 10:35:18 GMT
Server: Apache
Cache-Control: no-cache
Content-Type: image/gif
Expires: 0
P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
Pragma: no-cache
Content-Length: 43
Set-Cookie: CMID=ZHnFvVqT2oy7TuXID9kl3wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 01 Jun 2024 10:35:18 GMT; Max-Age=31536000; Secure; SameSite=None
Set-Cookie: CMPRO=5292; Path=/; Domain=casalemedia.com; Expires=Thu, 31 Aug 2023 10:35:18 GMT; Max-Age=7776000; Secure; SameSite=None
Keep-Alive: timeout=1, max=500
Connection: Keep-Alive
DNS

62.113.111.34.in-addr.arpa

Request

62.113.111.34.in-addr.arpa

IN PTR

Response

62.113.111.34.in-addr.arpa

IN PTR

6211311134bcgoogleusercontentcom
DNS

50.4.107.13.in-addr.arpa

Request

50.4.107.13.in-addr.arpa

IN PTR

Response
DNS

beacons.gcp.gvt2.com

Request

beacons.gcp.gvt2.com

IN A

Response

beacons.gcp.gvt2.com

IN CNAME

beacons-handoff.gcp.gvt2.com

beacons-handoff.gcp.gvt2.com

IN A

172.217.169.35
POST

https://beacons.gcp.gvt2.com/domainreliability/upload

Request

POST /domainreliability/upload HTTP/2.0
host: beacons.gcp.gvt2.com
content-length: 272
content-type: application/json; charset=utf-8
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
POST

https://beacons.gcp.gvt2.com/domainreliability/upload

Request

POST /domainreliability/upload HTTP/2.0
host: beacons.gcp.gvt2.com
content-length: 273
content-type: application/json; charset=utf-8
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
POST

https://beacons.gvt2.com/domainreliability/upload

Request

POST /domainreliability/upload HTTP/2.0
host: beacons.gvt2.com
content-length: 272
content-type: application/json; charset=utf-8
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

e2c22.gcp.gvt2.com

Request

e2c22.gcp.gvt2.com

IN A

Response

e2c22.gcp.gvt2.com

IN A

34.95.145.254
POST

https://e2c22.gcp.gvt2.com/nel/

Request

POST /nel/ HTTP/2.0
host: e2c22.gcp.gvt2.com
content-length: 272
content-type: application/json; charset=utf-8
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 204

date: Fri, 02 Jun 2023 10:35:51 GMT
DNS

beacons.gvt2.com

Request

beacons.gvt2.com

IN A

Response

beacons.gvt2.com

IN A

172.217.169.35
DNS

35.169.217.172.in-addr.arpa

Request

35.169.217.172.in-addr.arpa

IN PTR

Response

35.169.217.172.in-addr.arpa

IN PTR

lhr48s08-in-f31e100net
DNS

254.145.95.34.in-addr.arpa

Request

254.145.95.34.in-addr.arpa

IN PTR

Response

254.145.95.34.in-addr.arpa

IN PTR

2541459534bcgoogleusercontentcom

40.77.2.164:443

276 B
6
52.152.110.14:443

208 B
4
5.39.224.140:443

1fichier.com

tls, http2

chrome.exe

1.2kB
4.5kB
10
12
5.39.224.140:443

https://1fichier.com/qr.pl?do=0.71buuig24j82m9ubo7dw&s=1

tls, http2

chrome.exe

2.1kB
9.6kB
16
17

HTTP Request

GET https://1fichier.com/?71buuig24j82m9ubo7dw

HTTP Response

200

HTTP Request

GET https://1fichier.com/qr.pl?do=0.71buuig24j82m9ubo7dw&s=1

HTTP Response

200
5.39.224.141:443

https://img.1fichier.com/ui/ui-bg_glass_65_ffffff_1x400.png

tls, http2

chrome.exe

9.8kB
178.3kB
101
149

HTTP Request

GET https://img.1fichier.com/css/style.css

HTTP Request

GET https://img.1fichier.com/css/jquery.ui.css

HTTP Request

GET https://img.1fichier.com/js/jquery.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://img.1fichier.com/logo.png

HTTP Request

GET https://img.1fichier.com/icons/icon_question.png

HTTP Request

GET https://img.1fichier.com/logo-footer.png

HTTP Request

GET https://img.1fichier.com/twitter.png

HTTP Request

GET https://img.1fichier.com/facebook.png

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://img.1fichier.com/background-002.jpg

HTTP Response

200

HTTP Request

GET https://img.1fichier.com/ui/ui-bg_highlight-soft_100_eeeeee_1x100.png

HTTP Request

GET https://img.1fichier.com/ui/ui-bg_gloss-wave_35_f6a828_500x100.png

HTTP Request

GET https://img.1fichier.com/ui/ui-icons_ef8c08_256x240.png

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://img.1fichier.com/ui/ui-bg_diagonals-thick_20_666666_40x40.png

HTTP Response

200

HTTP Request

GET https://img.1fichier.com/flags/en.png

HTTP Response

200

HTTP Request

GET https://img.1fichier.com/favicon.png

HTTP Response

200

HTTP Request

GET https://img.1fichier.com/favicon.ico

HTTP Response

200

HTTP Request

GET https://img.1fichier.com/ui/ui-bg_glass_65_ffffff_1x400.png

HTTP Response

200
5.39.224.141:443

img.1fichier.com

tls

chrome.exe

959 B
4.2kB
8
7
5.39.224.141:443

img.1fichier.com

tls, http2

chrome.exe

1.0kB
4.2kB
9
8
65.9.86.6:443

https://tags.refinery89.com/prebid/prebid6.29.3.js

tls, http2

chrome.exe

5.5kB
211.4kB
96
161

HTTP Request

GET https://tags.refinery89.com/v2/1fichiercom.js

HTTP Response

200

HTTP Request

GET https://tags.refinery89.com/prebid/prebid6.29.3.js

HTTP Response

200
104.18.135.145:443

https://cs.seedtag.com/cs.html?pt=8789-3513-01&pc=FR&ga=true&cmp=true&cd=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

5.9kB
159.8kB
81
140

HTTP Request

GET https://t.seedtag.com/t/8789-3513-01.js

HTTP Response

200

HTTP Request

GET https://t.seedtag.com/c/st_1.5e59e9a2df7d84f4feef.js

HTTP Request

GET https://t.seedtag.com/c/st_0.f4461b42ad8703763ced.js

HTTP Request

GET https://t.seedtag.com/c/st_2.3f94521f4f42476d5ce7.js

HTTP Request

GET https://t.seedtag.com/c/st_3.b1b0431af88ed512316d.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://cs.seedtag.com/cs.html?pt=8789-3513-01&pc=FR&ga=true&cmp=true&cd=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200
185.86.139.96:443

https://prg.smartadserver.com/prebid/v1

tls, http

chrome.exe

10.2kB
7.4kB
18
14

HTTP Request

POST https://prg.smartadserver.com/prebid/v1

HTTP Response

200
185.89.210.46:443

ib.adnxs.com

tls

chrome.exe

19.8kB
15.7kB
36
32
13.227.219.68:443

https://cmp.quantcast.com/choice/He6NsVBfMn23v/1fichier.com/choice.js?tag_version=V2

tls, http2

chrome.exe

4.1kB
118.3kB
58
101

HTTP Request

GET https://cmp.quantcast.com/choice/He6NsVBfMn23v/1fichier.com/choice.js?tag_version=V2

HTTP Response

200

HTTP Request

GET https://quantcast.mgr.consensu.org/tcfv2/40/cmp2.js?referer=1fichier.com

HTTP Response

200

HTTP Request

GET https://quantcast.mgr.consensu.org/tcfv2/40/cmp2ui-en.js

HTTP Response

200

HTTP Request

GET https://cmp.quantcast.com/choice/He6NsVBfMn23v/1fichier.com/choice.js?tag_version=V2

HTTP Response

304
108.156.60.34:443

https://measure.refinery89.com/website/1273/tag_load

tls, http2

chrome.exe

2.0kB
7.8kB
16
18

HTTP Request

GET https://measure.refinery89.com/website/1273/tag_load

HTTP Response

200

HTTP Request

GET https://measure.refinery89.com/website/1273/tag_load

HTTP Response

200
37.157.2.234:443

adx.adform.net

tls

chrome.exe

4.7kB
7.1kB
18
16
3.0.26.101:443

tlx.3lift.com

tls

chrome.exe

4.1kB
7.6kB
21
25
88.221.25.169:80

http://apps.identrust.com/roots/dstrootcax3.p7c

http

chrome.exe

416 B
1.7kB
6
5

HTTP Request

GET http://apps.identrust.com/roots/dstrootcax3.p7c

HTTP Response

200
103.229.10.180:443

secure.quantserve.com

tls

chrome.exe

8.2kB
19.8kB
32
34
108.156.60.65:443

https://test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json

tls, http2

chrome.exe

1.7kB
10.6kB
13
16

HTTP Request

GET https://test.quantcast.mgr.consensu.org/GVL-v2/cmp-list.json

HTTP Response

200
103.229.10.180:443

secure.quantserve.com

tls

chrome.exe

1.1kB
4.4kB
11
12
13.227.219.68:443

https://quantcast.mgr.consensu.org/tcfv2/google-atp-list.json

tls, http2

chrome.exe

3.8kB
90.5kB
57
75

HTTP Request

GET https://quantcast.mgr.consensu.org/GVL-v2/vendor-list-trimmed-v1.json

HTTP Request

GET https://quantcast.mgr.consensu.org/tcfv2/google-atp-list.json

HTTP Response

200

HTTP Response

200
13.227.219.68:443

quantcast.mgr.consensu.org

tls, http2

chrome.exe

1.0kB
7.2kB
10
11
18.138.188.172:443

audit-tcfv2.quantcast.mgr.consensu.org

tls

chrome.exe

3.1kB
7.6kB
18
24
18.65.39.30:443

https://rules.quantcount.com/rules-p-PFW5FesqXn206.js

tls, http2

chrome.exe

2.3kB
11.6kB
20
21

HTTP Request

GET https://rules.quantcount.com/rules-p-He6NsVBfMn23v.js

HTTP Response

200

HTTP Request

GET https://rules.quantcount.com/rules-p-PFW5FesqXn206.js

HTTP Response

200

HTTP Request

GET https://rules.quantcount.com/rules-p-He6NsVBfMn23v.js

HTTP Response

304

HTTP Request

GET https://rules.quantcount.com/rules-p-PFW5FesqXn206.js

HTTP Response

304
34.149.50.64:443

https://s.seedtag.com/e/e

tls, http2

chrome.exe

2.3kB
6.6kB
13
13

HTTP Request

POST https://s.seedtag.com/e/e
104.26.8.169:443

https://script.4dex.io/localstore.js

tls, http

chrome.exe

5.0kB
4.9kB
14
13

HTTP Request

GET https://script.4dex.io/localstore.js

HTTP Response

200

HTTP Request

GET https://script.4dex.io/localstore.js

HTTP Response

304
142.251.36.46:443

https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=106.0.5249.119&lang=en-US&acceptformat=crx3&x=id%3Dghbmnnjooekpmoecnnnilnnbdlolhkhi%26v%3D1.58.4%26installsource%3Dnotfromwebstore%26installedby%3Dexternal%26uc%26ping%3Dr%253D102%2526e%253D1&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D1.0.0.6%26installsource%3Dnotfromwebstore%26installedby%3Dother%26uc%26ping%3Dr%253D102%2526e%253D1

tls, http2

chrome.exe

2.0kB
10.2kB
15
18

HTTP Request

GET https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=106.0.5249.119&lang=en-US&acceptformat=crx3&x=id%3Dghbmnnjooekpmoecnnnilnnbdlolhkhi%26v%3D1.58.4%26installsource%3Dnotfromwebstore%26installedby%3Dexternal%26uc%26ping%3Dr%253D102%2526e%253D1&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D1.0.0.6%26installsource%3Dnotfromwebstore%26installedby%3Dother%26uc%26ping%3Dr%253D102%2526e%253D1
216.52.2.30:443

https://ap.lijit.com/pixel?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D4b30a0b1f289a261ab592e1e53c126eb%26name%3DSOVRN%26visitor%3D%24UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http

chrome.exe

5.6kB
8.7kB
18
16

HTTP Request

POST https://ap.lijit.com/rtb/bid?src=prebid_prebid_6.29.3

HTTP Response

200

HTTP Request

GET https://ap.lijit.com/pixel?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redir=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fsovrn%3Fchanneluid%3D%24UID

HTTP Response

307

HTTP Request

GET https://ap.lijit.com/pixel?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D4b30a0b1f289a261ab592e1e53c126eb%26name%3DSOVRN%26visitor%3D%24UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

307
3.0.22.190:443

ad.360yield.com

tls

chrome.exe

19.0kB
11.1kB
40
36
34.120.63.153:443

https://prebid.media.net/rtb/prebid?cid=8CU3GWXE7

tls, http2

chrome.exe

3.1kB
7.5kB
15
16

HTTP Request

POST https://prebid.media.net/rtb/prebid?cid=8CU3GWXE7
50.31.142.255:443

b1h.zemanta.com

tls

chrome.exe

4.3kB
4.6kB
15
11
51.89.9.254:443

https://onetag-sys.com/match/?int_id=106&google_error=15

tls, http2

chrome.exe

21.0kB
27.8kB
88
80

HTTP Request

POST https://onetag-sys.com/prebid-request

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/usync/?pubId=75601b04186d260

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/usync/?pubId=75a1922f904cc20&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=98&gdpr=1&gdpr_consent=&uid=4894631733703052721

HTTP Request

GET https://onetag-sys.com/match/?int_id=1&uid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=

HTTP Request

GET https://onetag-sys.com/match/?int_id=2&uid=LIEFHRWR-1M-G2O5&gdpr=1

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=106&redir=1&ot_initiated=1

HTTP Request

GET https://onetag-sys.com/match/?int_id=113&gdpr=1&gdpr_consent=&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

HTTP Response

302

HTTP Response

302

HTTP Request

GET https://onetag-sys.com/match/?int_id=106&google_error=15

HTTP Request

GET https://onetag-sys.com/match/?int_id=29&uid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=0&gdpr_consent=

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=106&redir=1&ot_initiated=1

HTTP Request

GET https://onetag-sys.com/match/?int_id=113&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

HTTP Response

302

HTTP Response

302

HTTP Request

GET https://onetag-sys.com/match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/usync/?pubId=7a07370227fc000&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=2&uid=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://onetag-sys.com/match/?int_id=98&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&uid=4894631733703052721

HTTP Request

GET https://onetag-sys.com/match/?int_id=1&uid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://onetag-sys.com/match/?int_id=107&uid=6880727987372587628

HTTP Request

GET https://onetag-sys.com/match/?int_id=92&uid=y-3kJ5ao5E2uHyd.0tFQa2bjwpb3iJnsi1IM.VnDw-~A

HTTP Request

GET https://onetag-sys.com/match/?int_id=110&uid=

HTTP Request

GET https://onetag-sys.com/match/?int_id=106&google_error=15

HTTP Request

GET https://onetag-sys.com/match/?int_id=29&uid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=0&gdpr_consent=

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=106&redir=1&ot_initiated=1

HTTP Request

GET https://onetag-sys.com/match/?int_id=113&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

HTTP Response

302

HTTP Response

302

HTTP Request

GET https://onetag-sys.com/match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=2&uid=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://onetag-sys.com/match/?int_id=98&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&uid=4894631733703052721

HTTP Request

GET https://onetag-sys.com/match/?int_id=1&uid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://onetag-sys.com/match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5

HTTP Request

GET https://onetag-sys.com/match/?int_id=106&google_error=15

HTTP Request

GET https://onetag-sys.com/match/?int_id=92&uid=y-3kJ5ao5E2uHyd.0tFQa2bjwpb3iJnsi1IM.VnDw-~A

HTTP Request

GET https://onetag-sys.com/match/?int_id=107&uid=6880727987372587628

HTTP Request

GET https://onetag-sys.com/match/?int_id=29&uid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=0&gdpr_consent=

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/usync/?cb=1685709275468&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://onetag-sys.com/match/?int_id=30&uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=&gdpr_consent=&us_privacy=

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=30&uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=&gdpr_consent=&us_privacy=

HTTP Request

GET https://onetag-sys.com/match/?int_id=114&uid=00CDED12-08DE-41D7-A730-899A187EB7E5

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=113&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&callback=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Donetag.com%26id%3D%24%7BUSER_TOKEN%7D&ot_initiated=1

HTTP Response

302

HTTP Request

GET https://onetag-sys.com/match/?int_id=106&google_error=15

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=30&uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=

HTTP Response

200

HTTP Request

POST https://onetag-sys.com/prebid-request

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/usync/?cb=1685709308775&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Request

GET https://onetag-sys.com/match/?int_id=106&google_error=15

HTTP Response

200
103.83.123.59:443

s.adx.opera.com

tls

chrome.exe

1.7kB
4.7kB
12
14
104.18.2.114:443

https://mp.4dex.io/prebid

tls, http2

chrome.exe

9.9kB
7.8kB
22
22

HTTP Request

POST https://mp.4dex.io/prebid

HTTP Response

200

HTTP Request

POST https://mp.4dex.io/prebid

HTTP Response

200
172.67.73.228:443

https://rtb.adpone.com/bid-request?pid=12281911378819&gdpr_applies=true&consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

3.2kB
5.2kB
16
18

HTTP Request

POST https://rtb.adpone.com/bid-request?pid=12281911378819&gdpr_applies=true&consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Request

POST https://rtb.adpone.com/bid-request?pid=12281911378819&gdpr_applies=true&consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200
18.140.202.208:443

btlr.sharethrough.com

tls

chrome.exe

4.9kB
6.6kB
19
20
104.26.8.169:443

https://script.4dex.io/adagio.js

tls, http

chrome.exe

2.8kB
29.5kB
21
32

HTTP Request

GET https://script.4dex.io/adagio.js

HTTP Response

200

HTTP Request

GET https://script.4dex.io/adagio.js

HTTP Response

304
18.140.202.208:443

btlr.sharethrough.com

tls

chrome.exe

1.1kB
6.1kB
10
12
142.251.36.1:443

https://clients2.googleusercontent.com/crx/blobs/Acy1k0Y5tfy_mKGczNa0dDkmt7a12HgbdnxcjVR6-U3e_uw2BC-pfMB-Me9dp9AjdXp2VFahjiK1I-HMzzjNa-sDy4SQfBK-9e16DWH-h3_kUfWFz8wfAMZSmuXZHrapd-VhQ2wvvo4BfLx01PGKTQ/extension_1_62_0_0.crx

tls, http2

chrome.exe

3.4kB
105.2kB
49
83

HTTP Request

GET https://clients2.googleusercontent.com/crx/blobs/Acy1k0Y5tfy_mKGczNa0dDkmt7a12HgbdnxcjVR6-U3e_uw2BC-pfMB-Me9dp9AjdXp2VFahjiK1I-HMzzjNa-sDy4SQfBK-9e16DWH-h3_kUfWFz8wfAMZSmuXZHrapd-VhQ2wvvo4BfLx01PGKTQ/extension_1_62_0_0.crx
2.19.117.162:443

https://csync.smartadserver.com/diff/rtb/csync/TemplatePool.min.js

tls, http

chrome.exe

12.5kB
51.0kB
36
51

HTTP Request

GET https://csync.smartadserver.com/rtb/csync/CookieSync.html?nwid=3050&dcid=3

HTTP Response

200

HTTP Request

GET https://csync.smartadserver.com/rtb/csync/CookieSync.min.js

HTTP Response

200

HTTP Request

GET https://csync.smartadserver.com/rtb/csync/TemplatePool.min.js

HTTP Response

200

HTTP Request

GET https://csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=3305&dcid=4&iscname=false&cname=&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Request

GET https://csync.smartadserver.com/diff/rtb/csync/CookieSync.min.js

HTTP Response

200

HTTP Request

GET https://csync.smartadserver.com/diff/rtb/csync/TemplatePool.min.js

HTTP Response

200
23.52.56.137:443

https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=

tls, http2

chrome.exe

10.5kB
19.8kB
43
56

HTTP Request

GET https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=seedtag&endpoint=eu

HTTP Response

301

HTTP Request

GET https://eus.rubiconproject.com/usync.html?p=seedtag&endpoint=eu

HTTP Response

200

HTTP Request

GET https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=publicidad

HTTP Request

GET https://eus.rubiconproject.com/usync.js

HTTP Response

301

HTTP Response

200

HTTP Request

GET https://eus.rubiconproject.com/usync.html?p=publicidad

HTTP Response

200

HTTP Request

GET https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=onfocus&endpoint=eu

HTTP Response

301

HTTP Request

GET https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=adyoulike&endpoint=eu

HTTP Request

GET https://eus.rubiconproject.com/usync.html?p=onfocus&endpoint=eu

HTTP Response

301

HTTP Response

200

HTTP Request

GET https://eus.rubiconproject.com/usync.html?p=adyoulike&endpoint=eu

HTTP Response

200

HTTP Request

GET https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=33across&endpoint=us-east&us_privacy=

HTTP Response

301

HTTP Request

GET https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=

HTTP Response

200
23.52.56.137:443

secure-assets.rubiconproject.com

tls, http2

chrome.exe

1.1kB
4.3kB
12
11
168.119.72.236:443

https://sync.richaudience.com/502e2341fac2c140295d7b3b0c915c8c/?uid=

tls, http2

chrome.exe

9.4kB
13.7kB
31
29

HTTP Request

GET https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=1685709275488&pubconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&euconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&hasConsent=1

HTTP Request

GET https://sync.richaudience.com/f7872c90c5d3791e2b51f7edce1a0a5d/?p=ns9qrKJLKD&consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&r=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Frichaudience%3Fchanneluid%3D%5BPDID%5D

HTTP Response

302

HTTP Response

302

HTTP Request

GET https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=1685709275488&pubconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&euconsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&hasConsent=1&rd=1

HTTP Request

GET https://sync.richaudience.com/bf7c142f4339da0278e83698a02b0854/?consentString=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&referrer=https%3A%2F%2Fcs.seedtag.com%2F

HTTP Response

200

HTTP Response

303

HTTP Request

GET https://sync.richaudience.com/697a8452aebbe5875da0878cfaf3d0d0/?uid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_ps=

HTTP Response

200

HTTP Request

GET https://sync.richaudience.com/a939d25b950298d0a5d324cea4fcd3d1/?uid=4894631733703052721&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://sync.richaudience.com/1334b6ec0ff0dc970481738a2374448c/?uid=y-uDBYXH5E2uHPYRwKKyIMm0kX51cfgpej.HhPNDA-~A&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://sync.richaudience.com/6ccbc109824ae3014a36fd8993cc151d/?uid=bc21730f-1096-4796-bd58-da49fbcb0fc9&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://sync.richaudience.com/e231bbbe91d9e7e900144b910bfcc7d7/?uid=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Request

GET https://sync.richaudience.com/1575707c462b6525f008e40ae9438a8b/?uid=96e9246feac3709f625d06c16ac55a9e

HTTP Request

GET https://sync.richaudience.com/502e2341fac2c140295d7b3b0c915c8c/?uid=

HTTP Response

200

HTTP Response

200
67.202.105.22:443

https://ssc-cms.33across.com/ps/?xi=1&xu=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

4.0kB
12.3kB
26
24

HTTP Request

GET https://ssc-cms.33across.com/ps/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X

HTTP Response

302

HTTP Request

GET https://ssc-cms.33across.com/ps/?_=1685702077797.&ri=0010b00002MptHCAAZ&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X

HTTP Request

GET https://ssc-cms.33across.com/ps/?us_privacy=&ts=1685702077797.4&ri=1&ru=https%3A%2F%2Fsync.mathtag.com%2Fsync%2Fimg%3Fus_privacy%3D%24%7BUS_PRIVACY%7D%26mt_exid%3D73%26redir%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D1%2526external_user_id%253D%255BMM_UUID%255D

HTTP Response

302

HTTP Response

302

HTTP Request

GET https://ssc-cms.33across.com/ps/?us_privacy=&xi=33&xu=2963187305596611584206

HTTP Request

GET https://ssc-cms.33across.com/ps/?xi=99&us_privacy=&xu=y-d.nDxLBE2uF4LVpzqoLZLN.k0gvZcraW~A

HTTP Response

302

HTTP Request

GET https://ssc-cms.33across.com/ps?xi=64&xu=AAAM5TTobO5AOANRbh-TAAAAAAA&expiration=1685788483&is_secure=true&us_privacy=

HTTP Response

302

HTTP Request

GET https://ssc-cms.33across.com/ps/?xi=10&us_privacy=&xu=c740f271-9531-49c0-be18-37c71c1598ed

HTTP Response

302

HTTP Response

302

HTTP Request

GET https://ssc-cms.33across.com/ps/?xi=1&xu=LIEFHRWR-1M-G2O5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302
96.16.109.9:443

ads.pubmatic.com

tls

chrome.exe

6.2kB
36.3kB
34
50
185.255.84.152:443

https://visitor.omnitagjs.com/visitor/sync?uid=9f93135e824096b627ff609f5cdee636&visitor=898e8d7677704954&name=OPENWEB

tls, http2

chrome.exe

9.7kB
15.3kB
45
49

HTTP Request

GET https://visitor.omnitagjs.com/visitor/isync?uid=513c4e190506981c315d38ccadf488f2&name=SEEDTAG&visitor=&gdpr=1&gdpr_consent_string=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=

HTTP Response

200

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?name=Xandr+%E2%80%93+Invest+DSP+-+Banner&ttl=720&uid=75d56568a11564bfb79a01d2fa9fdb29&visitor=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=094e13e3a08b6f25e4d4f7b1fba0b26b&visitor=rpBC7sy2kpGA66dzZidB&name=RTB_HOUSE&pi=adyoulike

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=8122fdac60517b1efe1389612f3dfb34&visitor=2dc3e055-cffc-4d06-9da4-1904f628f2b7&name=THE_TRADE_DESK

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?name=Xandr+%E2%80%93+Invest+DSP&ttl=720&uid=48d5713d5c563cba2049f505b2d944b6&visitor=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=e77031af9e62c4ae76bee5b9517c4ef4&visitor=56c59abe3185f691861ab6dc90637e02&name=SMILE_WANTED

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=68c72dd412a8d0f3f6d2276db2509939&name=LOOPME&visitor=e4d2d3a5-65f1-4501-8509-632e10455140%20&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=0f4b0fcde45fe67019618f4c5f35f52e&name=ADMIXER&visitor=c8a08459659e4f51b9d4ed409082478a

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?name=ADOTMOB&ttl=720&uid=b989ee06df7dfc250798f7f0dfc4ddee&visitor=092722040797ccbf620f956a&gdpr=1&gdprConsent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=4b30a0b1f289a261ab592e1e53c126eb&name=SOVRN&visitor=Gv36uBZHZqrz3My2QlqenXmM

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://visitor.omnitagjs.com/visitor/bsync?uid=627080440e659fbe0f85333c665ae1de&name=SMARTADSERVER&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D117%26partneruserid%3DPARTNER_USER_ID%26gdpr%3DGDPR%26gdpr_consent%3DGDPR_CONSENT&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=3496f2c9155784213a7b528f78bb441a&visitor=LIEFHRWR-1M-G2O5&name=RUBICON&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Response

307

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=f04f5c55f88ffea7a3ce5b2d908a6e71&visitor=Tkpq1TudXMeel-k-G_UBVszEgmPC1V9D9Kt32c7-Fc0

HTTP Response

200

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=9276a8c8d010b77af50144c60047b781&visitor=6880727987372587628&name=SMARTADSERVER&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=74a1ec3b61e72925193cfceeea1b0608&visitor=0-49573c26-a714-5f77-534c-91fc1c2029fe$ip$154.61.71.13&name=STACKADAPT

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=bf39a6af2a15b80f82f7ff725f351919&visitor=c2d0f51a-4a26-5299-8c93-81cce8ea4472&name=BETWEENX

HTTP Response

200

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=6ca9493fd95af83951a8d0b213a77e8d&visitor=9d8f3303-0ae3-4294-96d8-cd495dbcc069&name=BIDTELLECT

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=2a62ca3297af454b8f19eb7922ed945f&visitor=c740f271-9531-49c0-be18-37c71c1598ed&name=BIDSWITCH&gdpr=&gdpr_consent=

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&name=ZEMANTA_NATIVE_1_2&ttl=720&uid=f2d9136cf53dede7f83ba16171a37fdd&visitor=ha0P7kgew5AP6IcniAHr

HTTP Response

200

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=2fe1084ffe44c28350116ec0a0a1c2d1&name=PUBMATIC&visitor=00CDED12-08DE-41D7-A730-899A187EB7E5

HTTP Response

200

HTTP Request

GET https://visitor.omnitagjs.com/visitor/sync?uid=9f93135e824096b627ff609f5cdee636&visitor=898e8d7677704954&name=OPENWEB

HTTP Response

200
168.119.72.236:443

sync.richaudience.com

tls

chrome.exe

1.4kB
5.5kB
11
9
3.0.22.190:443

ad.360yield.com

chrome.exe

98 B
52 B
2
1
37.252.171.149:443

secure.adnxs.com

tls

chrome.exe

4.0kB
7.4kB
15
15
52.223.40.198:443

match.adsrvr.org

tls

chrome.exe

13.0kB
34.7kB
53
58
8.8.8.8:53

b1sync.zemanta.com

dns

chrome.exe

268 B
750 B
5
4

DNS Request

b1sync.zemanta.com

DNS Response

64.202.112.255

50.31.142.159

64.202.112.63

64.202.112.127

64.202.112.191

70.42.32.191

64.74.236.191

64.74.236.63

64.74.236.127

50.31.142.223

70.42.32.63

64.74.236.31

70.42.32.255

50.31.142.127

64.202.112.31

50.31.142.255

64.202.112.95

50.31.142.63

70.42.32.223

64.202.112.223

70.42.32.95

70.42.32.127

70.42.32.159

64.202.112.159

64.74.236.95

64.74.236.255

50.31.142.95

50.31.142.191

64.74.236.223

70.42.32.31

50.31.142.31

64.74.236.159
185.80.39.216:443

https://ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Findexexchange%3Fchanneluid%3D&s=191730&C=1

tls, http

chrome.exe

2.8kB
8.6kB
15
15

HTTP Request

GET https://ssum-sec.casalemedia.com/usermatchredir?s=191730&cb=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Findexexchange%3Fchanneluid%3D

HTTP Response

302

HTTP Request

GET https://ssum-sec.casalemedia.com/usermatchredir?cb=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Findexexchange%3Fchanneluid%3D&s=191730&C=1

HTTP Response

302
185.86.139.103:443

sync.smartadserver.com

tls, http2

chrome.exe

1.2kB
1.2kB
10
8
185.94.180.126:443

sync.search.spotxchange.com

tls

chrome.exe

913 B
3.7kB
6
8
185.94.180.126:443

sync.search.spotxchange.com

tls

chrome.exe

3.2kB
5.9kB
9
14
3.124.99.17:443

x.bidswitch.net

tls

chrome.exe

11.6kB
18.4kB
52
39
35.158.198.172:443

match.sharethrough.com

tls

chrome.exe

5.4kB
11.1kB
25
26
64.202.112.255:443

b1sync.zemanta.com

tls

chrome.exe

12.0kB
19.6kB
30
33
103.83.123.59:443

s.adx.opera.com

tls

chrome.exe

3.1kB
4.6kB
12
15
185.94.180.126:443

sync.search.spotxchange.com

tls

chrome.exe

1.6kB
1.5kB
6
8
185.86.139.103:443

https://rtb-csync.smartadserver.com/redir/?partnerid=113&partneruserid=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

26.2kB
27.7kB
77
66

HTTP Request

GET https://sync.smartadserver.com/getuid?gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&nwid=3050&url=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fsmart%3Fchanneluid%3D%5Bsas_uid%5D

HTTP Response

302

HTTP Request

GET https://ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=1&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid]

HTTP Response

200

HTTP Request

GET https://ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid]

HTTP Response

302

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=76&partneruserid=GOOGLE_HOSTED_SI&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_sc%26google_hm%3DSMART_USER_ID_B64&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Fs.amazon-adsystem.com%2Fdcm%3Fpid%3D72348060-38ad-4586-8e4f-f1e2a8e789b3%26id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Response

302

HTTP Response

302

HTTP Request

GET https://ssbsync-global.smartadserver.com/api/sync?callerId=5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redirectUri=https%3A%2F%2Fonetag-sys.com%2Fmatch%2F%3Fint_id%3D107%26uid%3D[ssb_sync_pid]

HTTP Response

302

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?partnerid=75&issi=1&partneruserid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=25&partneruserid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=86&partneruserid=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=22&partneruserid=1897977468389386522&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?partnerid=49&partneruserid=7240035300118362264&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?partnerid=147&partneruserid=bc21730f-1096-4796-bd58-da49fbcb0fc9&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=117&partneruserid=a196af075481adeaad7c11b2e5aa3007&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=66&partneruserid=092722040797ccbf620f956a&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=124&partneruserid=e4d2d3a5-65f1-4501-8509-632e10455140&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=94&partneruserid=ZHnFvwAEdQe2WgAD&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=91&partneruserid=00CDED12-08DE-41D7-A730-899A187EB7E5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=79&partneruserid=e84a31d9-85d9-4096-8ac9-074966796b19&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir?partnerid=127&partneruserid=AADPM07I84wAACFJuFXTrA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?partnerid=80&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&partneruserid=ifW2D9z041WS9LABh_WsV96gtgaSo-QOhvCsT7gx

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&google_error=15

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=8117640948868045750&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=100&partneruserid=7ebef501-c4ef-4f2a-a255-33f2007c1273&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=33&partneruserid=ZHnFvVqT2oy7TuXID9kl3wAA%265292

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?partnerid=31&partneruserid=c740f271-9531-49c0-be18-37c71c1598ed&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=124&partneruserid=e4d2d3a5-65f1-4501-8509-632e10455140&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=133&partneruserid=355bd4a3

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=92&partneruserid=pghBpt3yfaU1&ev=1&pid=560288&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=130&partneruserid=1d24ae28-d269-40d9-989b-e6dda52bb579&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir?partnerid=127&partneruserid=AADPM07I84wAACFJuFXTrA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?partnerid=111&partneruserid=ID5-3300vC3zTw8FuNhWdkDwNWMT0ilyd1Xb7oDH-w26Qg&redirurl=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F102%2F8%2F2.gif%3Fpuid%3DSMART_USER_ID%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=130&partneruserid=e2850144-dcba-4a6f-837e-990adcbcef1a&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Response

200

HTTP Request

GET https://rtb-csync.smartadserver.com/redir?partnerid=127&partneruserid=AADPM07I84wAACFJuFXTrA&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?partnerid=141&partneruserid=8d6P0wV50xeSGuMvDF1tWVY3w&gdpr=0&gdpr_consent=&redirurl=https%3A%2F%2Fa.audrte.com%2Fmatch%3Fuid%3DSMART_USER_ID%26p%3DM501991648%26r%3Dhttps%253A%252F%252Fa.audrte.com%252Fp%253F

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&issi=1&partnerid=116&partneruserid=ha0P7kgew5AP6IcniAHr

HTTP Response

302

HTTP Response

200

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?partnerid=113&partneruserid=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=139&partneruserid=0&redirurl=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D98KUz37ype9D3X2sf9ovgeTt%26source_user_id%3DSMART_USER_ID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=134&partneruserid=OB_OK&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmart_adserver_eb%26google_hm%3DSMART_USER_ID_B64&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Response

302

HTTP Request

GET https://rtb-csync.smartadserver.com/redir/?partnerid=113&partneruserid=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200
64.202.112.255:443

b1sync.zemanta.com

tls

chrome.exe

8.6kB
13.4kB
23
23
185.94.180.126:443

sync.search.spotxchange.com

tls

chrome.exe

746 B
355 B
4
5
67.202.105.32:443

https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1

tls, http2

chrome.exe

2.2kB
10.4kB
16
18

HTTP Request

GET https://de.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X

HTTP Response

307

HTTP Request

GET https://hde.tynt.com/deb/?m=xch&rt=html&id=0010b00002MptHCAAZ&ru=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2F33across%3Fchanneluid%3D33XUSERID33X&b=1

HTTP Response

200
216.58.208.98:443

https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_sc&gdpr=0&gdpr_consent=%24%7BGDPR_CONSENT_229%7D&us_privacy=

tls, http2

chrome.exe

2.1kB
8.3kB
15
18

HTTP Request

GET https://cm.g.doubleclick.net/pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=seedtag&bsw_param=c740f271-9531-49c0-be18-37c71c1598ed&google_hm=Yzc0MGYyNzEtOTUzMS00OWMwLWJlMTgtMzdjNzFjMTU5OGVk

HTTP Request

GET https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_sc&gdpr=0&gdpr_consent=%24%7BGDPR_CONSENT_229%7D&us_privacy=
3.75.62.37:443

https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZHnFvVqT2oy7TuXID9kl3wAAFKwAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=

tls, http2

chrome.exe

7.2kB
11.4kB
35
25

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58427/occ

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58427/occ?verify=true

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58368/occ?gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=00CDED12-08DE-41D7-A730-899A187EB7E5&redir=true&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58675/occ?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=1&gdpr_consent=

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58488/occ?&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58170/sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_origin=1&redir=true

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58350/sync?redir=true

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0

HTTP Request

GET https://ups.analytics.yahoo.com/ups/58382/sync?uid=2963187305596611584206&_origin=1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://ups.analytics.yahoo.com/ups/55940/sync?_origin=1&redir2=true&uid=ZHnFvVqT2oy7TuXID9kl3wAAFKwAAAAB&gdpr_consent=&us_privacy=&gdpr=&gpp=&gpp_sid=
216.58.208.98:443

cm.g.doubleclick.net

tls

chrome.exe

931 B
5.0kB
9
7
185.29.134.244:443

sync.mathtag.com

tls

chrome.exe

17.9kB
15.8kB
32
23
185.64.190.78:443

image6.pubmatic.com

tls

chrome.exe

13.3kB
33.8kB
43
50
37.157.5.84:443

cm.adform.net

tls

chrome.exe

2.0kB
6.0kB
14
14
34.98.64.218:443

https://us-u.openx.net/w/1.0/sd?id=537072956&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&val=oSUZWvQkTAC6JB9UryUDAvZwGVO6c0tbriBGHWW-

tls, http2

chrome.exe

4.6kB
7.9kB
22
28

HTTP Request

GET https://u.openx.net/w/1.0/cm?id=e297ef35-c932-4587-9b44-3838020a33e7&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&r=https%3A%2F%2Fs.seedtag.com%2Fcs%2Fcookiesync%2Fopenx%3Fchanneluid%3D%7BOPENX_ID%7D

HTTP Request

GET https://eu-u.openx.net/w/1.0/cm?id=a547219b-814b-4e3e-8a4f-35c044fa1891&ph=ec81d0b7-c42e-4a42-b97a-9305af647d30&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D100%26partneruserid%3D%7BOPENX_ID%7D&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://us-u.openx.net/w/1.0/sd?id=537072971&val=2dc3e055-cffc-4d06-9da4-1904f628f2b7&ttd_puid=6b3762f9-552d-7046-e5c7-8dce266fc9b5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Request

GET https://us-u.openx.net/w/1.0/sd?id=537072956&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&val=oSUZWvQkTAC6JB9UryUDAvZwGVO6c0tbriBGHWW-
47.252.78.131:443

event.clientgear.com

tls

chrome.exe

1.7kB
4.9kB
11
10
185.184.8.90:443

https://creativecdn.com/cm-notify?pi=adyoulike

tls, http2

chrome.exe

2.0kB
5.6kB
15
12

HTTP Request

GET https://creativecdn.com/cm-notify?pi=seedtag

HTTP Response

302

HTTP Request

GET https://creativecdn.com/cm-notify?pi=seedtag&tc=1

HTTP Response

302

HTTP Request

GET https://creativecdn.com/cm-notify?pi=adyoulike

HTTP Response

302
173.223.113.181:443

https://tags.bluekai.com/site/5907?limit=0&id=1e7b842524ae64cb03eec60e1b97d3f2

tls, http2

chrome.exe

11.4kB
14.6kB
34
41

HTTP Request

GET https://stags.bluekai.com/site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS64ZOONSWKZDUMFTS4Y3PNUXWG4ZPMNXW623JMVZXS3TDF5XXK5DCOJQWS3R7MNUGC3TOMVWHK2LEHVUGCMCQG5VWOZLXGVAVANSJMNXGSQKIOITGK6DDNBQW4Z3FHVZWKZLEORQWOJTHMRYHEPJREZTWI4DSL5RW63TTMVXHIPKDKBZXKLLPIFIHG5JNN5AUCS2BN5AUKTSEIZBXGQKQL5AUCSC7IFAUC4KJJJRHIWC7JBPV6YSXHFZDQZRVL5QWM5BQMVMTCUBZL5VDON3VKF5EI2DGJZVS2NCGGNGF6V27JJ3VQNJSIU3U4RRTGZ2HCNCLNVJDIRLVGNGEESKVJZWEQTSIKVKFM3LXMFXWWVTSPFEHGYLLGJRXAVCOJNFDMQSFNNEE2USPGJSFSR2GGV2W26DUNJSVCS2ZGVPXAX3EGNTHQMSEFV2F6ZDWFUZTS6RTPI4DCWDOGNSFUZRNL4YC2UCDMRKTKXZZIRTG4OLGKJTGELJZJFGDSXZXHB3DQ5RYL44V64TLGJPWKWC7GNPTOOK7G5PUQOJNMZPTQNCKMNAUK3KHOJRVCQTENVKU6RCON5DUKVKDJFCVSVTIIFJFCS2BINBWOR2GN5TUSQKGIJ3VKN2JO5BWMV2FKNAUMQKLIFEXOSLHKE2EC33ZJFBECQKBJJAUK2CFIFCWOUSZJFAUCQKCIFEUCQKRIFEUERKJIFDUEZ2FIZAUEWKDIFIUCQLHJ5TVS33IKFAUGQSJKFFEKUSFKFYGOUKGKFFEEQKTGJLEGQ2VIYYGQ4DIIFDFOV2BIZAUS2SZJNAUERKFM5EXEQKBIVBFST2BLFEWWQSLPBMUSRLNJFHG6Z2BI5AUMQKLJJKUWMKGJI3GCQLILF5E2QKBIFAS4ZBUIFAUGSDHIFAUCQKB&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://stags.bluekai.com/site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://stags.bluekai.com/site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd%3DNB2HI4DTHIXS6ZDTOVWS243FMMXGGYLTMFWGK3LFMRUWCLTDN5WS6Y3SOVWT6Y3NL5SHG4C7NFSD2MJXEZSXQY3IMFXGOZJ5NFXGIZLYEZSXQ5DFOJXGC3C7OVZWK4S7NFSD22DBGBIDO23HMV3TKQKQGZEWG3TJIFEHE

HTTP Request

GET https://stags.bluekai.com/site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Response

302

HTTP Request

GET https://stags.bluekai.com/site/23178?id=ha0P7kgew5AP6IcniAHr&redir=https%3A%2F%2Fb1sync.zemanta.com%2Fusersync%2Fbluekai%2Fcallback%2F%3Fd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gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://tags.bluekai.com/site/5907?limit=0&id=1e7b842524ae64cb03eec60e1b97d3f2

HTTP Response

200
2.19.117.162:443

csync.smartadserver.com

tls

chrome.exe

1.0kB
913 B
7
8
23.72.252.145:443

https://ced-ns.sascdn.com/diff/js/modules/cmp.js

tls, http

chrome.exe

1.6kB
8.2kB
10
13

HTTP Request

GET https://ced-ns.sascdn.com/diff/js/modules/cmp.js

HTTP Response

200
213.19.162.90:443

token.rubiconproject.com

tls

chrome.exe

5.1kB
8.3kB
14
15
172.67.10.198:443

https://csync.smilewanted.com/getuid?source=openrtb&zoneCode=openrtb_adyoulike&redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3De77031af9e62c4ae76bee5b9517c4ef4%26visitor%3D%24UID%26name%3DSMILE_WANTED&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

2.7kB
4.1kB
11
9

HTTP Request

GET https://csync.smilewanted.com/getuid?source=prebid-server&gdpr=0&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=&redirect=https%3A%2F%2Fsync.richaudience.com%2F1575707c462b6525f008e40ae9438a8b%2F%3Fuid%3D$UID

HTTP Request

GET https://csync.smilewanted.com/getuid?source=openrtb&zoneCode=openrtb_adyoulike&redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3De77031af9e62c4ae76bee5b9517c4ef4%26visitor%3D%24UID%26name%3DSMILE_WANTED&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Response

302
13.228.126.19:443

https://pixel.advertising.com/ups/58170/sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_origin=1&redir=true

tls, http2

chrome.exe

2.2kB
6.8kB
15
13

HTTP Request

GET https://pixel.advertising.com/ups/58170/sync?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_origin=1&redir=true
37.252.171.149:443

secure.adnxs.com

tls

chrome.exe

4.4kB
5.0kB
13
15
213.19.162.90:443

pixel-eu.rubiconproject.com

tls

chrome.exe

13.2kB
13.3kB
25
26
54.157.56.43:443

sync.srv.stackadapt.com

tls

chrome.exe

2.3kB
8.0kB
11
12
146.0.227.110:443

inv-nets.admixer.net

tls

chrome.exe

3.4kB
6.9kB
14
19
188.42.34.65:443

ads.betweendigital.com

tls

chrome.exe

3.3kB
8.6kB
16
14
18.177.86.134:443

match.prod.bidr.io

tls

chrome.exe

9.8kB
11.9kB
23
21
35.214.153.92:443

https://csync.loopme.me/?pubid=11480&redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D68c72dd412a8d0f3f6d2276db2509939%26name%3DLOOPME%26visitor%3D%7Bdevice_id%7D%0A&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

2.2kB
6.5kB
14
13

HTTP Request

GET https://csync.loopme.me/?pubid=11480&redirect=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D68c72dd412a8d0f3f6d2276db2509939%26name%3DLOOPME%26visitor%3D%7Bdevice_id%7D%0A&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

307
108.156.60.69:443

https://api-2-0.spot.im/pixels/ayl_pixel?ayl_id=a196af075481adeaad7c11b2e5aa3007

tls, http2

chrome.exe

1.7kB
7.0kB
12
15

HTTP Request

GET https://api-2-0.spot.im/pixels/ayl_pixel?ayl_id=a196af075481adeaad7c11b2e5aa3007

HTTP Response

204
52.212.63.96:443

sync.adotmob.com

tls

chrome.exe

5.2kB
8.9kB
13
12
8.8.8.8:53

s.spotim.market

dns

chrome.exe

311 B
1.3kB
6
4

DNS Request

s.spotim.market

DNS Response

23.227.152.130

23.227.152.138

23.227.152.10

23.227.152.2

23.227.152.18

23.227.152.26

23.227.152.34

23.227.152.42

23.227.152.50

23.227.152.58

23.227.152.66

23.227.151.178

23.227.151.186

23.227.151.202

23.227.151.250

23.227.151.242

23.227.151.234

23.227.151.226

23.227.151.210

23.227.151.162

23.227.151.218

107.151.11.26

209.205.221.154

23.227.152.154

23.227.152.162

23.227.152.178

23.227.152.186

23.227.152.194

23.227.151.66

23.227.152.170

23.227.152.202

23.227.152.210

23.227.152.218

107.151.8.194

107.151.8.226

107.151.8.234

107.151.8.202

107.151.8.242

23.227.151.98

23.227.151.106

23.227.151.122

107.151.11.58

23.227.151.130

23.227.151.138

23.227.151.154

23.227.151.146

23.227.151.194

23.227.151.170

107.151.11.106

107.151.11.114

107.151.11.18

107.151.11.42

107.151.11.50

107.151.11.74

107.151.11.82

107.151.11.90

107.151.11.98

107.151.11.66

107.151.11.2

107.151.11.10

23.227.152.74

23.227.152.82

23.227.152.90

23.227.152.98

23.227.152.106

23.227.152.114

23.227.152.122
13.228.126.19:443

pixel.advertising.com

tls

chrome.exe

1.1kB
5.0kB
10
8
193.0.160.131:443

p.rfihub.com

tls

chrome.exe

5.3kB
9.2kB
14
16
213.155.156.164:443

https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&piggybackCookie=$UID

tls, http2

chrome.exe

2.3kB
5.7kB
15
16

HTTP Request

GET https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&piggybackCookie=$UID

HTTP Response

200
23.227.152.130:443

https://s.spotim.market/sync.html?aid=750078&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http

chrome.exe

2.3kB
5.9kB
12
12

HTTP Request

GET https://s.spotim.market/sync.html?aid=750078&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200
18.177.86.134:443

match.prod.bidr.io

tls

chrome.exe

5.6kB
9.6kB
16
14
23.227.152.130:443

s.spotim.market

tls

chrome.exe

961 B
3.8kB
8
9
52.95.126.138:443

aax-eu.amazon-adsystem.com

tls

chrome.exe

3.8kB
9.2kB
12
14
182.161.73.146:443

dis.criteo.com

tls

chrome.exe

989 B
4.1kB
9
7
182.161.73.146:443

https://dis.criteo.com/dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

3.0kB
6.0kB
15
15

HTTP Request

GET https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@

HTTP Response

200

HTTP Request

GET https://dis.criteo.com/dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302
185.89.210.46:443

ib.adnxs.com

tls

chrome.exe

5.9kB
6.6kB
16
17
18.177.86.134:443

match.prod.bidr.io

tls

chrome.exe

1.9kB
6.3kB
12
11
54.157.56.43:443

sync.srv.stackadapt.com

tls

chrome.exe

4.1kB
8.2kB
18
15
35.214.153.92:443

https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}

tls, http2

chrome.exe

1.9kB
6.0kB
13
13

HTTP Request

GET https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}

HTTP Response

307
3.224.130.34:443

a.audrte.com

tls

chrome.exe

20.3kB
20.0kB
35
32
34.111.129.221:443

https://cr.frontend.weborama.fr/cr?key=pubmatic&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

2.1kB
5.6kB
13
12

HTTP Request

GET https://cr.frontend.weborama.fr/cr?key=pubmatic&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
52.220.229.2:443

https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel

tls, http

chrome.exe

2.0kB
7.5kB
14
13

HTTP Request

GET https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel

HTTP Response

302
85.114.159.93:443

dsp.adfarm1.adition.com

tls

chrome.exe

3.6kB
6.0kB
13
11
35.186.193.173:443

https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]

tls, http2

chrome.exe

1.9kB
5.1kB
12
15

HTTP Request

GET https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
104.18.24.173:443

https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}

tls, http2

chrome.exe

2.1kB
4.4kB
12
13

HTTP Request

GET https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}

HTTP Response

302

HTTP Request

GET https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}

HTTP Response

200
141.94.161.190:443

https://green.erne.co/pubmatic/cm?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http

chrome.exe

2.4kB
7.7kB
13
13

HTTP Request

GET https://green.erne.co/pubmatic/cm?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302
173.231.181.122:443

cm.adgrx.com

tls

chrome.exe

2.3kB
7.8kB
15
19
195.5.165.20:443

core.iprom.net

tls

chrome.exe

2.3kB
7.5kB
11
11
52.76.44.220:443

sync.crwdcntrl.net

tls

chrome.exe

9.0kB
15.0kB
47
47
151.101.2.49:443

sync-tm.everesttech.net

tls

chrome.exe

5.2kB
12.6kB
28
32
46.228.164.11:443

https://ad.turn.com/r/cs?pid=45&rndcb=5103864468

tls, http2

chrome.exe

3.3kB
8.2kB
20
20

HTTP Request

GET https://ad.turn.com/r/cs?pid=1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://ad.turn.com/r/cs?pid=33&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D32%26partneruserid%3D%23USER_ID%23%26gdpr%3D%23GDPR_APPLICABLE%23%26gdpr_consent%3D%23GDPR_CONSENT%23&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://ad.turn.com/r/cs?pid=21

HTTP Response

302

HTTP Request

GET https://ad.turn.com/r/cs?pid=45&rndcb=5103864468

HTTP Response

302
164.92.213.94:443

https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http

chrome.exe

2.4kB
8.0kB
14
15

HTTP Request

GET https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302
213.19.162.90:443

pixel-eu.rubiconproject.com

tls

chrome.exe

6.1kB
8.8kB
15
16
35.204.158.49:443

um.simpli.fi

tls

chrome.exe

3.4kB
7.4kB
17
17
34.242.99.146:443

pr-bh.ybp.yahoo.com

tls

chrome.exe

4.7kB
11.7kB
25
27
37.157.4.23:443

c1.adform.net

tls

chrome.exe

7.4kB
15.6kB
32
24
98.98.134.242:443

pixel-sync.sitescout.com

tls

chrome.exe

3.2kB
7.9kB
14
16
89.207.16.204:443

pubmatic-match.dotomi.com

tls

chrome.exe

2.9kB
5.8kB
15
15
185.64.189.110:443

simage2.pubmatic.com

tls

chrome.exe

16.8kB
12.4kB
46
62
52.76.44.220:443

sync.crwdcntrl.net

tls

chrome.exe

1.1kB
6.1kB
11
12
52.220.229.2:443

cm-supply-web.gammaplatform.com

tls

chrome.exe

1.1kB
6.8kB
10
12
185.64.189.110:443

simage2.pubmatic.com

tls

chrome.exe

1.2kB
5.0kB
12
12
185.64.189.110:443

simage2.pubmatic.com

tls

chrome.exe

1.2kB
5.0kB
12
12
213.19.162.90:443

token.rubiconproject.com

tls

chrome.exe

3.8kB
6.0kB
11
12
213.19.162.90:443

token.rubiconproject.com

tls

chrome.exe

3.7kB
6.4kB
11
12
213.19.162.90:443

token.rubiconproject.com

tls

chrome.exe

3.8kB
6.0kB
10
11
213.19.162.90:443

pixel.rubiconproject.com

tls

chrome.exe

5.7kB
7.8kB
16
16
52.95.126.138:443

aax-eu.amazon-adsystem.com

tls

chrome.exe

3.4kB
3.5kB
10
11
52.46.128.147:443

s.amazon-adsystem.com

tls

chrome.exe

8.5kB
12.7kB
19
16
34.149.40.38:443

https://u.4dex.io/setuid?bidder=yahoo&uid=y-3kJ5ao5E2uHyd.0tFQa2bjwpb3iJnsi1IM.VnDw-~A&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

2.5kB
6.6kB
12
13

HTTP Request

GET https://u.4dex.io/setuid?bidder=yahoo&uid=y-3kJ5ao5E2uHyd.0tFQa2bjwpb3iJnsi1IM.VnDw-~A&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
185.64.191.210:443

image2.pubmatic.com

tls

chrome.exe

8.6kB
9.2kB
26
37
213.19.162.90:443

pixel.rubiconproject.com

tls

chrome.exe

22.6kB
22.0kB
37
39
185.64.191.210:443

image2.pubmatic.com

tls

chrome.exe

1.1kB
4.9kB
11
11
141.94.171.214:443

https://pixel-eu.onaudience.com/?partner=104&icm&cver&mapped=12fdcd42707ca748f18b9611dc2644ce&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&redirect=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3DHHt10NrrgaRjbbgMhManRYnb%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http

chrome.exe

6.0kB
9.3kB
17
17

HTTP Request

GET https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D1%26gdpr_consent%3D%25_gdpr_consent

HTTP Response

302

HTTP Request

GET https://pixel-eu.onaudience.com/?partner=104&icm&cver&mapped=12fdcd42707ca748f18b9611dc2644ce&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&redirect=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3DHHt10NrrgaRjbbgMhManRYnb%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302
185.64.191.210:443

image2.pubmatic.com

tls

chrome.exe

1.1kB
4.9kB
11
11
185.64.191.210:443

image2.pubmatic.com

tls

chrome.exe

1.1kB
4.9kB
11
11
13.107.42.14:443

px.ads.linkedin.com

tls

chrome.exe

3.6kB
7.9kB
17
19
13.248.245.213:443

eb2.3lift.com

tls

chrome.exe

17.5kB
24.5kB
68
67
198.47.127.20:443

image4.pubmatic.com

tls

chrome.exe

4.5kB
5.5kB
15
17
35.227.252.103:443

https://rtb.openx.net/sync/prebid?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&r=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D482928%26extuid%3D%24%7BUID%7D

tls, http2

chrome.exe

2.3kB
5.1kB
15
15

HTTP Request

GET https://rtb.openx.net/sync/prebid?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&r=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Ft%3Da%26ep%3D482928%26extuid%3D%24%7BUID%7D
23.227.139.243:443

https://sync.spotim.market/csync?t=a&ep=708476&extuid=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004

tls, http

chrome.exe

6.5kB
7.0kB
20
18

HTTP Request

GET https://sync.spotim.market/csync?t=a&ep=323548&extuid=4894631733703052721&[GDPR_APPLIES]&gdpr_consent=[GDPR_CONSENT_STRING]

HTTP Response

200

HTTP Request

GET https://sync.spotim.market/csync?redir=https%3A%2F%2Fsync.spotim.market%2Fcsync%3Fredir%3Dhttps%253A%252F%252Fvisitor.omnitagjs.com%252Fvisitor%252Fsync%253Fuid%253D9f93135e824096b627ff609f5cdee636%2526visitor%253D%257Buid%257D%2526name%253DOPENWEB

HTTP Response

302

HTTP Request

GET https://sync.spotim.market/csync?t=a&ep=482928&extuid=52e9ed36-ecb2-43af-8e4b-4ddba7340b38

HTTP Response

200

HTTP Request

GET https://sync.spotim.market/csync?redir=https%3A%2F%2Fvisitor.omnitagjs.com%2Fvisitor%2Fsync%3Fuid%3D9f93135e824096b627ff609f5cdee636%26visitor%3D%7Buid%7D%26name%3DOPENWEB

HTTP Response

302

HTTP Request

GET https://sync.spotim.market/csync?t=a&ep=448580&extuid=00CDED12-08DE-41D7-A730-899A187EB7E5

HTTP Response

200

HTTP Request

GET https://sync.spotim.market/csync?t=a&ep=708476&extuid=RX-599a6f3b-aab7-4e16-96c0-ae73d0294f92-004

HTTP Response

200
74.118.186.107:443

sync.1rx.io

tls

chrome.exe

5.1kB
13.4kB
27
21
198.47.127.18:443

image8.pubmatic.com

tls

chrome.exe

8.4kB
8.6kB
24
31
35.190.60.146:443

https://id.rlcdn.com/711916.gif?ct=4&cv=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

2.2kB
8.1kB
14
16

HTTP Request

GET https://id.rlcdn.com/711916.gif?ct=4&cv=

HTTP Request

GET https://id.rlcdn.com/711916.gif?ct=4&cv=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
35.156.245.203:443

rtb.mfadsrvr.com

tls

chrome.exe

3.8kB
9.2kB
16
14
23.227.139.243:443

https://sync.spotim.market/csync?t=a&ep=309017&extuid=215c9a94-bb90-49b0-b1a2-76143d0dbe25-6479c5bf-494e&gdpr=$0&gdpr_consent=$

tls, http

chrome.exe

2.9kB
5.5kB
15
15

HTTP Request

GET https://sync.spotim.market/csync?t=a&ep=644680&extuid=2963187305596611584206

HTTP Response

200

HTTP Request

GET https://sync.spotim.market/csync?t=a&ep=309017&extuid=215c9a94-bb90-49b0-b1a2-76143d0dbe25-6479c5bf-494e&gdpr=$0&gdpr_consent=$

HTTP Response

200
74.118.186.107:443

sync.1rx.io

tls

chrome.exe

1.1kB
6.7kB
9
8
52.46.128.147:443

s.amazon-adsystem.com

tls

chrome.exe

6.3kB
5.3kB
15
14
18.214.94.14:443

sync.aniview.com

tls

chrome.exe

2.3kB
6.8kB
15
19
23.227.139.243:443

sync.spotim.market

tls

chrome.exe

869 B
708 B
6
7
185.86.138.155:443

https://ssbsync.smartadserver.com/api/sync?callerId=22&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http

chrome.exe

4.5kB
8.4kB
16
16

HTTP Request

GET https://ssbsync.smartadserver.com/api/sync?callerId=22&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200
185.80.39.216:443

https://ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http

chrome.exe

6.4kB
10.7kB
19
20

HTTP Request

GET https://ssum-sec.casalemedia.com/usermatchredir?s=194558&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&cb=https%3A%2F%2Fu.4dex.io%2Fsetuid%3Fbidder%3Dindexexchange%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26uid%3D

HTTP Response

302

HTTP Request

GET https://ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

200
34.102.253.54:443

https://ads.playground.xyz/usersync/apn?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MDEmdGw9NDMyMDA=&piggybackCookie=$UID

tls, http2

chrome.exe

1.9kB
6.8kB
14
17

HTTP Request

GET https://ads.playground.xyz/usersync/apn?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MDEmdGw9NDMyMDA=&piggybackCookie=$UID
192.132.33.46:443

bttrack.com

tls

chrome.exe

2.0kB
9.8kB
18
23
35.214.153.92:443

https://csync.loopme.me/?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

2.9kB
7.1kB
15
15

HTTP Request

GET https://csync.loopme.me/?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

307

HTTP Request

GET https://csync.loopme.me/?redirect=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D124%26partneruserid%3D%7Bdevice_id%7D&pubid=5679&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

307
74.214.196.131:443

https://bh.contextweb.com/bh/rtset?do=add&pid=558502&ev=AADPM07I84wAACFJuFXTrA&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26userid%3D6880727987372587628%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

6.5kB
10.2kB
21
21

HTTP Request

GET https://bh.contextweb.com/bh/rtset?pid=560288&ev=1&rurl=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D92%26partneruserid%3D%25%25VGUID%25%25&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://bh.contextweb.com/bh/rtset?do=add&pid=558502&ev=AADPM07I84wAACFJuFXTrA&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26userid%3D6880727987372587628%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302
67.199.150.85:443

simage4.pubmatic.com

tls

chrome.exe

7.0kB
5.9kB
17
20
141.95.98.64:443

https://id5-sync.com/c/102/2/3/7.gif?puid=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http

chrome.exe

15.0kB
24.1kB
38
43

HTTP Request

GET https://id5-sync.com/i/102/9.gif?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://id5-sync.com/c/102/0/9/1.gif?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&us_privacy=

HTTP Response

302

HTTP Request

GET https://id5-sync.com/c/102/102/8/2.gif?puid=6880727987372587628&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://id5-sync.com/k/264.gif?puid=2dc3e055-cffc-4d06-9da4-1904f628f2b7&ttl=%%TTL%%

HTTP Response

302

HTTP Request

GET https://id5-sync.com/c/102/123/6/4.gif?puid=1887bac8526-5148000001084d6e&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://id5-sync.com/c/102/3/5/5.gif?puid=86a06479-c5be-4e00-809d-041df6b6e2f1&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://id5-sync.com/qp/18.gif?puid=vec%3A37376318896&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY

HTTP Response

302

HTTP Request

GET https://id5-sync.com/c/102/2/3/7.gif?puid=4894631733703052721&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302
80.77.87.162:443

cs.admanmedia.com

tls

chrome.exe

3.9kB
8.9kB
15
17
52.222.139.67:443

https://s.ad.smaato.net/c/?adExInit=sas&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D133%26partneruserid%3D$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

2.8kB
8.1kB
14
18

HTTP Request

GET https://s.ad.smaato.net/c/?adExInit=sas&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D133%26partneruserid%3D$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://s.ad.smaato.net/c/?adExInit=sas&redir=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D133%26partneruserid%3D$UID&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302
37.157.3.29:443

dmp.adform.net

tls

chrome.exe

3.0kB
7.1kB
14
13
67.199.150.85:443

simage4.pubmatic.com

tls

chrome.exe

1.1kB
5.0kB
10
12
185.80.39.216:443

https://dsum-sec.casalemedia.com/crum?cm_dsp_id=111&external_user_id=1897977468389386522&expiration=1686911680

tls, http

chrome.exe

3.6kB
9.0kB
16
16

HTTP Request

GET https://dsum-sec.casalemedia.com/rrum?ixi=1&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dbm%26google_cm%26google_sc%26google_hm%3D

HTTP Response

302

HTTP Request

GET https://dsum-sec.casalemedia.com/rum?cm_dsp_id=4&external_user_id=8117640948868045750

HTTP Response

200

HTTP Request

GET https://dsum-sec.casalemedia.com/crum?cm_dsp_id=111&external_user_id=1897977468389386522&expiration=1686911680

HTTP Response

200
64.202.112.255:443

b1sync.zemanta.com

tls

chrome.exe

1.1kB
4.3kB
9
9
185.80.39.216:443

https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=2dc3e055-cffc-4d06-9da4-1904f628f2b7&expiration=1688294080&gdpr=0&gdpr_consent=

tls, http

chrome.exe

2.2kB
8.3kB
15
15

HTTP Request

GET https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=2dc3e055-cffc-4d06-9da4-1904f628f2b7&expiration=1688294080&gdpr=0&gdpr_consent=

HTTP Response

200
185.80.39.216:443

dsum-sec.casalemedia.com

tls

chrome.exe

1.2kB
6.9kB
10
13
185.80.39.216:443

https://dsum.casalemedia.com/crum?cm_dsp_id=190&external_user_id=4894631733703052721

tls, http

chrome.exe

2.0kB
7.6kB
14
15

HTTP Request

GET https://dsum.casalemedia.com/crum?cm_dsp_id=190&external_user_id=4894631733703052721

HTTP Response

200
80.77.87.162:443

cs.admanmedia.com

tls

chrome.exe

844 B
479 B
6
7
3.224.130.34:443

a.audrte.com

tls

chrome.exe

930 B
500 B
8
8
213.19.147.44:443

sync.targeting.unrulymedia.com

tls

chrome.exe

3.6kB
8.7kB
18
17
63.215.202.140:443

33across-match.dotomi.com

tls

chrome.exe

2.0kB
4.8kB
12
12
34.102.163.6:443

https://ad.mrtnsvr.com/sync/pubmatic?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http2

chrome.exe

2.2kB
8.3kB
13
16

HTTP Request

GET https://ad.mrtnsvr.com/sync/pubmatic?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA
157.90.40.26:443

matching.truffle.bid

tls

chrome.exe

2.0kB
5.5kB
12
14
96.16.108.246:443

acdn.adnxs.com

tls

chrome.exe

2.1kB
22.9kB
16
24
172.67.13.182:443

https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&cid=00CDED12-08DE-41D7-A730-899A187EB7E5

tls, http2

chrome.exe

2.0kB
3.6kB
11
10

HTTP Request

GET https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&cid=00CDED12-08DE-41D7-A730-899A187EB7E5

HTTP Response

200
141.94.171.212:443

https://pixel.onaudience.com/?partner=162&icm&cver&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26pid%3Ddn5h51u%26t%3Dgif%26uid%3D%25m

tls, http

chrome.exe

5.9kB
9.0kB
15
18

HTTP Request

GET https://pixel.onaudience.com/?partner=214&mapped=00CDED12-08DE-41D7-A730-899A187EB7E5&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://pixel.onaudience.com/?partner=162&icm&cver&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA%26pid%3Ddn5h51u%26t%3Dgif%26uid%3D%25m

HTTP Response

302
119.9.108.180:443

https://uipglob.semasio.net/id5/1/get?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F7%2F3.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

tls, http

chrome.exe

7.6kB
6.9kB
16
14

HTTP Request

GET https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=00CDED12-08DE-41D7-A730-899A187EB7E5&sInitiator=external&gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://uipglob.semasio.net/id5/1/get?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F2%2F8.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302

HTTP Request

GET https://uipglob.semasio.net/id5/1/get?gdpr=1&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&_url=https%3A%2F%2Fid5-sync.com%2Fc%2F102%2F112%2F7%2F3.gif%3Fpuid%3D%24%7BUIPID%7D%26gdpr%3D1%26gdpr_consent%3DCPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA

HTTP Response

302
119.9.108.180:443

uipglob.semasio.net

tls

chrome.exe

943 B
3.5kB
8
9
18.140.27.177:443

ps.eyeota.net

tls

chrome.exe

12.0kB
12.1kB
28
22
34.117.239.71:443

events-ssc.33across.com

tls, http2

chrome.exe

989 B
5.6kB
9
8
34.117.239.71:443

events-ssc.33across.com

tls, http2

chrome.exe

989 B
5.6kB
9
8
34.117.239.71:443

https://events-ssc.33across.com/match?bidder_id=64&external_user_id=AAAM5TTobO5AOANRbh-TAAAAAAA&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=

tls, http2

chrome.exe

2.8kB
7.4kB
22
29

HTTP Request

GET https://events-ssc.33across.com/match?bidder_id=33&external_user_id=2963187305596611584206&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=

HTTP Request

GET https://events-ssc.33across.com/match?liv=h&us_privacy=&bidder_id=1&external_user_id=86a06479-c5be-4e00-809d-041df6b6e2f1

HTTP Request

GET https://events-ssc.33across.com/match?bidder_id=99&external_user_id=y-d.nDxLBE2uF4LVpzqoLZLN.k0gvZcraW%7EA&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=

HTTP Request

GET https://events-ssc.33across.com/match?bidder_id=64&external_user_id=AAAM5TTobO5AOANRbh-TAAAAAAA&ts=1685702083&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=
185.80.39.216:443

https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=ha0P7kgew5AP6IcniAHr

tls, http

chrome.exe

2.1kB
7.6kB
14
14

HTTP Request

GET https://dsum-sec.casalemedia.com/crum?cm_dsp_id=17&external_user_id=ha0P7kgew5AP6IcniAHr

HTTP Response

200
50.57.31.206:443

uipus.semasio.net

tls

chrome.exe

8.9kB
8.2kB
16
17
52.222.139.7:443

https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=15926

tls, http2

chrome.exe

2.8kB
27.5kB
27
31

HTTP Request

GET https://tags.crwdcntrl.net/lt/c/15926/lt.min.js

HTTP Response

200

HTTP Request

GET https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=15926

HTTP Response

200
54.151.251.103:443

bcp.crwdcntrl.net

tls

chrome.exe

7.0kB
11.5kB
23
26
8.43.72.97:443

pixel-us-east.rubiconproject.com

tls

chrome.exe

5.4kB
6.6kB
12
13
204.79.197.200:443

c.bing.com

tls

chrome.exe

1.9kB
8.9kB
14
17
98.98.134.242:443

pixel-sync.sitescout.com

tls

chrome.exe

1.9kB
5.1kB
12
11
212.82.100.182:443

cms.analytics.yahoo.com

tls

chrome.exe

1.8kB
5.8kB
10
10
104.17.217.204:443

https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP

tls, http2

chrome.exe

1.7kB
3.9kB
11
10

HTTP Request

GET https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP

HTTP Response

302
213.19.147.44:443

sync.targeting.unrulymedia.com

tls

chrome.exe

1.8kB
1.2kB
10
9
54.36.150.184:443

https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=4894631733703052721&opid=apx&ops=&utidl=&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&action=GET_ID&etid=&domid=1033

tls, http2

chrome.exe

4.3kB
10.2kB
22
23

HTTP Request

GET https://cookie-matching.mediarithmics.com/v1/get_user_agent_id?dom_token=id517&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY

HTTP Response

303

HTTP Request

GET https://cookie-matching.mediarithmics.com/v1/get_or_create?gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&domid=1033

HTTP Response

303

HTTP Request

GET https://cookie-matching.mediarithmics.com/input?key=GOO&key=GOO&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&action=GET_ID&opid=goo&etid=&domid=1033&ops=apx&google_error=15

HTTP Response

303

HTTP Request

GET https://cookie-matching.mediarithmics.com/input?key=APX&apx_uid=4894631733703052721&opid=apx&ops=&utidl=&sd=Y2FzY2FkZXNSZW1haW5pbmc9NCZjYXNjYWRlc0RvbmU9NiZpbml0aWF0aW5nUGFydG5lcj0xMDImZm9ybWF0PWdpZiY&gdpr_consent=CPsu-oAPsu-oAAKAoAENDFCsAP_AAH_AAAqIJbtX_H__bW9r8f5_aft0eY1P9_j77uQzDhfNk-4F3L_W_JwX52E7NF36tq4KmR4Eu3LBIUNlHNHUTVmwaokVryHsak2cpTNKJ6BEkHMRO2dYGF5umxtjeQKY5_p_d3fx2D-t_dv-39z3z81Xn3dZf-_0-PCdU5_9Dfn9fRfb-9IL9_78v8v8_9_rk2_eX_3_79_7_H9-f_84JcAEmGrcQBdmUODNoGEUCIEYVhARQKACCgGFogIAFBwU7IwCfWESAFAKAIwIgQ4AoyIBAAAJAEhEAEgRYIAAABAIAAQAIBEIAGBgEFABYCAQAAgOgYohQACBIQJEREQpgQFQJBAS2VCCUF0hphAFWWAFAIjYKABEEgIrAAEBYOAYIkBKxYIEmINogAGAFAKJUK1FJ6aAhYzMAAAA.d4AACHgAAAAA&gdpr=1&action=GET_ID&etid=&domid=1033

HTTP Response

303
3.126.192.167:443

i.w55c.net

tls

chrome.exe

2.0kB
6.7kB
13
12
35.159.47.190:443

pm.w55c.net

tls

chrome.exe

4.5kB
9.1kB
12
11
46.228.164.13:443

https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=4&dc_mr=5&dc_orig=dn5h51u&&referrer_pid=dn5h51u

tls, http2

chrome.exe

1.9kB
5.7kB
14
15

HTTP Request

GET https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=4&dc_mr=5&dc_orig=dn5h51u&&referrer_pid=dn5h51u

HTTP Response

302

8.8.8.8:53

164.2.77.40.in-addr.arpa

dns

70 B
144 B
1
1

DNS Request

164.2.77.40.in-addr.arpa
8.8.8.8:53

14.110.152.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

14.110.152.52.in-addr.arpa
8.8.8.8:53

123.108.74.40.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

123.108.74.40.in-addr.arpa
8.8.8.8:53

1fichier.com

dns

chrome.exe

58 B
74 B
1
1

DNS Request

1fichier.com

DNS Response

5.39.224.140
8.8.8.8:53

195.179.250.142.in-addr.arpa

dns

74 B
112 B
1
1

DNS Request

195.179.250.142.in-addr.arpa
8.8.8.8:53

250.255.255.239.in-addr.arpa

dns

74 B
131 B
1
1

DNS Request

250.255.255.239.in-addr.arpa
8.8.8.8:53

img.1fichier.com

dns

chrome.exe

62 B
78 B
1
1

DNS Request

img.1fichier.com

DNS Response

5.39.224.141
8.8.8.8:53

tags.refinery89.com

dns

chrome.exe

65 B
172 B
1
1

DNS Request

tags.refinery89.com

DNS Response

65.9.86.6

65.9.86.53

65.9.86.82

65.9.86.105
8.8.8.8:53

t.seedtag.com

dns

chrome.exe

59 B
139 B
1
1

DNS Request

t.seedtag.com

DNS Response

104.18.135.145

104.18.134.145

104.18.131.145

104.18.133.145

104.18.132.145
104.18.135.145:443

t.seedtag.com

https

chrome.exe

3.1kB
5.3kB
8
10
8.8.8.8:53

prg.smartadserver.com

dns

chrome.exe

67 B
250 B
1
1

DNS Request

prg.smartadserver.com

DNS Response

185.86.139.96

185.86.139.116

185.86.139.59

185.86.139.58

185.86.139.95

185.86.139.85
8.8.8.8:53

ib.adnxs.com

dns

chrome.exe

58 B
299 B
1
1

DNS Request

ib.adnxs.com

DNS Response

185.89.210.46

185.83.142.19

185.89.210.122

185.89.211.84

185.89.210.101

185.89.210.244

185.89.210.153

185.89.210.180

185.89.210.20

185.89.210.212

185.89.210.141

185.89.211.12
8.8.8.8:53

adx.adform.net

dns

chrome.exe

124 B
340 B
2
2

DNS Request

adx.adform.net

DNS Response

37.157.2.234

37.157.3.20

37.157.2.229

DNS Request

match.prod.bidr.io

DNS Response

3.115.232.128

52.192.188.206

18.179.211.247

18.177.220.198

18.177.86.134

175.41.198.31

176.32.75.166

18.178.244.136
8.8.8.8:53

cmp.quantcast.com

dns

chrome.exe

63 B
127 B
1
1

DNS Request

cmp.quantcast.com

DNS Response

13.227.219.68

13.227.219.42

13.227.219.121

13.227.219.52
8.8.8.8:53

measure.refinery89.com

dns

chrome.exe

68 B
175 B
1
1

DNS Request

measure.refinery89.com

DNS Response

108.156.60.34

108.156.60.104

108.156.60.56

108.156.60.72
8.8.8.8:53

tlx.3lift.com

dns

chrome.exe

59 B
208 B
1
1

DNS Request

tlx.3lift.com

DNS Response

3.0.26.101

54.169.60.26

52.74.248.105

52.77.165.176

54.169.59.183

18.139.195.127

52.76.167.27

52.77.22.253
8.8.8.8:53

140.224.39.5.in-addr.arpa

dns

71 B
101 B
1
1

DNS Request

140.224.39.5.in-addr.arpa
8.8.8.8:53

138.179.250.142.in-addr.arpa

dns

74 B
113 B
1
1

DNS Request

138.179.250.142.in-addr.arpa
8.8.8.8:53

141.224.39.5.in-addr.arpa

dns

71 B
101 B
1
1

DNS Request

141.224.39.5.in-addr.arpa
8.8.8.8:53

6.86.9.65.in-addr.arpa

dns

68 B
120 B
1
1

DNS Request

6.86.9.65.in-addr.arpa
8.8.8.8:53

145.135.18.104.in-addr.arpa

dns

73 B
135 B
1
1

DNS Request

145.135.18.104.in-addr.arpa
8.8.8.8:53

17.211.227.13.in-addr.arpa

dns

72 B
129 B
1
1

DNS Request

17.211.227.13.in-addr.arpa
8.8.8.8:53

22.160.190.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

22.160.190.20.in-addr.arpa
8.8.8.8:53

apps.identrust.com

dns

chrome.exe

64 B
165 B
1
1

DNS Request

apps.identrust.com

DNS Response

88.221.25.169

88.221.25.153
8.8.8.8:53

quantcast.mgr.consensu.org

dns

chrome.exe

72 B
136 B
1
1

DNS Request

quantcast.mgr.consensu.org

DNS Response

13.227.219.68

13.227.219.121

13.227.219.52

13.227.219.42
8.8.8.8:53

secure.quantserve.com

dns

chrome.exe

67 B
193 B
1
1

DNS Request

secure.quantserve.com

DNS Response

103.229.10.180

103.229.10.247

103.229.10.211

103.229.10.171

103.229.10.192
8.8.8.8:53

test.quantcast.mgr.consensu.org

dns

chrome.exe

154 B
282 B
2
2

DNS Request

test.quantcast.mgr.consensu.org

DNS Request

test.quantcast.mgr.consensu.org

DNS Response

108.156.60.65

108.156.60.90

108.156.60.93

108.156.60.102

DNS Response

108.156.60.65

108.156.60.90

108.156.60.93

108.156.60.102
8.8.8.8:53

audit-tcfv2.quantcast.mgr.consensu.org

dns

chrome.exe

84 B
132 B
1
1

DNS Request

audit-tcfv2.quantcast.mgr.consensu.org

DNS Response

18.138.188.172

175.41.146.71

54.251.135.177
8.8.8.8:53

46.210.89.185.in-addr.arpa

dns

72 B
133 B
1
1

DNS Request

46.210.89.185.in-addr.arpa
8.8.8.8:53

96.139.86.185.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

96.139.86.185.in-addr.arpa
8.8.8.8:53

68.219.227.13.in-addr.arpa

dns

72 B
129 B
1
1

DNS Request

68.219.227.13.in-addr.arpa
8.8.8.8:53

34.60.156.108.in-addr.arpa

dns

72 B
128 B
1
1

DNS Request

34.60.156.108.in-addr.arpa
8.8.8.8:53

234.2.157.37.in-addr.arpa

dns

71 B
143 B
1
1

DNS Request

234.2.157.37.in-addr.arpa
8.8.8.8:53

169.25.221.88.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

169.25.221.88.in-addr.arpa
8.8.8.8:53

101.26.0.3.in-addr.arpa

dns

138 B
268 B
2
2

DNS Request

101.26.0.3.in-addr.arpa

DNS Request

101.26.0.3.in-addr.arpa
8.8.8.8:53

65.60.156.108.in-addr.arpa

dns

72 B
128 B
1
1

DNS Request

65.60.156.108.in-addr.arpa
8.8.8.8:53

180.10.229.103.in-addr.arpa

dns

73 B
161 B
1
1

DNS Request

180.10.229.103.in-addr.arpa
8.8.8.8:53

rules.quantcount.com

dns

chrome.exe

66 B
173 B
1
1

DNS Request

rules.quantcount.com

DNS Response

18.65.39.30

18.65.39.9

18.65.39.81

18.65.39.99
8.8.8.8:53

172.188.138.18.in-addr.arpa

dns

73 B
142 B
1
1

DNS Request

172.188.138.18.in-addr.arpa
8.8.8.8:53

s.seedtag.com

dns

chrome.exe

59 B
75 B
1
1

DNS Request

s.seedtag.com

DNS Response

34.149.50.64
8.8.8.8:53

30.39.65.18.in-addr.arpa

dns

70 B
124 B
1
1

DNS Request

30.39.65.18.in-addr.arpa
8.8.8.8:53

64.50.149.34.in-addr.arpa

dns

71 B
122 B
1
1

DNS Request

64.50.149.34.in-addr.arpa
8.8.8.8:53

97.17.167.52.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

97.17.167.52.in-addr.arpa
34.149.50.64:443

s.seedtag.com

https

chrome.exe

30.1kB
29.2kB
96
113
8.8.8.8:53

pixel.quantserve.com

dns

chrome.exe

66 B
170 B
1
1

DNS Request

pixel.quantserve.com

DNS Response

103.229.10.192

103.229.10.211

103.229.10.180

103.229.10.171

103.229.10.247
8.8.8.8:53

script.4dex.io

dns

chrome.exe

120 B
216 B
2
2

DNS Request

script.4dex.io

DNS Response

104.26.8.169

104.26.9.169

172.67.75.241

DNS Request

script.4dex.io

DNS Response

104.26.8.169

104.26.9.169

172.67.75.241
8.8.8.8:53

clients2.google.com

dns

chrome.exe

65 B
105 B
1
1

DNS Request

clients2.google.com

DNS Response

142.251.36.46
8.8.8.8:53

ad.360yield.com

dns

chrome.exe

61 B
249 B
1
1

DNS Request

ad.360yield.com

DNS Response

3.0.22.190

54.169.202.70

18.138.82.20

18.139.81.52

18.138.198.66

13.228.204.187

13.215.109.61

52.220.81.229
8.8.8.8:53

ap.lijit.com

dns

chrome.exe

58 B
226 B
1
1

DNS Request

ap.lijit.com

DNS Response

216.52.2.30

216.52.2.86

216.52.2.48

216.52.2.39

216.52.2.91

216.52.2.6

216.52.2.16
8.8.8.8:53

mp.4dex.io

dns

chrome.exe

56 B
88 B
1
1

DNS Request

mp.4dex.io

DNS Response

104.18.2.114

104.18.3.114
8.8.8.8:53

b1h.zemanta.com

dns

chrome.exe

61 B
161 B
1
1

DNS Request

b1h.zemanta.com

DNS Response

50.31.142.255
8.8.8.8:53

s.adx.opera.com

dns

chrome.exe

61 B
141 B
1
1

DNS Request

s.adx.opera.com

DNS Response

103.83.123.59
8.8.8.8:53

prebid.media.net

dns

chrome.exe

62 B
78 B
1
1

DNS Request

prebid.media.net

DNS Response

34.120.63.153
8.8.8.8:53

btlr.sharethrough.com

dns

chrome.exe

67 B
229 B
1
1

DNS Request

btlr.sharethrough.com

DNS Response

18.140.202.208

54.169.41.224

52.77.11.166

18.139.178.1

54.255.138.213

52.221.0.158

54.169.2.48

52.77.153.240
8.8.8.8:53

rtb.adpone.com

dns

chrome.exe

60 B
108 B
1
1

DNS Request

rtb.adpone.com

DNS Response

172.67.73.228

104.26.11.25

104.26.10.25
8.8.8.8:53

onetag-sys.com

dns

chrome.exe

60 B
156 B
1
1

DNS Request

onetag-sys.com

DNS Response

51.89.9.254

51.89.9.251

51.38.120.206

51.89.9.253

51.89.9.252

51.75.86.98
8.8.8.8:53

cs.seedtag.com

dns

chrome.exe

60 B
140 B
1
1

DNS Request

cs.seedtag.com

DNS Response

104.18.131.145

104.18.133.145

104.18.132.145

104.18.135.145

104.18.134.145
8.8.8.8:53

clients2.googleusercontent.com

dns

chrome.exe

76 B
121 B
1
1

DNS Request

clients2.googleusercontent.com

DNS Response

142.251.36.1
8.8.8.8:53

secure-assets.rubiconproject.com

dns

chrome.exe

156 B
366 B
2
2

DNS Request

secure-assets.rubiconproject.com

DNS Response

23.52.56.137

DNS Request

secure-assets.rubiconproject.com

DNS Response

23.52.56.137
8.8.8.8:53

csync.smartadserver.com

dns

chrome.exe

69 B
183 B
1
1

DNS Request

csync.smartadserver.com

DNS Response

2.19.117.162

2.19.117.140
8.8.8.8:53

ads.pubmatic.com

dns

chrome.exe

124 B
290 B
2
2

DNS Request

ads.pubmatic.com

DNS Response

96.16.109.9

DNS Request

ads.pubmatic.com

DNS Response

96.16.109.9
8.8.8.8:53

sync.richaudience.com

dns

chrome.exe

67 B
83 B
1
1

DNS Request

sync.richaudience.com

DNS Response

168.119.72.236
8.8.8.8:53

ssc-cms.33across.com

dns

chrome.exe

66 B
118 B
1
1

DNS Request

ssc-cms.33across.com

DNS Response

67.202.105.22

67.202.105.21
8.8.8.8:53

visitor.omnitagjs.com

dns

chrome.exe

134 B
254 B
2
2

DNS Request

visitor.omnitagjs.com

DNS Response

185.255.84.152

185.255.84.153

DNS Request

visitor.omnitagjs.com

DNS Response

185.255.84.152

185.255.84.153
34.149.50.64:443

s.seedtag.com

https

chrome.exe

104.7kB
8.0kB
95
51
8.8.8.8:53

sync.smartadserver.com

dns

chrome.exe

68 B
273 B
1
1

DNS Request

sync.smartadserver.com

DNS Response

185.86.139.103

185.86.139.93

185.86.139.104

185.86.139.101

185.86.139.94

185.86.139.102
8.8.8.8:53

secure.adnxs.com

dns

chrome.exe

62 B
255 B
1
1

DNS Request

secure.adnxs.com

DNS Response

37.252.171.149

37.252.171.22

37.252.173.215

37.252.172.123

37.252.171.85

37.252.171.53

37.252.171.52

37.252.171.21

37.252.171.84
8.8.8.8:53

b1sync.zemanta.com

dns

chrome.exe

64 B
64 B
1
1

DNS Request

b1sync.zemanta.com
8.8.8.8:53

match.adsrvr.org

dns

chrome.exe

62 B
126 B
1
1

DNS Request

match.adsrvr.org

DNS Response

52.223.40.198

35.71.131.137

15.197.193.217

3.33.220.150
8.8.8.8:53

x.bidswitch.net

dns

chrome.exe

61 B
262 B
1
1

DNS Request

x.bidswitch.net

DNS Response

3.124.99.17

52.28.212.5

18.198.83.202

3.122.27.188

52.28.232.169

3.127.130.17

3.75.120.250

18.157.214.110
8.8.8.8:53

sync.search.spotxchange.com

dns

chrome.exe

73 B
181 B
1
1

DNS Request

sync.search.spotxchange.com

DNS Response

185.94.180.126

185.94.180.125
8.8.8.8:53

ssum-sec.casalemedia.com

dns

chrome.exe

70 B
174 B
1
1

DNS Request

ssum-sec.casalemedia.com

DNS Response

185.80.39.216
8.8.8.8:53

169.8.26.104.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

169.8.26.104.in-addr.arpa
8.8.8.8:53

46.36.251.142.in-addr.arpa

dns

72 B
111 B
1
1

DNS Request

46.36.251.142.in-addr.arpa
8.8.8.8:53

30.2.52.216.in-addr.arpa

dns

140 B
140 B
2
2

DNS Request

30.2.52.216.in-addr.arpa

DNS Request

30.2.52.216.in-addr.arpa
8.8.8.8:53

153.63.120.34.in-addr.arpa

dns

72 B
124 B
1
1

DNS Request

153.63.120.34.in-addr.arpa
8.8.8.8:53

254.9.89.51.in-addr.arpa

dns

70 B
103 B
1
1

DNS Request

254.9.89.51.in-addr.arpa
8.8.8.8:53

114.2.18.104.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

114.2.18.104.in-addr.arpa
8.8.8.8:53

228.73.67.172.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

228.73.67.172.in-addr.arpa
8.8.8.8:53

255.142.31.50.in-addr.arpa

dns

72 B
102 B
1
1

DNS Request

255.142.31.50.in-addr.arpa
8.8.8.8:53

190.22.0.3.in-addr.arpa

dns

69 B
134 B
1
1

DNS Request

190.22.0.3.in-addr.arpa
8.8.8.8:53

59.123.83.103.in-addr.arpa

dns

72 B
160 B
1
1

DNS Request

59.123.83.103.in-addr.arpa
8.8.8.8:53

1.36.251.142.in-addr.arpa

dns

71 B
109 B
1
1

DNS Request

1.36.251.142.in-addr.arpa
8.8.8.8:53

208.202.140.18.in-addr.arpa

dns

73 B
142 B
1
1

DNS Request

208.202.140.18.in-addr.arpa
8.8.8.8:53

162.117.19.2.in-addr.arpa

dns

142 B
270 B
2
2

DNS Request

162.117.19.2.in-addr.arpa

DNS Request

162.117.19.2.in-addr.arpa
8.8.8.8:53

match.sharethrough.com

dns

chrome.exe

68 B
233 B
1
1

DNS Request

match.sharethrough.com

DNS Response

35.158.198.172

3.126.36.96

35.159.45.56

52.28.172.114

18.197.12.252

52.28.18.50

52.59.74.235

3.122.202.171
8.8.8.8:53

eus.rubiconproject.com

dns

chrome.exe

68 B
165 B
1
1

DNS Request

eus.rubiconproject.com

DNS Response

23.52.56.137
8.8.8.8:53

de.tynt.com

dns

chrome.exe

57 B
89 B
1
1

DNS Request

de.tynt.com

DNS Response

67.202.105.32

67.202.105.31
8.8.8.8:53

cm.g.doubleclick.net

dns

chrome.exe

66 B
82 B
1
1

DNS Request

cm.g.doubleclick.net

DNS Response

216.58.208.98
8.8.8.8:53

ups.analytics.yahoo.com

dns

chrome.exe

69 B
254 B
1
1

DNS Request

ups.analytics.yahoo.com

DNS Response

3.75.62.37

3.71.149.231
8.8.8.8:53

sync.mathtag.com

dns

chrome.exe

62 B
153 B
1
1

DNS Request

sync.mathtag.com

DNS Response

185.29.134.244

185.29.132.245

185.29.134.248

185.29.132.241
8.8.8.8:53

image6.pubmatic.com

dns

chrome.exe

65 B
136 B
1
1

DNS Request

image6.pubmatic.com

DNS Response

185.64.190.78
8.8.8.8:53

cm.adform.net

dns

chrome.exe

59 B
147 B
1
1

DNS Request

cm.adform.net

DNS Response

37.157.5.84

37.157.5.132

37.157.5.133
216.58.208.98:443

cm.g.doubleclick.net

https

chrome.exe

20.1kB
31.7kB
117
141
8.8.8.8:53

u.openx.net

dns

chrome.exe

57 B
89 B
1
1

DNS Request

u.openx.net

DNS Response

34.98.64.218

35.244.159.8
8.8.8.8:53

event.clientgear.com

dns

chrome.exe

66 B
82 B
1
1

DNS Request

event.clientgear.com

DNS Response

47.252.78.131
8.8.8.8:53

creativecdn.com

dns

chrome.exe

61 B
77 B
1
1

DNS Request

creativecdn.com

DNS Response

185.184.8.90
8.8.8.8:53

stags.bluekai.com

dns

chrome.exe

63 B
154 B
1
1

DNS Request

stags.bluekai.com

DNS Response

173.223.113.181
34.98.64.218:443

u.openx.net

https

chrome.exe

5.2kB
6.3kB
16
18
8.8.8.8:53

hde.tynt.com

dns

chrome.exe

58 B
90 B
1
1

DNS Request

hde.tynt.com

DNS Response

67.202.105.34

67.202.105.32
8.8.8.8:53

137.56.52.23.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

137.56.52.23.in-addr.arpa
224.0.0.251:5353

chrome.exe

204 B
3
8.8.8.8:53

track.adform.net

dns

chrome.exe

62 B
150 B
1
1

DNS Request

track.adform.net

DNS Response

37.157.5.84

37.157.5.133

37.157.5.132
8.8.8.8:53

ced-ns.sascdn.com

dns

chrome.exe

63 B
211 B
1
1

DNS Request

ced-ns.sascdn.com

DNS Response

23.72.252.145

23.72.252.176
8.8.8.8:53

token.rubiconproject.com

dns

chrome.exe

70 B
151 B
1
1

DNS Request

token.rubiconproject.com

DNS Response

213.19.162.90

213.19.162.80
8.8.8.8:53

236.72.119.168.in-addr.arpa

dns

73 B
131 B
1
1

DNS Request

236.72.119.168.in-addr.arpa
8.8.8.8:53

22.105.202.67.in-addr.arpa

dns

72 B
125 B
1
1

DNS Request

22.105.202.67.in-addr.arpa
8.8.8.8:53

9.109.16.96.in-addr.arpa

dns

140 B
266 B
2
2

DNS Request

9.109.16.96.in-addr.arpa

DNS Request

9.109.16.96.in-addr.arpa
8.8.8.8:53

152.84.255.185.in-addr.arpa

dns

73 B
150 B
1
1

DNS Request

152.84.255.185.in-addr.arpa
8.8.8.8:53

198.40.223.52.in-addr.arpa

dns

72 B
128 B
1
1

DNS Request

198.40.223.52.in-addr.arpa
8.8.8.8:53

149.171.252.37.in-addr.arpa

dns

73 B
134 B
1
1

DNS Request

149.171.252.37.in-addr.arpa
8.8.8.8:53

126.180.94.185.in-addr.arpa

dns

73 B
133 B
1
1

DNS Request

126.180.94.185.in-addr.arpa
8.8.8.8:53

216.39.80.185.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

216.39.80.185.in-addr.arpa
8.8.8.8:53

17.99.124.3.in-addr.arpa

dns

70 B
134 B
1
1

DNS Request

17.99.124.3.in-addr.arpa
8.8.8.8:53

172.198.158.35.in-addr.arpa

dns

73 B
140 B
1
1

DNS Request

172.198.158.35.in-addr.arpa
8.8.8.8:53

255.112.202.64.in-addr.arpa

dns

73 B
102 B
1
1

DNS Request

255.112.202.64.in-addr.arpa
8.8.8.8:53

103.139.86.185.in-addr.arpa

dns

73 B
133 B
1
1

DNS Request

103.139.86.185.in-addr.arpa
8.8.8.8:53

98.208.58.216.in-addr.arpa

dns

72 B
140 B
1
1

DNS Request

98.208.58.216.in-addr.arpa
8.8.8.8:53

226.20.18.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

226.20.18.104.in-addr.arpa
8.8.8.8:53

37.62.75.3.in-addr.arpa

dns

69 B
132 B
1
1

DNS Request

37.62.75.3.in-addr.arpa
8.8.8.8:53

244.134.29.185.in-addr.arpa

dns

73 B
133 B
1
1

DNS Request

244.134.29.185.in-addr.arpa
8.8.8.8:53

32.105.202.67.in-addr.arpa

dns

144 B
250 B
2
2

DNS Request

32.105.202.67.in-addr.arpa

DNS Request

32.105.202.67.in-addr.arpa
8.8.8.8:53

78.190.64.185.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

78.190.64.185.in-addr.arpa
8.8.8.8:53

84.5.157.37.in-addr.arpa

dns

70 B
142 B
1
1

DNS Request

84.5.157.37.in-addr.arpa
8.8.8.8:53

218.64.98.34.in-addr.arpa

dns

71 B
122 B
1
1

DNS Request

218.64.98.34.in-addr.arpa
8.8.8.8:53

90.8.184.185.in-addr.arpa

dns

71 B
113 B
1
1

DNS Request

90.8.184.185.in-addr.arpa
8.8.8.8:53

131.78.252.47.in-addr.arpa

dns

72 B
143 B
1
1

DNS Request

131.78.252.47.in-addr.arpa
8.8.8.8:53

181.113.223.173.in-addr.arpa

dns

74 B
141 B
1
1

DNS Request

181.113.223.173.in-addr.arpa
8.8.8.8:53

pixel.advertising.com

dns

chrome.exe

67 B
256 B
1
1

DNS Request

pixel.advertising.com

DNS Response

13.228.126.19

18.143.106.89
8.8.8.8:53

csync.smilewanted.com

dns

chrome.exe

67 B
115 B
1
1

DNS Request

csync.smilewanted.com

DNS Response

172.67.10.198

104.22.68.131

104.22.69.131
8.8.8.8:53

api-2-0.spot.im

dns

chrome.exe

61 B
125 B
1
1

DNS Request

api-2-0.spot.im

DNS Response

108.156.60.69

108.156.60.114

108.156.60.43

108.156.60.74
8.8.8.8:53

pixel-eu.rubiconproject.com

dns

chrome.exe

73 B
157 B
1
1

DNS Request

pixel-eu.rubiconproject.com

DNS Response

213.19.162.90

213.19.162.80
8.8.8.8:53

match.prod.bidr.io

dns

chrome.exe

64 B
192 B
1
1

DNS Request

match.prod.bidr.io

DNS Response

18.177.86.134

176.32.75.166

18.177.220.198

18.178.244.136

175.41.198.31

52.192.188.206

3.115.232.128

18.179.211.247
8.8.8.8:53

csync.loopme.me

dns

chrome.exe

61 B
129 B
1
1

DNS Request

csync.loopme.me

DNS Response

35.214.153.92
8.8.8.8:53

sync.srv.stackadapt.com

dns

chrome.exe

69 B
197 B
1
1

DNS Request

sync.srv.stackadapt.com

DNS Response

54.157.56.43

54.205.93.130

3.81.178.203

54.227.251.232

23.22.223.71

52.55.128.92

54.211.72.252

44.195.241.23
8.8.8.8:53

inv-nets.admixer.net

dns

chrome.exe

66 B
82 B
1
1

DNS Request

inv-nets.admixer.net

DNS Response

146.0.227.110
8.8.8.8:53

sync.adotmob.com

dns

chrome.exe

62 B
110 B
1
1

DNS Request

sync.adotmob.com

DNS Response

52.212.63.96

18.200.148.241

34.246.235.172
8.8.8.8:53

ads.betweendigital.com

dns

chrome.exe

68 B
150 B
1
1

DNS Request

ads.betweendigital.com

DNS Response

188.42.34.65

188.42.196.115

188.42.34.64

188.42.191.196
8.8.8.8:53

s.spotim.market

dns

chrome.exe

61 B
61 B
1
1

DNS Request

s.spotim.market
8.8.8.8:53

p.rfihub.com

dns

chrome.exe

58 B
148 B
1
1

DNS Request

p.rfihub.com

DNS Response

193.0.160.131
8.8.8.8:53

dis.criteo.com

dns

chrome.exe

120 B
220 B
2
2

DNS Request

dis.criteo.com

DNS Response

182.161.73.146

DNS Request

dis.criteo.com

DNS Response

182.161.73.146
8.8.8.8:53

d5p.de17a.com

dns

chrome.exe

59 B
251 B
1
1

DNS Request

d5p.de17a.com

DNS Response

213.155.156.164

213.155.156.167

213.155.156.180

213.155.156.165

213.155.156.182

213.155.156.184

213.155.156.166

213.155.156.185

213.155.156.168

213.155.156.183

213.155.156.169

213.155.156.181
8.8.8.8:53

aax-eu.amazon-adsystem.com

dns

chrome.exe

144 B
176 B
2
2

DNS Request

aax-eu.amazon-adsystem.com

DNS Response

52.95.126.138

DNS Request

aax-eu.amazon-adsystem.com

DNS Response

52.94.223.37
8.8.8.8:53

cms.quantserve.com

dns

chrome.exe

64 B
190 B
1
1

DNS Request

cms.quantserve.com

DNS Response

103.229.10.192

103.229.10.171

103.229.10.211

103.229.10.247

103.229.10.180
8.8.8.8:53

sync.crwdcntrl.net

dns

chrome.exe

64 B
192 B
1
1

DNS Request

sync.crwdcntrl.net

DNS Response

52.76.44.220

13.251.211.193

54.151.149.20

52.77.85.82

3.0.210.172

52.77.198.137

3.1.234.252

18.142.132.47
8.8.8.8:53

cr.frontend.weborama.fr

dns

chrome.exe

69 B
85 B
1
1

DNS Request

cr.frontend.weborama.fr

DNS Response

34.111.129.221
8.8.8.8:53

a.audrte.com

dns

chrome.exe

58 B
186 B
1
1

DNS Request

a.audrte.com

DNS Response

3.224.130.34

18.214.236.190

52.44.244.58

54.82.169.31

34.234.253.86

54.237.77.135

3.221.8.21

54.84.97.211
8.8.8.8:53

dsp.adfarm1.adition.com

dns

chrome.exe

69 B
101 B
1
1

DNS Request

dsp.adfarm1.adition.com

DNS Response

85.114.159.93

85.114.159.118
8.8.8.8:53

sync-tm.everesttech.net

dns

chrome.exe

138 B
446 B
2
2

DNS Request

sync-tm.everesttech.net

DNS Response

151.101.2.49

151.101.66.49

151.101.130.49

151.101.194.49

DNS Request

sync-tm.everesttech.net

DNS Response

151.101.2.49

151.101.66.49

151.101.130.49

151.101.194.49
8.8.8.8:53

cm.adgrx.com

dns

chrome.exe

58 B
247 B
1
1

DNS Request

cm.adgrx.com

DNS Response

173.231.181.122

72.251.241.206

72.251.245.179

72.251.241.204

63.251.232.165

72.251.245.181

63.251.232.170

72.251.241.196
8.8.8.8:53

ipac.ctnsnet.com

dns

chrome.exe

62 B
78 B
1
1

DNS Request

ipac.ctnsnet.com

DNS Response

35.186.193.173
8.8.8.8:53

core.iprom.net

dns

chrome.exe

60 B
76 B
1
1

DNS Request

core.iprom.net

DNS Response

195.5.165.20
8.8.8.8:53

cm-supply-web.gammaplatform.com

dns

chrome.exe

77 B
93 B
1
1

DNS Request

cm-supply-web.gammaplatform.com

DNS Response

52.220.229.2
8.8.8.8:53

green.erne.co

dns

chrome.exe

59 B
251 B
1
1

DNS Request

green.erne.co

DNS Response

141.94.161.190

141.94.242.204

141.95.172.216

141.95.171.142

141.95.171.141

141.95.171.140

141.95.171.139

141.94.240.141

141.94.161.158

141.94.240.143

141.94.242.226

141.94.242.206
8.8.8.8:53

a.tribalfusion.com

dns

chrome.exe

64 B
96 B
1
1

DNS Request

a.tribalfusion.com

DNS Response

104.18.24.173

104.18.25.173
8.8.8.8:53

145.252.72.23.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

145.252.72.23.in-addr.arpa
8.8.8.8:53

90.162.19.213.in-addr.arpa

dns

72 B
72 B
1
1

DNS Request

90.162.19.213.in-addr.arpa
8.8.8.8:53

198.10.67.172.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

198.10.67.172.in-addr.arpa
8.8.8.8:53

110.227.0.146.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

110.227.0.146.in-addr.arpa
8.8.8.8:53

69.60.156.108.in-addr.arpa

dns

72 B
128 B
1
1

DNS Request

69.60.156.108.in-addr.arpa
8.8.8.8:53

65.34.42.188.in-addr.arpa

dns

71 B
144 B
1
1

DNS Request

65.34.42.188.in-addr.arpa
8.8.8.8:53

96.63.212.52.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

96.63.212.52.in-addr.arpa
8.8.8.8:53

92.153.214.35.in-addr.arpa

dns

72 B
124 B
1
1

DNS Request

92.153.214.35.in-addr.arpa
8.8.8.8:53

19.126.228.13.in-addr.arpa

dns

72 B
140 B
1
1

DNS Request

19.126.228.13.in-addr.arpa
8.8.8.8:53

43.56.157.54.in-addr.arpa

dns

142 B
250 B
2
2

DNS Request

43.56.157.54.in-addr.arpa

DNS Request

43.56.157.54.in-addr.arpa
8.8.8.8:53

um.simpli.fi

dns

chrome.exe

58 B
106 B
1
1

DNS Request

um.simpli.fi

DNS Response

35.204.158.49

34.91.62.186

35.204.74.118
8.8.8.8:53

c1.adform.net

dns

chrome.exe

59 B
176 B
1
1

DNS Request

c1.adform.net

DNS Response

37.157.4.23

37.157.4.28

37.157.4.25

37.157.4.24

37.157.4.29
8.8.8.8:53

pr-bh.ybp.yahoo.com

dns

chrome.exe

65 B
173 B
1
1

DNS Request

pr-bh.ybp.yahoo.com

DNS Response

34.242.99.146

54.78.120.75

52.211.13.141

52.214.128.87
8.8.8.8:53

pubmatic-match.dotomi.com

dns

chrome.exe

71 B
147 B
1
1

DNS Request

pubmatic-match.dotomi.com

DNS Response

89.207.16.204
8.8.8.8:53

ad.turn.com

dns

chrome.exe

57 B
109 B
1
1

DNS Request

ad.turn.com

DNS Response

46.228.164.11
8.8.8.8:53

pixel-sync.sitescout.com

dns

chrome.exe

70 B
108 B
1
1

DNS Request

pixel-sync.sitescout.com

DNS Response

98.98.134.242
8.8.8.8:53

match.adsby.bidtheatre.com

dns

chrome.exe

72 B
120 B
1
1

DNS Request

match.adsby.bidtheatre.com

DNS Response

164.92.213.94

134.122.57.34

64.227.64.62
8.8.8.8:53

simage2.pubmatic.com

dns

chrome.exe

66 B
140 B
1
1

DNS Request

simage2.pubmatic.com

DNS Response

185.64.189.110
8.8.8.8:53

pixel.rubiconproject.com

dns

chrome.exe

70 B
151 B
1
1

DNS Request

pixel.rubiconproject.com

DNS Response

213.19.162.90

213.19.162.80
8.8.8.8:53

s.amazon-adsystem.com

dns

chrome.exe

67 B
83 B
1
1

DNS Request

s.amazon-adsystem.com

DNS Response

52.46.128.147
8.8.8.8:53

u.4dex.io

dns

chrome.exe

55 B
71 B
1
1

DNS Request

u.4dex.io

DNS Response

34.149.40.38
8.8.8.8:53

image2.pubmatic.com

dns

chrome.exe

65 B
137 B
1
1

DNS Request

image2.pubmatic.com

DNS Response

185.64.191.210
8.8.8.8:53

pixel-eu.onaudience.com

dns

chrome.exe

69 B
197 B
1
1

DNS Request

pixel-eu.onaudience.com

DNS Response

141.94.171.214

146.59.148.16

141.94.171.212

141.94.171.216

141.94.170.64

141.94.171.215

141.94.171.213

141.94.170.77
8.8.8.8:53

px.ads.linkedin.com

dns

chrome.exe

65 B
163 B
1
1

DNS Request

px.ads.linkedin.com

DNS Response

13.107.42.14
8.8.8.8:53

eb2.3lift.com

dns

chrome.exe

59 B
112 B
1
1

DNS Request

eb2.3lift.com

DNS Response

13.248.245.213

76.223.111.18
8.8.8.8:53

rtb.mfadsrvr.com

dns

chrome.exe

124 B
642 B
2
2

DNS Request

rtb.mfadsrvr.com

DNS Request

rtb.mfadsrvr.com

DNS Response

35.156.245.203

3.126.33.170

3.120.43.54

3.120.3.26

35.157.129.96

3.125.193.234

35.156.93.58

3.127.26.106

DNS Response

35.156.245.203

3.126.33.170

3.120.43.54

3.120.3.26

35.157.129.96

3.125.193.234

35.156.93.58

3.127.26.106
8.8.8.8:53

image4.pubmatic.com

dns

chrome.exe

65 B
143 B
1
1

DNS Request

image4.pubmatic.com

DNS Response

198.47.127.20
34.111.129.221:443

cr.frontend.weborama.fr

https

chrome.exe

2.5kB
4.5kB
6
8
8.8.8.8:53

sync.1rx.io

dns

chrome.exe

57 B
73 B
1
1

DNS Request

sync.1rx.io

DNS Response

74.118.186.107
8.8.8.8:53

rtb.openx.net

dns

chrome.exe

59 B
91 B
1
1

DNS Request

rtb.openx.net

DNS Response

35.227.252.103

35.186.253.211
8.8.8.8:53

sync.spotim.market

dns

chrome.exe

64 B
151 B
1
1

DNS Request

sync.spotim.market

DNS Response

23.227.139.243
8.8.8.8:53

ssbsync-global.smartadserver.com

dns

chrome.exe

151 B
405 B
2
2

DNS Request

ssbsync-global.smartadserver.com

DNS Response

185.86.139.104

185.86.139.102

185.86.139.101

185.86.139.93

185.86.139.103

185.86.139.94

DNS Request

103.251.151.54.in-addr.arpa
8.8.8.8:53

id.rlcdn.com

dns

chrome.exe

58 B
74 B
1
1

DNS Request

id.rlcdn.com

DNS Response

35.190.60.146
8.8.8.8:53

image8.pubmatic.com

dns

chrome.exe

65 B
146 B
1
1

DNS Request

image8.pubmatic.com

DNS Response

198.47.127.18
8.8.8.8:53

s.tribalfusion.com

dns

chrome.exe

64 B
96 B
1
1

DNS Request

s.tribalfusion.com

DNS Response

104.18.24.173

104.18.25.173
8.8.8.8:53

131.160.0.193.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

131.160.0.193.in-addr.arpa
8.8.8.8:53

164.156.155.213.in-addr.arpa

dns

74 B
136 B
1
1

DNS Request

164.156.155.213.in-addr.arpa
8.8.8.8:53

134.86.177.18.in-addr.arpa

dns

144 B
280 B
2
2

DNS Request

134.86.177.18.in-addr.arpa

DNS Request

134.86.177.18.in-addr.arpa
8.8.8.8:53

130.152.227.23.in-addr.arpa

dns

146 B
266 B
2
2

DNS Request

130.152.227.23.in-addr.arpa

DNS Request

130.152.227.23.in-addr.arpa
8.8.8.8:53

138.126.95.52.in-addr.arpa

dns

72 B
143 B
1
1

DNS Request

138.126.95.52.in-addr.arpa
8.8.8.8:53

146.73.161.182.in-addr.arpa

dns

73 B
127 B
1
1

DNS Request

146.73.161.182.in-addr.arpa
8.8.8.8:53

221.129.111.34.in-addr.arpa

dns

73 B
126 B
1
1

DNS Request

221.129.111.34.in-addr.arpa
8.8.8.8:53

34.130.224.3.in-addr.arpa

dns

71 B
125 B
1
1

DNS Request

34.130.224.3.in-addr.arpa
8.8.8.8:53

173.24.18.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

173.24.18.104.in-addr.arpa
8.8.8.8:53

122.181.231.173.in-addr.arpa

dns

74 B
133 B
1
1

DNS Request

122.181.231.173.in-addr.arpa
8.8.8.8:53

49.2.101.151.in-addr.arpa

dns

71 B
131 B
1
1

DNS Request

49.2.101.151.in-addr.arpa
8.8.8.8:53

173.193.186.35.in-addr.arpa

dns

73 B
126 B
1
1

DNS Request

173.193.186.35.in-addr.arpa
8.8.8.8:53

93.159.114.85.in-addr.arpa

dns

72 B
109 B
1
1

DNS Request

93.159.114.85.in-addr.arpa
8.8.8.8:53

190.161.94.141.in-addr.arpa

dns

73 B
105 B
1
1

DNS Request

190.161.94.141.in-addr.arpa
8.8.8.8:53

11.164.228.46.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

11.164.228.46.in-addr.arpa
8.8.8.8:53

20.165.5.195.in-addr.arpa

dns

71 B
123 B
1
1

DNS Request

20.165.5.195.in-addr.arpa
8.8.8.8:53

94.213.92.164.in-addr.arpa

dns

72 B
139 B
1
1

DNS Request

94.213.92.164.in-addr.arpa
8.8.8.8:53

49.158.204.35.in-addr.arpa

dns

72 B
124 B
1
1

DNS Request

49.158.204.35.in-addr.arpa
8.8.8.8:53

242.134.98.98.in-addr.arpa

dns

144 B
144 B
2
2

DNS Request

242.134.98.98.in-addr.arpa

DNS Request

242.134.98.98.in-addr.arpa
8.8.8.8:53

204.16.207.89.in-addr.arpa

dns

72 B
115 B
1
1

DNS Request

204.16.207.89.in-addr.arpa
8.8.8.8:53

23.4.157.37.in-addr.arpa

dns

70 B
142 B
1
1

DNS Request

23.4.157.37.in-addr.arpa
8.8.8.8:53

110.189.64.185.in-addr.arpa

dns

73 B
133 B
1
1

DNS Request

110.189.64.185.in-addr.arpa
8.8.8.8:53

146.99.242.34.in-addr.arpa

dns

72 B
135 B
1
1

DNS Request

146.99.242.34.in-addr.arpa
8.8.8.8:53

220.44.76.52.in-addr.arpa

dns

71 B
138 B
1
1

DNS Request

220.44.76.52.in-addr.arpa
8.8.8.8:53

101.15.18.104.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

101.15.18.104.in-addr.arpa
8.8.8.8:53

2.229.220.52.in-addr.arpa

dns

71 B
138 B
1
1

DNS Request

2.229.220.52.in-addr.arpa
8.8.8.8:53

38.40.149.34.in-addr.arpa

dns

71 B
122 B
1
1

DNS Request

38.40.149.34.in-addr.arpa
8.8.8.8:53

147.128.46.52.in-addr.arpa

dns

72 B
143 B
1
1

DNS Request

147.128.46.52.in-addr.arpa
8.8.8.8:53

210.191.64.185.in-addr.arpa

dns

73 B
133 B
1
1

DNS Request

210.191.64.185.in-addr.arpa
8.8.8.8:53

214.171.94.141.in-addr.arpa

dns

73 B
110 B
1
1

DNS Request

214.171.94.141.in-addr.arpa
8.8.8.8:53

14.42.107.13.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

14.42.107.13.in-addr.arpa
8.8.8.8:53

213.245.248.13.in-addr.arpa

dns

73 B
129 B
1
1

DNS Request

213.245.248.13.in-addr.arpa
8.8.8.8:53

20.127.47.198.in-addr.arpa

dns

72 B
126 B
1
1

DNS Request

20.127.47.198.in-addr.arpa
8.8.8.8:53

103.252.227.35.in-addr.arpa

dns

73 B
126 B
1
1

DNS Request

103.252.227.35.in-addr.arpa
8.8.8.8:53

18.127.47.198.in-addr.arpa

dns

72 B
126 B
1
1

DNS Request

18.127.47.198.in-addr.arpa
8.8.8.8:53

146.60.190.35.in-addr.arpa

dns

72 B
124 B
1
1

DNS Request

146.60.190.35.in-addr.arpa
8.8.8.8:53

203.245.156.35.in-addr.arpa

dns

73 B
140 B
1
1

DNS Request

203.245.156.35.in-addr.arpa
8.8.8.8:53

243.139.227.23.in-addr.arpa

dns

73 B
133 B
1
1

DNS Request

243.139.227.23.in-addr.arpa
8.8.8.8:53

sync.aniview.com

dns

chrome.exe

62 B
251 B
1
1

DNS Request

sync.aniview.com

DNS Response

18.214.94.14

52.2.228.97

44.206.122.152

3.226.73.215

52.44.51.221

18.210.168.111

3.222.50.10

3.220.29.54
8.8.8.8:53

ssbsync.smartadserver.com

dns

chrome.exe

71 B
282 B
1
1

DNS Request

ssbsync.smartadserver.com

DNS Response

185.86.138.155

185.86.138.154

185.86.138.151

185.86.138.153

185.86.138.152

185.86.138.150
8.8.8.8:53

ads.playground.xyz

dns

chrome.exe

64 B
80 B
1
1

DNS Request

ads.playground.xyz

DNS Response

34.102.253.54
34.149.40.38:443

u.4dex.io

https

chrome.exe

13.6kB
14.8kB
33
38
35.190.60.146:443

id.rlcdn.com

https

chrome.exe

4.4kB
7.6kB
19
21
8.8.8.8:53

bttrack.com

dns

chrome.exe

57 B
73 B
1
1

DNS Request

bttrack.com

DNS Response

192.132.33.46
8.8.8.8:53

rtb-csync.smartadserver.com

dns

chrome.exe

73 B
254 B
1
1

DNS Request

rtb-csync.smartadserver.com

DNS Response

185.86.139.103

185.86.139.93

185.86.139.104

185.86.139.102

185.86.139.101

185.86.139.94
8.8.8.8:53

bh.contextweb.com

dns

chrome.exe

63 B
129 B
1
1

DNS Request

bh.contextweb.com

DNS Response

74.214.196.131
8.8.8.8:53

eu-u.openx.net

dns

chrome.exe

60 B
92 B
1
1

DNS Request

eu-u.openx.net

DNS Response

35.244.159.8

34.98.64.218
8.8.8.8:53

simage4.pubmatic.com

dns

chrome.exe

66 B
138 B
1
1

DNS Request

simage4.pubmatic.com

DNS Response

67.199.150.85
8.8.8.8:53

id5-sync.com

dns

chrome.exe

58 B
218 B
1
1

DNS Request

id5-sync.com

DNS Response

141.95.98.64

162.19.138.116

162.19.138.120

162.19.138.117

141.95.98.65

162.19.138.82

162.19.138.83

141.95.33.111

162.19.138.119

162.19.138.118
8.8.8.8:53

cs.admanmedia.com

dns

chrome.exe

63 B
79 B
1
1

DNS Request

cs.admanmedia.com

DNS Response

80.77.87.162
8.8.8.8:53

s.ad.smaato.net

dns

chrome.exe

61 B
125 B
1
1

DNS Request

s.ad.smaato.net

DNS Response

52.222.139.67

52.222.139.37

52.222.139.80

52.222.139.43
8.8.8.8:53

dmp.adform.net

dns

chrome.exe

60 B
129 B
1
1

DNS Request

dmp.adform.net

DNS Response

37.157.3.29

37.157.3.28
8.8.8.8:53

dsum-sec.casalemedia.com

dns

chrome.exe

70 B
174 B
1
1

DNS Request

dsum-sec.casalemedia.com

DNS Response

185.80.39.216
8.8.8.8:53

107.186.118.74.in-addr.arpa

dns

146 B
146 B
2
2

DNS Request

107.186.118.74.in-addr.arpa

DNS Request

107.186.118.74.in-addr.arpa
8.8.8.8:53

14.94.214.18.in-addr.arpa

dns

71 B
125 B
1
1

DNS Request

14.94.214.18.in-addr.arpa
8.8.8.8:53

54.253.102.34.in-addr.arpa

dns

72 B
124 B
1
1

DNS Request

54.253.102.34.in-addr.arpa
8.8.8.8:53

155.138.86.185.in-addr.arpa

dns

73 B
133 B
1
1

DNS Request

155.138.86.185.in-addr.arpa
8.8.8.8:53

46.33.132.192.in-addr.arpa

dns

72 B
103 B
1
1

DNS Request

46.33.132.192.in-addr.arpa
8.8.8.8:53

131.196.214.74.in-addr.arpa

dns

146 B
276 B
2
2

DNS Request

131.196.214.74.in-addr.arpa

DNS Request

131.196.214.74.in-addr.arpa
8.8.8.8:53

67.139.222.52.in-addr.arpa

dns

72 B
129 B
1
1

DNS Request

67.139.222.52.in-addr.arpa
8.8.8.8:53

64.98.95.141.in-addr.arpa

dns

71 B
110 B
1
1

DNS Request

64.98.95.141.in-addr.arpa
8.8.8.8:53

dsum.casalemedia.com

dns

chrome.exe

66 B
170 B
1
1

DNS Request

dsum.casalemedia.com

DNS Response

185.80.39.216
8.8.8.8:53

162.87.77.80.in-addr.arpa

dns

71 B
131 B
1
1

DNS Request

162.87.77.80.in-addr.arpa
8.8.8.8:53

29.3.157.37.in-addr.arpa

dns

70 B
140 B
1
1

DNS Request

29.3.157.37.in-addr.arpa
8.8.8.8:53

85.150.199.67.in-addr.arpa

dns

72 B
130 B
1
1

DNS Request

85.150.199.67.in-addr.arpa
8.8.8.8:53

sync.targeting.unrulymedia.com

dns

chrome.exe

76 B
117 B
1
1

DNS Request

sync.targeting.unrulymedia.com

DNS Response

213.19.147.44
8.8.8.8:53

33across-match.dotomi.com

dns

chrome.exe

71 B
147 B
1
1

DNS Request

33across-match.dotomi.com

DNS Response

63.215.202.140
8.8.8.8:53

ad.mrtnsvr.com

dns

chrome.exe

60 B
76 B
1
1

DNS Request

ad.mrtnsvr.com

DNS Response

34.102.163.6
8.8.8.8:53

matching.truffle.bid

dns

chrome.exe

66 B
114 B
1
1

DNS Request

matching.truffle.bid

DNS Response

157.90.40.26

23.88.86.2

162.55.120.196
8.8.8.8:53

acdn.adnxs.com

dns

chrome.exe

60 B
147 B
1
1

DNS Request

acdn.adnxs.com

DNS Response

96.16.108.246
8.8.8.8:53

mwzeom.zeotap.com

dns

chrome.exe

63 B
111 B
1
1

DNS Request

mwzeom.zeotap.com

DNS Response

172.67.13.182

104.22.24.87

104.22.25.87
8.8.8.8:53

uipglob.semasio.net

dns

chrome.exe

130 B
344 B
2
2

DNS Request

uipglob.semasio.net

DNS Request

uipglob.semasio.net

DNS Response

119.9.108.180

119.9.108.211

119.9.108.191

DNS Response

119.9.108.211

119.9.108.180

119.9.108.191
8.8.8.8:53

pixel.onaudience.com

dns

chrome.exe

66 B
226 B
1
1

DNS Request

pixel.onaudience.com

DNS Response

141.94.171.212

141.94.171.215

141.94.171.214

141.94.170.77

15.235.15.221

146.59.148.16

141.94.170.64

51.222.80.231

141.94.171.216

141.94.171.213
8.8.8.8:53

44.147.19.213.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

44.147.19.213.in-addr.arpa
8.8.8.8:53

140.202.215.63.in-addr.arpa

dns

73 B
116 B
1
1

DNS Request

140.202.215.63.in-addr.arpa
8.8.8.8:53

26.40.90.157.in-addr.arpa

dns

71 B
127 B
1
1

DNS Request

26.40.90.157.in-addr.arpa
8.8.8.8:53

6.163.102.34.in-addr.arpa

dns

71 B
122 B
1
1

DNS Request

6.163.102.34.in-addr.arpa
8.8.8.8:53

246.108.16.96.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

246.108.16.96.in-addr.arpa
8.8.8.8:53

182.13.67.172.in-addr.arpa

dns

72 B
134 B
1
1

DNS Request

182.13.67.172.in-addr.arpa
8.8.8.8:53

ps.eyeota.net

dns

chrome.exe

59 B
75 B
1
1

DNS Request

ps.eyeota.net

DNS Response

18.140.27.177
8.8.8.8:53

events-ssc.33across.com

dns

chrome.exe

69 B
85 B
1
1

DNS Request

events-ssc.33across.com

DNS Response

34.117.239.71
8.8.8.8:53

us-u.openx.net

dns

chrome.exe

60 B
92 B
1
1

DNS Request

us-u.openx.net

DNS Response

35.244.159.8

34.98.64.218
34.117.239.71:443

events-ssc.33across.com

https

chrome.exe

2.8kB
5.7kB
11
13
8.8.8.8:53

uipus.semasio.net

dns

chrome.exe

63 B
79 B
1
1

DNS Request

uipus.semasio.net

DNS Response

50.57.31.206
8.8.8.8:53

212.171.94.141.in-addr.arpa

dns

73 B
110 B
1
1

DNS Request

212.171.94.141.in-addr.arpa
8.8.8.8:53

180.108.9.119.in-addr.arpa

dns

144 B
270 B
2
2

DNS Request

180.108.9.119.in-addr.arpa

DNS Request

180.108.9.119.in-addr.arpa
8.8.8.8:53

71.239.117.34.in-addr.arpa

dns

72 B
124 B
1
1

DNS Request

71.239.117.34.in-addr.arpa
8.8.8.8:53

177.27.140.18.in-addr.arpa

dns

72 B
140 B
1
1

DNS Request

177.27.140.18.in-addr.arpa
8.8.8.8:53

tags.crwdcntrl.net

dns

chrome.exe

64 B
128 B
1
1

DNS Request

tags.crwdcntrl.net

DNS Response

52.222.139.7

52.222.139.100

52.222.139.112

52.222.139.35
8.8.8.8:53

bcp.crwdcntrl.net

dns

chrome.exe

63 B
191 B
1
1

DNS Request

bcp.crwdcntrl.net

DNS Response

54.151.251.103

18.139.242.221

3.1.234.252

52.74.170.61

54.151.149.20

52.77.85.82

52.77.198.137

52.76.206.236
8.8.8.8:53

pixel-us-east.rubiconproject.com

dns

chrome.exe

78 B
167 B
1
1

DNS Request

pixel-us-east.rubiconproject.com

DNS Response

8.43.72.97

8.43.72.98
8.8.8.8:53

217.106.137.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

217.106.137.52.in-addr.arpa
8.8.8.8:53

7.139.222.52.in-addr.arpa

dns

71 B
127 B
1
1

DNS Request

7.139.222.52.in-addr.arpa
8.8.8.8:53

206.31.57.50.in-addr.arpa

dns

71 B
134 B
1
1

DNS Request

206.31.57.50.in-addr.arpa
8.8.8.8:53

c.bing.com

dns

chrome.exe

56 B
158 B
1
1

DNS Request

c.bing.com

DNS Response

204.79.197.200

13.107.21.200
8.8.8.8:53

cms.analytics.yahoo.com

dns

chrome.exe

69 B
133 B
1
1

DNS Request

cms.analytics.yahoo.com

DNS Response

212.82.100.182
8.8.8.8:53

dmp.truoptik.com

dns

chrome.exe

62 B
142 B
1
1

DNS Request

dmp.truoptik.com

DNS Response

104.17.217.204

104.17.216.204

104.17.219.204

104.17.218.204

104.17.215.204
8.8.8.8:53

97.72.43.8.in-addr.arpa

dns

138 B
246 B
2
2

DNS Request

97.72.43.8.in-addr.arpa

DNS Request

97.72.43.8.in-addr.arpa
8.8.8.8:53

200.197.79.204.in-addr.arpa

dns

146 B
212 B
2
2

DNS Request

200.197.79.204.in-addr.arpa

DNS Request

200.197.79.204.in-addr.arpa
8.8.8.8:53

204.217.17.104.in-addr.arpa

dns

73 B
135 B
1
1

DNS Request

204.217.17.104.in-addr.arpa
8.8.8.8:53

182.100.82.212.in-addr.arpa

dns

208 B
381 B
3
3

DNS Request

182.100.82.212.in-addr.arpa

DNS Request

182.100.82.212.in-addr.arpa

DNS Request

tags.bluekai.com

DNS Response

173.223.113.181
8.8.8.8:53

cookie-matching.mediarithmics.com

dns

chrome.exe

79 B
224 B
1
1

DNS Request

cookie-matching.mediarithmics.com

DNS Response

54.36.150.184

54.36.150.186

54.36.150.183

54.36.150.185

141.95.144.168

54.36.150.180

54.36.150.187

54.36.150.181
8.8.8.8:53

184.150.36.54.in-addr.arpa

dns

72 B
107 B
1
1

DNS Request

184.150.36.54.in-addr.arpa
8.8.8.8:53

50.23.12.20.in-addr.arpa

dns

70 B
156 B
1
1

DNS Request

50.23.12.20.in-addr.arpa
8.8.8.8:53

i.w55c.net

dns

chrome.exe

56 B
221 B
1
1

DNS Request

i.w55c.net

DNS Response

3.126.192.167

35.159.47.190

35.156.77.117

35.157.43.161

18.195.124.86

35.157.134.200
8.8.8.8:53

pm.w55c.net

dns

chrome.exe

57 B
222 B
1
1

DNS Request

pm.w55c.net

DNS Response

35.159.47.190

3.126.192.167

35.156.77.117

35.157.43.161

18.195.124.86

35.157.134.200
8.8.8.8:53

2.36.159.162.in-addr.arpa

dns

71 B
133 B
1
1

DNS Request

2.36.159.162.in-addr.arpa
8.8.8.8:53

167.192.126.3.in-addr.arpa

dns

72 B
138 B
1
1

DNS Request

167.192.126.3.in-addr.arpa
8.8.8.8:53

190.47.159.35.in-addr.arpa

dns

72 B
138 B
1
1

DNS Request

190.47.159.35.in-addr.arpa
8.8.8.8:53

d.turn.com

dns

chrome.exe

56 B
107 B
1
1

DNS Request

d.turn.com

DNS Response

46.228.164.13
8.8.8.8:53

58.55.71.13.in-addr.arpa

dns

70 B
144 B
1
1

DNS Request

58.55.71.13.in-addr.arpa
8.8.8.8:53

13.164.228.46.in-addr.arpa

dns

72 B
132 B
1
1

DNS Request

13.164.228.46.in-addr.arpa

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\13e40572-d623-4b39-b6f5-7ccd0f3bfc38.tmp

Filesize
15KB

MD5
8eac00de12916ac6463ab43e0bc9f7c5

SHA1
638b4d2fad38378f3117bf35541a550eafa99a63

SHA256
90ddc7ebb799420fb47acfda48d9a8355056dc056568108a11c2be02f1488fc8

SHA512
b1f5c70244067eae43453149933da0b1de2dc5173d7d0a87719634235b1fd7765fbf52c2e0dc7b54c4080139befaf24dfdce0e14d3e3c6506a589146a5d592ee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
816B

MD5
28962e4ad1e7647eb6162883f38ec08b

SHA1
63f1e4f206daa26a52eb4cff6f62ba401b35f928

SHA256
432e080fbb1e5779d89a84a6deffdc5dbcb217e70a60b3c9e19dadb97b88c600

SHA512
3cc808f3d23d821740e841c626a4aaf4351294757b772c9edb5e150c125696bf9a2ecaa90868ff96df60feaea8eeb67b18a0fd6fc9f7dd9528a1ef9bc5970027

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
576B

MD5
f72908c16aef53bc331dc3f1819b82c4

SHA1
f3b1211a05516bfc9353e7e006ff181b3faa8998

SHA256
57031a5a3612dd157aa6517a03657c76cbbbf4e4237b37145f11ad7c153d62a0

SHA512
94311e90e875ee73dd4ccfcfc36a186628db9f98b34c2a1e06d44532d7d6f57aed970066675f32d19807e205d21fba6639d619360aa63a267d94d6315e2bbe5b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\128.png

Filesize
4KB

MD5
913064adaaa4c4fa2a9d011b66b33183

SHA1
99ea751ac2597a080706c690612aeeee43161fc1

SHA256
afb4ce8882ef7ae80976eba7d87f6e07fcddc8e9e84747e8d747d1e996dea8eb

SHA512
162bf69b1ad5122c6154c111816e4b87a8222e6994a72743ed5382d571d293e1467a2ed2fc6cc27789b644943cf617a56da530b6a6142680c5b2497579a632b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\af\messages.json

Filesize
908B

MD5
12403ebcce3ae8287a9e823c0256d205

SHA1
c82d43c501fae24bfe05db8b8f95ed1c9ac54037

SHA256
b40bde5b612cfff936370b32fb0c58cc205fc89937729504c6c0b527b60e2cba

SHA512
153401ecdb13086d2f65f9b9f20acb3cefe5e2aeff1c31ba021be35bf08ab0634812c33d1d34da270e5693a8048fc5e2085e30974f6a703f75ea1622a0ca0ffd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\am\messages.json

Filesize
1KB

MD5
9721ebce89ec51eb2baeb4159e2e4d8c

SHA1
58979859b28513608626b563138097dc19236f1f

SHA256
3d0361a85adfcd35d0de74135723a75b646965e775188f7dcdd35e3e42db788e

SHA512
fa3689e8663565d3c1c923c81a620b006ea69c99fb1eb15d07f8f45192ed9175a6a92315fa424159c1163382a3707b25b5fc23e590300c62cbe2dace79d84871

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ar\messages.json

Filesize
1KB

MD5
3ec93ea8f8422fda079f8e5b3f386a73

SHA1
24640131ccfb21d9bc3373c0661da02d50350c15

SHA256
abd0919121956ab535e6a235de67764f46cfc944071fcf2302148f5fb0e8c65a

SHA512
f40e879f85bc9b8120a9b7357ed44c22c075bf065f45bea42bd5316af929cbd035d5d6c35734e454aef5b79d378e51a77a71fa23f9ebd0b3754159718fceb95c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\az\messages.json

Filesize
977B

MD5
9a798fd298008074e59ecc253e2f2933

SHA1
1e93da985e880f3d3350fc94f5ccc498efc8c813

SHA256
628145f4281fa825d75f1e332998904466abd050e8b0dc8bb9b6a20488d78a66

SHA512
9094480379f5ab711b3c32c55fd162290cb0031644ea09a145e2ef315da12f2e55369d824af218c3a7c37dd9a276aeec127d8b3627d3ab45a14b0191ed2bbe70

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\be\messages.json

Filesize
3KB

MD5
68884dfda320b85f9fc5244c2dd00568

SHA1
fd9c01e03320560cbbb91dc3d1917c96d792a549

SHA256
ddf16859a15f3eb3334d6241975ca3988ac3eafc3d96452ac3a4afd3644c8550

SHA512
7ff0fbd555b1f9a9a4e36b745cbfcad47b33024664f0d99e8c080be541420d1955d35d04b5e973c07725573e592cd0dd84fdbb867c63482baff6929ada27ccde

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\bg\messages.json

Filesize
1KB

MD5
2e6423f38e148ac5a5a041b1d5989cc0

SHA1
88966ffe39510c06cd9f710dfac8545672ffdceb

SHA256
ac4a8b5b7c0b0dd1c07910f30dcfbdf1bcb701cfcfd182b6153fd3911d566c0e

SHA512
891fcdc6f07337970518322c69c6026896dd3588f41f1e6c8a1d91204412cae01808f87f9f2dea1754458d70f51c3cef5f12a9e3fc011165a42b0844c75ec683

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\bn\messages.json

Filesize
1KB

MD5
651375c6af22e2bcd228347a45e3c2c9

SHA1
109ac3a912326171d77869854d7300385f6e628c

SHA256
1dbf38e425c5c7fc39e8077a837df0443692463ba1fbe94e288ab5a93242c46e

SHA512
958aa7cf645fab991f2eca0937ba734861b373fb1c8bcc001599be57c65e0917f7833a971d93a7a6423c5f54a4839d3a4d5f100c26efa0d2a068516953989f9d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ca\messages.json

Filesize
930B

MD5
d177261ffe5f8ab4b3796d26835f8331

SHA1
4be708e2ffe0f018ac183003b74353ad646c1657

SHA256
d6e65238187a430ff29d4c10cf1c46b3f0fa4b91a5900a17c5dfd16e67ffc9bd

SHA512
e7d730304aed78c0f4a78dadbf835a22b3d8114fb41d67b2b26f4fe938b572763d3e127b7c1c81ebe7d538da976a7a1e7adc40f918f88afadea2201ae8ab47d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\cs\messages.json

Filesize
913B

MD5
ccb00c63e4814f7c46b06e4a142f2de9

SHA1
860936b2a500ce09498b07a457e0cca6b69c5c23

SHA256
21ae66ce537095408d21670585ad12599b0f575ff2cb3ee34e3a48f8cc71cfab

SHA512
35839dac6c985a6ca11c1bff5b8b5e59db501fcb91298e2c41cb0816b6101bf322445b249eaea0cef38f76d73a4e198f2b6e25eea8d8a94ea6007d386d4f1055

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\cy\messages.json

Filesize
806B

MD5
a86407c6f20818972b80b9384acfbbed

SHA1
d1531cd0701371e95d2a6bb5edcb79b949d65e7c

SHA256
a482663292a913b02a9cde4635c7c92270bf3c8726fd274475dc2c490019a7c9

SHA512
d9fbf675514a890e9656f83572208830c6d977e34d5744c298a012515bc7eb5a17726add0d9078501393babd65387c4f4d3ac0cc0f7c60c72e09f336dca88de7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\da\messages.json

Filesize
883B

MD5
b922f7fd0e8ccac31b411fc26542c5ba

SHA1
2d25e153983e311e44a3a348b7d97af9aad21a30

SHA256
48847d57c75af51a44cbf8f7ef1a4496c2007e58ed56d340724fda1604ff9195

SHA512
ad0954deeb17af04858dd5ec3d3b3da12dff7a666af4061deb6fd492992d95db3baf751ab6a59bec7ab22117103a93496e07632c2fc724623bb3acf2ca6093f3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\de\messages.json

Filesize
1KB

MD5
d116453277cc860d196887cec6432ffe

SHA1
0ae00288fde696795cc62fd36eabc507ab6f4ea4

SHA256
36ac525fa6e28f18572d71d75293970e0e1ead68f358c20da4fdc643eea2c1c5

SHA512
c788c3202a27ec220e3232ae25e3c855f3fdb8f124848f46a3d89510c564641a2dfea86d5014cea20d3d2d3c1405c96dbeb7ccad910d65c55a32fdca8a33fdd4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\el\messages.json

Filesize
1KB

MD5
9aba4337c670c6349ba38fddc27c2106

SHA1
1fc33be9ab4ad99216629bc89fbb30e7aa42b812

SHA256
37ca6ab271d6e7c9b00b846fdb969811c9ce7864a85b5714027050795ea24f00

SHA512
8564f93ad8485c06034a89421ce74a4e719bbac865e33a7ed0b87baa80b7f7e54b240266f2edb595df4e6816144428db8be18a4252cbdcc1e37b9ecc9f9d7897

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\en_GB\messages.json

Filesize
848B

MD5
3734d498fb377cf5e4e2508b8131c0fa

SHA1
aa23e39bfe526b5e3379de04e00eacba89c55ade

SHA256
ab5cda04013dce0195e80af714fbf3a67675283768ffd062cf3cf16edb49f5d4

SHA512
56d9c792954214b0de56558983f7eb7805ac330af00e944e734340be41c68e5dd03eddb17a63bc2ab99bdd9be1f2e2da5be8ba7c43d938a67151082a9041c7ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\en_US\messages.json

Filesize
1KB

MD5
578215fbb8c12cb7e6cd73fbd16ec994

SHA1
9471d71fa6d82ce1863b74e24237ad4fd9477187

SHA256
102b586b197ea7d6edfeb874b97f95b05d229ea6a92780ea8544c4ff1e6bc5b1

SHA512
e698b1a6a6ed6963182f7d25ac12c6de06c45d14499ddc91e81bdb35474e7ec9071cfebd869b7d129cb2cd127bc1442c75e408e21eb8e5e6906a607a3982b212

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\es\messages.json

Filesize
961B

MD5
f61916a206ac0e971cdcb63b29e580e3

SHA1
994b8c985dc1e161655d6e553146fb84d0030619

SHA256
2008f4faab71ab8c76a5d8811ad40102c380b6b929ce0bce9c378a7cadfc05eb

SHA512
d9c63b2f99015355aca04d74a27fd6b81170750c4b4be7293390dc81ef4cd920ee9184b05c61dc8979b6c2783528949a4ae7180dbf460a2620dbb0d3fd7a05cf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\es_419\messages.json

Filesize
959B

MD5
535331f8fb98894877811b14994fea9d

SHA1
42475e6afb6a8ae41e2fc2b9949189ef9bbe09fb

SHA256
90a560ff82605db7eda26c90331650ff9e42c0b596cedb79b23598dec1b4988f

SHA512
2ce9c69e901ab5f766e6cfc1e592e1af5a07aa78d154ccbb7898519a12e6b42a21c5052a86783abe3e7a05043d4bd41b28960feddb30169ff7f7fe7208c8cfe9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\et\messages.json

Filesize
968B

MD5
64204786e7a7c1ed9c241f1c59b81007

SHA1
586528e87cd670249a44fb9c54b1796e40cdb794

SHA256
cc31b877238da6c1d51d9a6155fde565727a1956572f466c387b7e41c4923a29

SHA512
44fcf93f3fb10a3db68d74f9453995995ab2d16863ec89779db451a4d90f19743b8f51095eec3ecef5bd0c5c60d1bf3dfb0d64df288dccfbe70c129ae350b2c6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\eu\messages.json

Filesize
838B

MD5
29a1da4acb4c9d04f080bb101e204e93

SHA1
2d0e4587ddd4bac1c90e79a88af3bd2c140b53b1

SHA256
a41670d52423ba69c7a65e7e153e7b9994e8dd0370c584bda0714bd61c49c578

SHA512
b7b7a5a0aa8f6724b0fa15d65f25286d9c66873f03080cbaba037bdeea6aadc678ac4f083bc52c2db01beb1b41a755ed67bbddb9c0fe4e35a004537a3f7fc458

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\fa\messages.json

Filesize
1KB

MD5
097f3ba8de41a0aaf436c783dcfe7ef3

SHA1
986b8cabd794e08c7ad41f0f35c93e4824ac84df

SHA256
7c4c09d19ac4da30cc0f7f521825f44c4dfbc19482a127fbfb2b74b3468f48f1

SHA512
8114ea7422e3b20ae3f08a3a64a6ffe1517a7579a3243919b8f789eb52c68d6f5a591f7b4d16cee4bd337ff4daf4057d81695732e5f7d9e761d04f859359fadb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\fi\messages.json

Filesize
911B

MD5
b38cbd6c2c5bfaa6ee252d573a0b12a1

SHA1
2e490d5a4942d2455c3e751f96bd9960f93c4b60

SHA256
2d752a5dbe80e34ea9a18c958b4c754f3bc10d63279484e4df5880b8fd1894d2

SHA512
6e65207f4d8212736059cc802c6a7104e71a9cc0935e07bd13d17ec46ea26d10bc87ad923cd84d78781e4f93231a11cb9ed8d3558877b6b0d52c07cb005f1c0c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\fil\messages.json

Filesize
939B

MD5
fcea43d62605860fff41be26bad80169

SHA1
f25c2ce893d65666cc46ea267e3d1aa080a25f5b

SHA256
f51eeb7aaf5f2103c1043d520e5a4de0fa75e4dc375e23a2c2c4afd4d9293a72

SHA512
f66f113a26e5bcf54b9aafa69dae3c02c9c59bd5b9a05f829c92af208c06dc8ccc7a1875cbb7b7ce425899e4ba27bfe8ce2cdaf43a00a1b9f95149e855989ee0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\fr\messages.json

Filesize
977B

MD5
a58c0eebd5dc6bb5d91daf923bd3a2aa

SHA1
f169870eeed333363950d0bcd5a46d712231e2ae

SHA256
0518287950a8b010ffc8d52554eb82e5d93b6c3571823b7ceca898906c11abcc

SHA512
b04afd61de490bc838354e8dc6c22be5c7ac6e55386fff78489031acbe2dbf1eaa2652366f7a1e62ce87cfccb75576da3b2645fea1645b0eceb38b1fa3a409e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\fr_CA\messages.json

Filesize
972B

MD5
6cac04bdcc09034981b4ab567b00c296

SHA1
84f4d0e89e30ed7b7acd7644e4867ffdb346d2a5

SHA256
4caa46656ecc46a420aa98d3307731e84f5ac1a89111d2e808a228c436d83834

SHA512
160590b6ec3dcf48f3ea7a5baa11a8f6fa4131059469623e00ad273606b468b3a6e56d199e97daa0ecb6c526260ebae008570223f2822811f441d1c900dc33d6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\gl\messages.json

Filesize
927B

MD5
cc31777e68b20f10a394162ee3cee03a

SHA1
969f7a9caf86ebaa82484fbf0837010ad3fd34d7

SHA256
9890710df0fbf1db41bce41fe2f62424a3bd39d755d29e829744ed3da0c2ce1d

SHA512
8215a6e50c6acf8045d97c0d4d422c0caacb7f09d136e73e34dba48903bb4c85a25d6875b56e192993f48a428d3a85ba041e0e61e4277b7d3a70f38d01f68aab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\gu\messages.json

Filesize
1KB

MD5
bc7e1d09028b085b74cb4e04d8a90814

SHA1
e28b2919f000b41b41209e56b7bf3a4448456cfe

SHA256
fe8218df25db54e633927c4a1640b1a41b8e6cb3360fa386b5382f833b0b237c

SHA512
040a8267d67db05bbaa52f1fac3460f58d35c5b73aa76bbf17fa78acc6d3bfb796a870dd44638f9ac3967e35217578a20d6f0b975ceeeedbadfc9f65be7e72c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\hi\messages.json

Filesize
1KB

MD5
98a7fc3e2e05afffc1cfe4a029f47476

SHA1
a17e077d6e6ba1d8a90c1f3faf25d37b0ff5a6ad

SHA256
d2d1afa224cda388ff1dc8fac24cda228d7ce09de5d375947d7207fa4a6c4f8d

SHA512
457e295c760abfd29fc6bbbb7fc7d4959287bca7fb0e3e99eb834087d17eed331def18138838d35c48c6ddc8a0134affff1a5a24033f9b5607b355d3d48fdf88

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\hr\messages.json

Filesize
935B

MD5
25cdff9d60c5fc4740a48ef9804bf5c7

SHA1
4fadecc52fb43aec084df9ff86d2d465fbebcdc0

SHA256
73e6e246ceeab9875625cd4889fbf931f93b7b9deaa11288ae1a0f8a6e311e76

SHA512
ef00b08496427feb5a6b9fb3fe2e5404525be7c329d9dd2a417480637fd91885837d134a26980dcf9f61e463e6cb68f09a24402805807e656af16b116a75e02c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\hu\messages.json

Filesize
1KB

MD5
8930a51e3ace3dd897c9e61a2aea1d02

SHA1
4108506500c68c054ba03310c49fa5b8ee246ea4

SHA256
958c0f664fca20855fa84293566b2ddb7f297185619143457d6479e6ac81d240

SHA512
126b80cd3428c0bc459eeaafcbe4b9fde2541a57f19f3ec7346baf449f36dc073a9cf015594a57203255941551b25f6faa6d2c73c57c44725f563883ff902606

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\hy\messages.json

Filesize
2KB

MD5
55de859ad778e0aa9d950ef505b29da9

SHA1
4479be637a50c9ee8a2f7690ad362a6a8ffc59b2

SHA256
0b16e3f8bd904a767284345ae86a0a9927c47afe89e05ea2b13ad80009bdf9e4

SHA512
edab2fcc14cabb6d116e9c2907b42cfbc34f1d9035f43e454f1f4d1f3774c100cbadf6b4c81b025810ed90fa91c22f1aefe83056e4543d92527e4fe81c7889a8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\id\messages.json

Filesize
858B

MD5
34d6ee258af9429465ae6a078c2fb1f5

SHA1
612cae151984449a4346a66c0a0df4235d64d932

SHA256
e3c86ddd2efebe88eed8484765a9868202546149753e03a61eb7c28fd62cfca1

SHA512
20427807b64a0f79a6349f8a923152d9647da95c05de19ad3a4bf7db817e25227f3b99307c8745dd323a6591b515221bd2f1e92b6f1a1783bdfa7142e84601b1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\is\messages.json

Filesize
954B

MD5
1f565fb1c549b18af8bbfed8decd5d94

SHA1
b57f4bdae06ff3dfc1eb3e56b6f2f204d6f63638

SHA256
e16325d1a641ef7421f2bafcd6433d53543c89d498dd96419b03cba60b9c7d60

SHA512
a60b8e042a9bcdcc136b87948e9924a0b24d67c6ca9803904b876f162a0ad82b9619f1316be9ff107dd143b44f7e6f5df604abfe00818deb40a7d62917cda69f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\it\messages.json

Filesize
899B

MD5
0d82b734ef045d5fe7aa680b6a12e711

SHA1
bd04f181e4ee09f02cd53161dcabcef902423092

SHA256
f41862665b13c0b4c4f562ef1743684cce29d4bcf7fe3ea494208df253e33885

SHA512
01f305a280112482884485085494e871c66d40c0b03de710b4e5f49c6a478d541c2c1fda2ceaf4307900485946dee9d905851e98a2eb237642c80d464d1b3ada

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\iw\messages.json

Filesize
2KB

MD5
26b1533c0852ee4661ec1a27bd87d6bf

SHA1
18234e3abaf702df9330552780c2f33b83a1188a

SHA256
bbb81c32f482ba3216c9b1189c70cef39ca8c2181af3538ffa07b4c6ad52f06a

SHA512
450bfaf0e8159a4fae309737ea69ca8dd91caafd27ef662087c4e7716b2dcad3172555898e75814d6f11487f4f254de8625ef0cfea8df0133fc49e18ec7fd5d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ja\messages.json

Filesize
1KB

MD5
15ec1963fc113d4ad6e7e59ae5de7c0a

SHA1
4017fc6d8b302335469091b91d063b07c9e12109

SHA256
34ac08f3c4f2d42962a3395508818b48ca323d22f498738cc9f09e78cb197d73

SHA512
427251f471fa3b759ca1555e9600c10f755bc023701d058ff661bec605b6ab94cfb3456c1fea68d12b4d815ffbafabceb6c12311dd1199fc783ed6863af97c0f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ka\messages.json

Filesize
3KB

MD5
83f81d30913dc4344573d7a58bd20d85

SHA1
5ad0e91ea18045232a8f9df1627007fe506a70e0

SHA256
30898bbf51bdd58db397ff780f061e33431a38ef5cfc288b5177ecf76b399f26

SHA512
85f97f12ad4482b5d9a6166bb2ae3c4458a582cf575190c71c1d8e0fb87c58482f8c0efead56e3a70edd42bed945816db5e07732ad27b8ffc93f4093710dd58f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\kk\messages.json

Filesize
3KB

MD5
2d94a58795f7b1e6e43c9656a147ad3c

SHA1
e377db505c6924b6bfc9d73dc7c02610062f674e

SHA256
548dc6c96e31a16ce355dc55c64833b08ef3fba8bf33149031b4a685959e3af4

SHA512
f51cc857e4cf2d4545c76a2dce7d837381ce59016e250319bf8d39718be79f9f6ee74ea5a56de0e8759e4e586d93430d51651fc902376d8a5698628e54a0f2d8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\km\messages.json

Filesize
3KB

MD5
b3699c20a94776a5c2f90aef6eb0dad9

SHA1
1f9b968b0679a20fa097624c9abfa2b96c8c0bea

SHA256
a6118f0a0de329e07c01f53cd6fb4fed43e54c5f53db4cd1c7f5b2b4d9fb10e6

SHA512
1e8d15b8bff1d289434a244172f9ed42b4bb6bcb6372c1f300b01acea5a88167e97fedaba0a7ae3beb5e24763d1b09046ae8e30745b80e2e2fe785c94df362f6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\kn\messages.json

Filesize
1KB

MD5
8e16966e815c3c274eeb8492b1ea6648

SHA1
7482ed9f1c9fd9f6f9ba91ab15921b19f64c9687

SHA256
418ff53fca505d54268413c796e4df80e947a09f399ab222a90b81e93113d5b5

SHA512
85b28202e874b1cf45b37ba05b87b3d8d6fe38e89c6011c4240cf6b563ea6da60181d712cce20d07c364f4a266a4ec90c4934cc8b7bb2013cb3b22d755796e38

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ko\messages.json

Filesize
1KB

MD5
f3e59eeeb007144ea26306c20e04c292

SHA1
83e7bdfa1f18f4c7534208493c3ff6b1f2f57d90

SHA256
c52d9b955d229373725a6e713334bbb31ea72efa9b5cf4fbd76a566417b12cac

SHA512
7808cb5ff041b002cbd78171ec5a0b4dba3e017e21f7e8039084c2790f395b839bee04ad6c942eed47ccb53e90f6de818a725d1450bf81ba2990154afd3763af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\lo\messages.json

Filesize
2KB

MD5
e20d6c27840b406555e2f5091b118fc5

SHA1
0dcecc1a58ceb4936e255a64a2830956bfa6ec14

SHA256
89082fb05229826bc222f5d22c158235f025f0e6df67ff135a18bd899e13bb8f

SHA512
ad53fc0b153005f47f9f4344df6c4804049fac94932d895fd02eebe75222cfe77eedd9cd3fdc4c88376d18c5972055b00190507aa896488499d64e884f84f093

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\lt\messages.json

Filesize
1KB

MD5
970544ab4622701ffdf66dc556847652

SHA1
14bee2b77ee74c5e38ebd1db09e8d8104cf75317

SHA256
5dfcbd4dfeaec3abe973a78277d3bd02cd77ae635d5c8cd1f816446c61808f59

SHA512
cc12d00c10b970189e90d47390eeb142359a8d6f3a9174c2ef3ae0118f09c88ab9b689d9773028834839a7dfaf3aac6747bc1dcb23794a9f067281e20b8dc6ea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\lv\messages.json

Filesize
994B

MD5
a568a58817375590007d1b8abcaebf82

SHA1
b0f51fe6927bb4975fc6eda7d8a631bf0c1ab597

SHA256
0621de9161748f45d53052ed8a430962139d7f19074c7ffe7223ecb06b0b87db

SHA512
fcfbadec9f73975301ab404db6b09d31457fac7ccad2fa5be348e1cad6800f87cb5b56de50880c55bbadb3c40423351a6b5c2d03f6a327d898e35f517b1c628c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ml\messages.json

Filesize
2KB

MD5
a342d579532474f5b77b2dfadc690eaa

SHA1
ec5c287519ac7de608a8b155a2c91e5d6a21c23f

SHA256
d974d4fda9c8ee85bdbb43634497b41007801fcaa579d0c4e5bc347063d25975

SHA512
0be5c0243a3ce378afa14d033d4049e38f0c5a1e4d30d45edd784efbb95d445f6c4f29e4cc2e28134ea4b04ecee9632ee8682810d9dbe9d5dd186671a508eaa4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\mn\messages.json

Filesize
2KB

MD5
83e7a14b7fc60d4c66bf313c8a2bef0b

SHA1
1ccf1d79cded5d65439266db58480089cc110b18

SHA256
613d8751f6cc9d3fa319f4b7ea8b2bd3bed37fd077482ca825929dd7c12a69a8

SHA512
3742e24ffc4b5283e6ee496813c1bdc6835630d006e8647d427c3de8b8e7bf814201adf9a27bfab3abd130b6fec64ebb102ac0eb8dedfe7b63d82d3e1233305d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\mr\messages.json

Filesize
1KB

MD5
3b98c4ed8874a160c3789fead5553cfa

SHA1
5550d0ec548335293d962aaa96b6443dd8abb9f6

SHA256
adeb082a9c754dfd5a9d47340a3ddcc19bf9c7efa6e629a2f1796305f1c9a66f

SHA512
5139b6c6df9459c7b5cdc08a98348891499408cd75b46519ba3ac29e99aaafcc5911a1dee6c3a57e3413dbd0fae72d7cbc676027248dce6364377982b5ce4151

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ms\messages.json

Filesize
945B

MD5
dda32b1db8a11b1f48fb0169e999da91

SHA1
9902fbe38ac5dff4b56ff01d621d30bb58c32d55

SHA256
0135a4da8e41564af36f711b05ed0c9146e6192812b8120a5eb4cc3e6b108c36

SHA512
a88798f264b1c9f8d08e2222ccd1cb21b07f4ef79a9cdccdab42e5741ff4cbeb463caa707afac5bf14cc03ddbf54f55102b67266c0ba75d84b59c101ad95c626

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\my\messages.json

Filesize
3KB

MD5
342335a22f1886b8bc92008597326b24

SHA1
2cb04f892e430dcd7705c02bf0a8619354515513

SHA256
243befbd6b67a21433dcc97dc1a728896d3a070dc20055eb04d644e1bb955fe7

SHA512
cd344d060e30242e5a4705547e807ce3ce2231ee983bb9a8ad22b3e7598a7ec87399094b04a80245ad51d039370f09d74fe54c0b0738583884a73f0c7e888ad8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ne\messages.json

Filesize
3KB

MD5
065eb4de2319a4094f7c1c381ac753a0

SHA1
6324108a1ad968cb3aec83316c6f12d51456c464

SHA256
160e1cd593c901c7291ea4ecba735191d793ddfd7e9646a0560498627f61da6f

SHA512
8b3e970a2beb8b6b193ad6ab9baa0fd8e1147cb5b9e64d76a6d3f104d636481621be52c2d72c588adf444e136a9b1350ac767255d2e680df44e9a1fb75e4c898

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\nl\messages.json

Filesize
914B

MD5
32df72f14be59a9bc9777113a8b21de6

SHA1
2a8d9b9a998453144307dd0b700a76e783062ad0

SHA256
f3fe1ffcb182183b76e1b46c4463168c746a38e461fd25ca91ff2a40846f1d61

SHA512
e0966f5cca5a8a6d91c58d716e662e892d1c3441daa5d632e5e843839bb989f620d8ac33ed3edbafe18d7306b40cd0c4639e5a4e04da2c598331dacec2112aad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\no\messages.json

Filesize
878B

MD5
a1744b0f53ccf889955b95108367f9c8

SHA1
6a5a6771dff13dcb4fd425ed839ba100b7123de0

SHA256
21ceff02b45a4bfd60d144879dfa9f427949a027dd49a3eb0e9e345bd0b7c9a8

SHA512
f55e43f14514eecb89f6727a0d3c234149609020a516b193542b5964d2536d192f40cc12d377e70c683c269a1bdcde1c6a0e634aa84a164775cffe776536a961

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\pa\messages.json

Filesize
2KB

MD5
97f769f51b83d35c260d1f8cfd7990af

SHA1
0d59a76564b0aee31d0a074305905472f740ceca

SHA256
bbd37d41b7de6f93948fa2437a7699d4c30a3c39e736179702f212cb36a3133c

SHA512
d91f5e2d22fc2d7f73c1f1c4af79db98fcfd1c7804069ae9b2348cbc729a6d2dff7fb6f44d152b0bdaba6e0d05dff54987e8472c081c4d39315cec2cbc593816

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\pl\messages.json

Filesize
978B

MD5
b8d55e4e3b9619784aeca61ba15c9c0f

SHA1
b4a9c9885fbeb78635957296fddd12579fefa033

SHA256
e00ff20437599a5c184ca0c79546cb6500171a95e5f24b9b5535e89a89d3ec3d

SHA512
266589116eee223056391c65808255edae10eb6dc5c26655d96f8178a41e283b06360ab8e08ac3857d172023c4f616ef073d0bea770a3b3dd3ee74f5ffb2296b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\pt_BR\messages.json

Filesize
907B

MD5
608551f7026e6ba8c0cf85d9ac11f8e3

SHA1
87b017b2d4da17e322af6384f82b57b807628617

SHA256
a73eea087164620fa2260d3910d3fbe302ed85f454edb1493a4f287d42fc882f

SHA512
82f52f8591db3c0469cc16d7cbfdbf9116f6d5b5d2ad02a3d8fa39ce1378c64c0ea80ab8509519027f71a89eb8bbf38a8702d9ad26c8e6e0f499bf7da18bf747

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\pt_PT\messages.json

Filesize
914B

MD5
0963f2f3641a62a78b02825f6fa3941c

SHA1
7e6972beab3d18e49857079a24fb9336bc4d2d48

SHA256
e93b8e7fb86d2f7dfae57416bb1fb6ee0eea25629b972a5922940f0023c85f90

SHA512
22dd42d967124da5a2209dd05fb6ad3f5d0d2687ea956a22ba1e31c56ec09deb53f0711cd5b24d672405358502e9d1c502659bb36ced66caf83923b021ca0286

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ro\messages.json

Filesize
937B

MD5
bed8332ab788098d276b448ec2b33351

SHA1
6084124a2b32f386967da980cbe79dd86742859e

SHA256
085787999d78fadff9600c9dc5e3ff4fb4eb9be06d6bb19df2eef8c284be7b20

SHA512
22596584d10707cc1c8179ed3abe46ef2c314cf9c3d0685921475944b8855aab660590f8fa1cfdce7976b4bb3bd9abbbf053f61f1249a325fd0094e1c95692ed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ru\messages.json

Filesize
1KB

MD5
51d34fe303d0c90ee409a2397fca437d

SHA1
b4b9a7b19c62d0aa95d1f10640a5fba628ccca12

SHA256
be733625acd03158103d62bc0eef272ca3f265ac30c87a6a03467481a177dae3

SHA512
e8670ded44dc6ee30e5f41c8b2040cf8a463cd9a60fc31fa70eb1d4c9ac1a3558369792b5b86fa761a21f5266d5a35e5c2c39297f367daa84159585c19ec492a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\si\messages.json

Filesize
2KB

MD5
b8a4fd612534a171a9a03c1984bb4bdd

SHA1
f513f7300827fe352e8ecb5bd4bb1729f3a0e22a

SHA256
54241ebe651a8344235cc47afd274c080abaebc8c3a25afb95d8373b6a5670a2

SHA512
c03e35bfde546aeb3245024ef721e7e606327581efe9eaf8c5b11989d9033bdb58437041a5cb6d567baa05466b6aaf054c47f976fd940eeedf69fdf80d79095b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\sk\messages.json

Filesize
934B

MD5
8e55817bf7a87052f11fe554a61c52d5

SHA1
9abdc0725fe27967f6f6be0df5d6c46e2957f455

SHA256
903060ec9e76040b46deb47bbb041d0b28a6816cb9b892d7342fc7dc6782f87c

SHA512
eff9ec7e72b272dde5f29123653bc056a4bc2c3c662ae3c448f8cb6a4d1865a0679b7e74c1b3189f3e262109ed6bc8f8d2bde14aefc8e87e0f785ae4837d01c7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\sl\messages.json

Filesize
963B

MD5
bfaefeff32813df91c56b71b79ec2af4

SHA1
f8eda2b632610972b581724d6b2f9782ac37377b

SHA256
aab9cf9098294a46dc0f2fa468afff7ca7c323a1a0efa70c9db1e3a4da05d1d4

SHA512
971f2bbf5e9c84de3d31e5f2a4d1a00d891a2504f8af6d3f75fc19056bfd059a270c4c9836af35258aba586a1888133fb22b484f260c1cbc2d1d17bc3b4451aa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\sr\messages.json

Filesize
1KB

MD5
7f5f8933d2d078618496c67526a2b066

SHA1
b7050e3efa4d39548577cf47cb119fa0e246b7a4

SHA256
4e8b69e864f57cddd4dc4e4faf2c28d496874d06016bc22e8d39e0cb69552769

SHA512
0fbab56629368eef87deef2977ca51831beb7deae98e02504e564218425c751853c4fdeaa40f51ecfe75c633128b56ae105a6eb308fd5b4a2e983013197f5dba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\sv\messages.json

Filesize
884B

MD5
90d8fb448ce9c0b9ba3d07fb8de6d7ee

SHA1
d8688cac0245fd7b886d0deb51394f5df8ae7e84

SHA256
64b1e422b346ab77c5d1c77142685b3ff7661d498767d104b0c24cb36d0eb859

SHA512
6d58f49ee3ef0d3186ea036b868b2203fe936ce30dc8e246c32e90b58d9b18c624825419346b62af8f7d61767dbe9721957280aa3c524d3a5dfb1a3a76c00742

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\sw\messages.json

Filesize
980B

MD5
d0579209686889e079d87c23817eddd5

SHA1
c4f99e66a5891973315d7f2bc9c1daa524cb30dc

SHA256
0d20680b74af10ef8c754fcde259124a438dce3848305b0caf994d98e787d263

SHA512
d59911f91ed6c8ff78fd158389b4d326daf4c031b940c399569fe210f6985e23897e7f404b7014fc7b0acec086c01cc5f76354f7e5d3a1e0dedef788c23c2978

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ta\messages.json

Filesize
1KB

MD5
dcc0d1725aeaeaaf1690ef8053529601

SHA1
bb9d31859469760ac93e84b70b57909dcc02ea65

SHA256
6282bf9df12ad453858b0b531c8999d5fd6251eb855234546a1b30858462231a

SHA512
6243982d764026d342b3c47c706d822bb2b0caffa51f0591d8c878f981eef2a7fc68b76d012630b1c1eb394af90eb782e2b49329eb6538dd5608a7f0791fdcf5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\te\messages.json

Filesize
1KB

MD5
385e65ef723f1c4018eee6e4e56bc03f

SHA1
0cea195638a403fd99baef88a360bd746c21df42

SHA256
026c164bae27dbb36a564888a796aa3f188aad9e0c37176d48910395cf772cea

SHA512
e55167cb5638e04df3543d57c8027b86b9483bfcafa8e7c148eded66454aebf554b4c1cf3c33e93ec63d73e43800d6a6e7b9b1a1b0798b6bdb2f699d3989b052

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\th\messages.json

Filesize
1KB

MD5
64077e3d186e585a8bea86ff415aa19d

SHA1
73a861ac810dabb4ce63ad052e6e1834f8ca0e65

SHA256
d147631b2334a25b8aa4519e4a30fb3a1a85b6a0396bc688c68dc124ec387d58

SHA512
56dd389eb9dd335a6214e206b3bf5d63562584394d1de1928b67d369e548477004146e6cb2ad19d291cb06564676e2b2ac078162356f6bc9278b04d29825ef0c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\tr\messages.json

Filesize
1KB

MD5
76b59aaacc7b469792694cf3855d3f4c

SHA1
7c04a2c1c808fa57057a4cceee66855251a3c231

SHA256
b9066a162bee00fd50dc48c71b32b69dffa362a01f84b45698b017a624f46824

SHA512
2e507ca6874de8028dc769f3d9dfd9e5494c268432ba41b51568d56f7426f8a5f2e5b111ddd04259eb8d9a036bb4e3333863a8fc65aab793bcef39edfe41403b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\uk\messages.json

Filesize
1KB

MD5
970963c25c2cef16bb6f60952e103105

SHA1
bbddacfeee60e22fb1c130e1ee8efda75ea600aa

SHA256
9fa26ff09f6acde2457ed366c0c4124b6cac1435d0c4fd8a870a0c090417da19

SHA512
1bed9fe4d4adeed3d0bc8258d9f2fd72c6a177c713c3b03fc6f5452b6d6c2cb2236c54ea972ece7dbfd756733805eb2352cae44bab93aa8ea73bb80460349504

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\ur\messages.json

Filesize
1KB

MD5
8b4df6a9281333341c939c244ddb7648

SHA1
382c80cad29bcf8aaf52d9a24ca5a6ecf1941c6b

SHA256
5da836224d0f3a96f1c5eb5063061aad837ca9fc6fed15d19c66da25cf56f8ac

SHA512
fa1c015d4ea349f73468c78fdb798d462eef0f73c1a762298798e19f825e968383b0a133e0a2ce3b3df95f24c71992235bfc872c69dc98166b44d3183bf8a9e5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\vi\messages.json

Filesize
1KB

MD5
773a3b9e708d052d6cbaa6d55c8a5438

SHA1
5617235844595d5c73961a2c0a4ac66d8ea5f90f

SHA256
597c5f32bc999746bc5c2ed1e5115c523b7eb1d33f81b042203e1c1df4bbcafe

SHA512
e5f906729e38b23f64d7f146fa48f3abf6baed9aafc0e5f6fa59f369dc47829dbb4bfa94448580bd61a34e844241f590b8d7aec7091861105d8ebb2590a3bee9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\zh_CN\messages.json

Filesize
879B

MD5
3e76788e17e62fb49fb5ed5f4e7a3dce

SHA1
6904ffa0d13d45496f126e58c886c35366efcc11

SHA256
e72d0bb08cc3005556e95a498bd737e7783bb0e56dcc202e7d27a536616f5ee0

SHA512
f431e570ab5973c54275c9eef05e49e6fe2d6c17000f98d672dd31f9a1fad98e0d50b5b0b9cf85d5bbd3b655b93fd69768c194c8c1688cb962aa75ff1af9bdb6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\zh_HK\messages.json

Filesize
1KB

MD5
524e1b2a370d0e71342d05dde3d3e774

SHA1
60d1f59714f9e8f90ef34138d33fbff6dd39e85a

SHA256
30f44cfad052d73d86d12fa20cfc111563a3b2e4523b43f7d66d934ba8dace91

SHA512
d2225cf2fa94b01a7b0f70a933e1fdcf69cdf92f76c424ce4f9fcc86510c481c9a87a7b71f907c836cbb1ca41a8bebbd08f68dbc90710984ca738d293f905272

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\zh_TW\messages.json

Filesize
843B

MD5
0e60627acfd18f44d4df469d8dce6d30

SHA1
2bfcb0c3ca6b50d69ad5745fa692baf0708db4b5

SHA256
f94c6ddedf067642a1af18d629778ec65e02b6097a8532b7e794502747aeb008

SHA512
6ff517eed4381a61075ac7c8e80c73fafae7c0583ba4fa7f4951dd7dbe183c253702dee44b3276efc566f295dac1592271be5e0ac0c7d2c9f6062054418c7c27

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_locales\zu\messages.json

Filesize
912B

MD5
71f916a64f98b6d1b5d1f62d297fdec1

SHA1
9386e8f723c3f42da5b3f7e0b9970d2664ea0baa

SHA256
ec78ddd4ccf32b5d76ec701a20167c3fbd146d79a505e4fb0421fc1e5cf4aa63

SHA512
30fa4e02120af1be6e7cc7dbb15fae5d50825bd6b3cf28ef21d2f2e217b14af5b76cfcc165685c3edc1d09536bfcb10ca07e1e2cc0da891cec05e19394ad7144

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\_metadata\verified_contents.json

Filesize
18KB

MD5
2f0dde11ea5a53f11a1d604363dca243

SHA1
8eef7eb2f4aa207c06bcdd315342160ebacf64e8

SHA256
5a2940c7c5adba1de5e245dbff296d8abc78b078db04988815570ce53e553b1d

SHA512
f20305a42c93bcde345ba623fef8777815c8289fe49b3ec5e0f6cf97ee0d5b824687674d05827d6c846ee899da0d742407670db22ff0d70ebee5a481ab4a0ff0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\eventpage_bin_prod.js

Filesize
76KB

MD5
6a104f69e045f1416a5a5f8f9f911924

SHA1
de00fc12632cd747d1cb334f6d6fe8e99997a0c5

SHA256
3fb99493bd8e1a07ea015090e2e22df66b159411dbee5a42563774338fd33122

SHA512
01b37165b3df19cc37ee30e4aef5f7d5f4cacb7071e8472885b5e20f79e8f7cb9a3f35b4f6d94843b4412ccdcd3fc0893df2e1165a401cd6b4e6bafb87fe91f5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\manifest.json

Filesize
2KB

MD5
bb6266a33a3823d0f6120b6700017d27

SHA1
1aee5fb22f2035425d96258c2a7587e82c5f3979

SHA256
32bff6dc944e2842fda9fadbcdae5d4ebe5a14bd3cdcac7d7472b06465fe2fc1

SHA512
7a7a16fbcd0c326067b1f215a7e1e3d86bfa1e39218d56d1eb3b01a042780b0141ff2f28c0f976d0353d983a6e5f42e0443297fb203932b99c8f953cde8e28eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\Temp\scoped_dir2924_1524562651\CRX_INSTALL\page_embed_script.js

Filesize
291B

MD5
62fda4fa9cc5866797295daf242ec144

SHA1
b0fd59acfe000541753d0cb3cb38eb04e833f603

SHA256
cae608555363a5ffe6940574ac6ecd03c9ac24c329484598b78ee463554bc591

SHA512
f6a324ad4372387adc9f5b66e4bca678e22b16ca621e6ca8a57b7dd84bc9636f9c6fc3e07251d526ffde03200357c074762cc5d7b707b0a303f9c9a195d98f58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
11KB

MD5
878a70bb94905fe91cb426035a2d2ab9

SHA1
7778b05530423ebc050fab8b532dfafe13fbc8b2

SHA256
2a13339f94896fd6a1adeda1249841f9bf1a01a90cd11f67b82de60630de9f2f

SHA512
bee86fbe0b637868bd6b2ddb52de7da372358690f4e14795bafe140bef46b8bde1c07b728f4174e0ef01a8fa06df9ddb607a0989352d0910ca1e570f8e6bf3d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
58d70a7a5ec99d3b3116acc28d3a61aa

SHA1
e2e218c91f3ea73742a930b6f12309b4b11ef1b7

SHA256
971b3850a72657879668e229a41e9a45570e021881775ab6ace19cfa6b6e7cd8

SHA512
bcf6e74a702ea3f818fc06ac199ad9023220639100804da51fac77e7177b3d9f74a8e301600d3ee9edb1596576da70d4659981dd0341c3779fc641dd6667a46b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
33be9862d07e273ed0a7e459387ec54f

SHA1
56ef3498907eecc905c3e6f52b7028cf42e58fae

SHA256
06dc545f5779d7d0d66181c4499dca84f62159c2a6219765e4408586b60d4e2a

SHA512
63065f4262e844a2b89136c9c2023f3023065a227dc0a2af58f8bc3b76ea5841e0a823e385438c8345b756cb6652d81c3ca152081f391db526c1f29c1407bcb9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
e2267b990a281da1e1d8abe14145d77f

SHA1
2d80ea721439610c80c3633ed6ce9b2bc35627e5

SHA256
dfae2430b54e80352129da806d56f332a78e1a824bfc6fdef544f449fe66ca43

SHA512
68bffa8d96f5aed2d1a0b699f76be4f745222ed84988707535b89831dfe9cefd6f12552781eadb80ebebb8e69e97d2080b1666b677df97c28d6c836424bab128

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
ea86f53cd3bdba28247706f903768441

SHA1
73287d7ddcd4a24b1060252a3fa82e4d5dfbf1c4

SHA256
fcea239f58554b52ed96e9f2bce680fa1988b9acc9ab6ab5bf742e714e9e5ebf

SHA512
b7a0b1e7b2a99f8aaaa3eb3d618b020331908f8c32a3a6e440f8fcb27c1eceab751f92cfaf828fbff4995582b15821c9953ba7d77255c2c8148a025ba5aea4f2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
0b9f809f7e33510e004e7c2c20466b39

SHA1
ed9a6e6f95eaebd67921fa81d2f5cc3178f54d17

SHA256
64ace7fece8b6d6d59b665c12c678a7197e044c34361cc2f3fdf77f6135eaca3

SHA512
ebc141aa2ae97a76c9dcd57d306df929b57ce92d5893672c8da4abfb755aa3475c7077a5365dd506c6718bce5bcd772627b4a92b9e99a3d4a958a1a5960b3b5b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
b33b87db4e80901f6e8af7390dbcadae

SHA1
97ae2de661239dff53322c6f02abf9af22ca886f

SHA256
7771d3713187ead49eb1334585969da9da0f88217936d8caf4fbb3de1da74cfc

SHA512
b4a537c42f5c94068d3604597086212e25f4c931539c816302924dce00d4114bf7c59f184e37fcf57ca1c10e3115721b00d4939446fb34cd11e4c7fe79ced412

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
0778dea1b1a0c5d48be8c25ca85b6cbc

SHA1
9bbd4a9c452e9e58ae103b42f73b282e51c45351

SHA256
e2aea5b359b9b1aa84006f02dbd1005f4d73d5923b527c5e031362f598d739de

SHA512
502cee1960173e80c5f3d5933a7ed84beb27149596c904aefc2050b51b2b61866daf4510812533062eb8357bbdf1e000d55f4c08acfb55fb5b944c1dea46a073

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
87f3ff2e9b25218b77d9b2d216d1ae63

SHA1
648be6a52de4b8e2d3777725d00e616b09b5f397

SHA256
9609e600519bab20f4cd561b8dffb62dafc2c0043fc88f0a4283205b2d098ae7

SHA512
8fb0e4a08874fb9f9877e66ddba6aba96a5dcf9a307a91699a95a17712256a2c2707f6003285fe0680a0237be98a4b1376af431350cdee327d70b20c6880bca8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
158KB

MD5
d01680ed516953c769026eabbdacde19

SHA1
f7cf0125ec2d469169d49ebe3a3f050996925c91

SHA256
68b402925f88fd6bf3cc7e00efffea94519a0fc06afe7b456affcad1e5a653d9

SHA512
48b2a18de9cd9b3921bbf1b4f1e5ad9af323090c67dbc4fc26231aa54611da0cec76524a3b865c72fb5d32717e2cc33dd7bdf66d8cc07182cb51ba063e69e999

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir2924_502959530\02a9e043-380b-4ce9-a331-25a53973a8c6.tmp

Filesize
88KB

MD5
2cc86b681f2cd1d9f095584fd3153a61

SHA1
2a0ac7262fb88908a453bc125c5c3fc72b8d490e

SHA256
d412fbbeb84e2a6882b2f0267b058f2ceb97f501e440fe3f9f70fac5c2277b9c

SHA512
14ba32c3cd5b1faf100d06f78981deebbbb673299a355b6eaec88e6cb5543725242c850235a541afa8abba4a609bb2ec26e4a0526c6b198016b08d8af868b986

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir2924_502959530\CRX_INSTALL\_locales\en_CA\messages.json

Filesize
711B

MD5
558659936250e03cc14b60ebf648aa09

SHA1
32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825

SHA256
2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b

SHA512
1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir2924_502959530\CRX_INSTALL\_locales\en_CA\messages.json

Filesize
851B

MD5
07ffbe5f24ca348723ff8c6c488abfb8

SHA1
6dc2851e39b2ee38f88cf5c35a90171dbea5b690

SHA256
6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c

SHA512
7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir2924_502959530\CRX_INSTALL\dasherSettingSchema.json

Filesize
854B

MD5
4ec1df2da46182103d2ffc3b92d20ca5

SHA1
fb9d1ba3710cf31a87165317c6edc110e98994ce

SHA256
6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6

SHA512
939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request