hxxps://sourceforge[.]net/projects/autokeyboardpresser/files/latest/download

Resubmissions

16/06/2024, 13:34 UTC

240616-qt7b5aveqd 8

16/06/2024, 13:33 UTC

240616-qtlqesvenc 1

16/06/2024, 13:30 UTC

240616-qrxpxavejg 8

16/06/2024, 13:27 UTC

240616-qqbfaavdlf 8

Analysis

max time kernel
149s
max time network
142s
platform
windows11-21h2_x64
resource
win11-20240611-en
resource tags

arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
submitted
16/06/2024, 13:30 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://sourceforge.net/projects/autokeyboardpresser/files/latest/download

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file

Executes dropped EXE 3 IoCs

pid	Process
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
2820	Autosofted_Auto_Keyboard_Presser_1.9.exe
3120	Autosofted_Auto_Keyboard_Presser_1.9.exe

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
behavioral1/files/0x000100000002aa95-138.dat	autoit_exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

NTFS ADS 2 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Autosofted_Auto_Keyboard_Presser_1.9.exe:Zone.Identifier	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 56184.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
3268	msedge.exe
3268	msedge.exe
1484	msedge.exe
1484	msedge.exe
3724	msedge.exe
3724	msedge.exe
2580	identity_helper.exe
2580	identity_helper.exe
3940	msedge.exe
3940	msedge.exe
2132	msedge.exe
2132	msedge.exe
2132	msedge.exe
2132	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 3 IoCs

pid	Process
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
2820	Autosofted_Auto_Keyboard_Presser_1.9.exe
3120	Autosofted_Auto_Keyboard_Presser_1.9.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe
4764	Autosofted_Auto_Keyboard_Presser_1.9.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1484 wrote to memory of 760	1484	msedge.exe	80
PID 1484 wrote to memory of 760	1484	msedge.exe	80
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 1888	1484	msedge.exe	81
PID 1484 wrote to memory of 3268	1484	msedge.exe	82
PID 1484 wrote to memory of 3268	1484	msedge.exe	82
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83
PID 1484 wrote to memory of 2116	1484	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://sourceforge.net/projects/autokeyboardpresser/files/latest/download
1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb6ecd3cb8,0x7ffb6ecd3cc8,0x7ffb6ecd3cd8
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2632 /prefetch:8
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4444 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4640 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5600 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:4260
- C:\Users\Admin\Downloads\Autosofted_Auto_Keyboard_Presser_1.9.exe
  "C:\Users\Admin\Downloads\Autosofted_Auto_Keyboard_Presser_1.9.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6176 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:4968
- C:\Users\Admin\Downloads\Autosofted_Auto_Keyboard_Presser_1.9.exe
  "C:\Users\Admin\Downloads\Autosofted_Auto_Keyboard_Presser_1.9.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: GetForegroundWindowSpam
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,5451910886644035517,14560760082675341148,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4612 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2132
- C:\Users\Admin\Downloads\Autosofted_Auto_Keyboard_Presser_1.9.exe
  "C:\Users\Admin\Downloads\Autosofted_Auto_Keyboard_Presser_1.9.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: GetForegroundWindowSpam
  PID:3120

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1716

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3036

Network

DNS

sourceforge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

sourceforge.net

IN A

Response

sourceforge.net

IN A

104.18.37.111

sourceforge.net

IN A

172.64.150.145
DNS

config.edge.skype.com

msedge.exe

Remote address:

8.8.8.8:53

Request

config.edge.skype.com

IN A

Response

config.edge.skype.com

IN CNAME

config.edge.skype.com.trafficmanager.net

config.edge.skype.com.trafficmanager.net

IN CNAME

l-0007.config.skype.com

l-0007.config.skype.com

IN CNAME

config-edge-skype.l-0007.l-msedge.net

config-edge-skype.l-0007.l-msedge.net

IN CNAME

l-0007.l-msedge.net

l-0007.l-msedge.net

IN A

13.107.42.16
DNS

login.live.com

msedge.exe

Remote address:

8.8.8.8:53

Request

login.live.com

IN A

Response

login.live.com

IN CNAME

login.msa.msidentity.com

login.msa.msidentity.com

IN CNAME

www.tm.lg.prod.aadmsa.akadns.net

www.tm.lg.prod.aadmsa.akadns.net

IN CNAME

prdv4a.aadg.msidentity.com

prdv4a.aadg.msidentity.com

IN CNAME

www.tm.v4.a.prd.aadg.trafficmanager.net

www.tm.v4.a.prd.aadg.trafficmanager.net

IN A

20.190.160.20

www.tm.v4.a.prd.aadg.trafficmanager.net

IN A

40.126.32.140

www.tm.v4.a.prd.aadg.trafficmanager.net

IN A

40.126.32.136

www.tm.v4.a.prd.aadg.trafficmanager.net

IN A

40.126.32.74

www.tm.v4.a.prd.aadg.trafficmanager.net

IN A

20.190.160.17

www.tm.v4.a.prd.aadg.trafficmanager.net

IN A

40.126.32.138

www.tm.v4.a.prd.aadg.trafficmanager.net

IN A

40.126.32.133

www.tm.v4.a.prd.aadg.trafficmanager.net

IN A

40.126.32.68
DNS

8.8.8.8.in-addr.arpa

msedge.exe

Remote address:

8.8.8.8:53

Request

8.8.8.8.in-addr.arpa

IN PTR

Response

8.8.8.8.in-addr.arpa

IN PTR

dnsgoogle
DNS

a.fsdn.com

msedge.exe

Remote address:

8.8.8.8:53

Request

a.fsdn.com

IN A

Response

a.fsdn.com

IN CNAME

a.fsdn.com.cdn.cloudflare.net

a.fsdn.com.cdn.cloudflare.net

IN A

104.18.40.209

a.fsdn.com.cdn.cloudflare.net

IN A

172.64.147.47
DNS

209.40.18.104.in-addr.arpa

msedge.exe

Remote address:

8.8.8.8:53

Request

209.40.18.104.in-addr.arpa

IN PTR

Response
DNS

97.33.18.104.in-addr.arpa

msedge.exe

Remote address:

8.8.8.8:53

Request

97.33.18.104.in-addr.arpa

IN PTR

Response
DNS

tpc.googlesyndication.com

msedge.exe

Remote address:

8.8.8.8:53

Request

tpc.googlesyndication.com

IN A

Response

tpc.googlesyndication.com

IN A

216.58.206.33
DNS

tpc.googlesyndication.com

msedge.exe

Remote address:

8.8.8.8:53

Request

tpc.googlesyndication.com

IN A

Response

tpc.googlesyndication.com

IN A

216.58.206.33
DNS

105.111.68.204.in-addr.arpa

msedge.exe

Remote address:

8.8.8.8:53

Request

105.111.68.204.in-addr.arpa

IN PTR

Response
DNS

214.143.182.52.in-addr.arpa

msedge.exe

Remote address:

8.8.8.8:53

Request

214.143.182.52.in-addr.arpa

IN PTR

Response
DNS

6881822ee0759634e748f6c3ab8e5de5.safeframe.googlesyndication.com

msedge.exe

Remote address:

8.8.8.8:53

Request

6881822ee0759634e748f6c3ab8e5de5.safeframe.googlesyndication.com

IN A

Response

6881822ee0759634e748f6c3ab8e5de5.safeframe.googlesyndication.com

IN CNAME

pagead-googlehosted.l.google.com

pagead-googlehosted.l.google.com

IN A

172.217.18.1
GET

https://sourceforge.net/projects/autokeyboardpresser/files/latest/download

msedge.exe

Remote address:

104.18.37.111:443

Request

GET /projects/autokeyboardpresser/files/latest/download HTTP/2.0
host: sourceforge.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
pragma: no-cache
link: <https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1718214368>; rel=preload; as=script, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/lato.css?1718214368>; rel=preload; as=style, <https://a.fsdn.com/con/css/sandiego.css?1718214368>; rel=preload; as=style, <https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1718214368>; rel=preload; as=script
x-ua-compatible: IE=edge,chrome=1
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
x-frame-options: SAMEORIGIN
content-security-policy: upgrade-insecure-requests; object-src 'none'; frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com; script-src-attr 'none' 'report-sample'; frame-ancestors 'self'; script-src 'self' adservice.google.so adservice.google.co.zm adservice.google.com.gh adservice.google.hr adservice.google.cz http://c.sf-syn.com adservice.google.co.th adservice.google.co.za adservice.google.ad adservice.google.mn adservice.google.co.tz adservice.google.mg adservice.google.ne adservice.google.ro adservice.google.com.tj adservice.google.co.uz adservice.google.com.sv adservice.google.com.sg adservice.google.com.pa adservice.google.dk adservice.google.dm adservice.google.com.bh adservice.google.co.ls adservice.google.co.id adservice.google.co.zw adservice.google.com.ua adservice.google.me recaptcha.net adservice.google.com.ec adservice.google.com.bn adservice.google.as adservice.google.com.cu adservice.google.com.au adservice.google.ml *.moatads.com adservice.google.pt adservice.google.ru adservice.google.cl adservice.google.ws adservice.google.com.et adservice.google.com.ag *.googletagmanager.com adservice.google.com.vn adservice.google.co.cr *.microsofttranslator.com *.sharethrough.com http://b.sf-syn.com adservice.google.co.mz adservice.google.bs adservice.google.gt adservice.google.com.gi adservice.google.com.co adservice.google.co.jp adservice.google.com.pk adservice.google.bj adservice.google.co.in adservice.google.rs *.recaptcha.net adservice.google.com.eg adservice.google.lu adservice.google.com.hk adservice.google.bt *.google-analytics.com adservice.google.com.cy adservice.google.com.ni adservice.google.lt adservice.google.co.ve adservice.google.st adservice.google.com.my adservice.google.com.af adservice.google.cf adservice.google.fr *.googlesyndication.com adservice.google.com.jm adservice.google.im adservice.google.md *.tiny.cloud adservice.google.ht adservice.google.co.bw *.script.ac adservice.google.ee adservice.google.cg adservice.google.vg adservice.google.it adservice.google.es adservice.google.com.vc adservice.google.co.ao *.googletagservices.com adservice.google.com.py adservice.google.tg *.slashdotmedia.com *.adsafeprotected.com adservice.google.com.qa *.adnxs.com adservice.google.com.pg adservice.google.gm adservice.google.com.na adservice.google.com.ng adservice.google.com.ai adservice.google.com.sa adservice.google.kg adservice.google.com.mx adservice.google.com.ph adservice.google.si *.4dex.io adservice.google.com.bz adservice.google.com.mt adservice.google.com.fj adservice.google.mk adservice.google.co.vi adservice.google.sn *.trustarc.com adservice.google.com.np *.gstatic.cn ml314.com adservice.google.bg adservice.google.com.kh adservice.google.tm adservice.google.at adservice.google.ms *.licdn.com *.doubleverify.com adservice.google.com.br *.lijit.com adservice.google.com.gt adservice.google.tn adservice.google.je adservice.google.com.om adservice.google.sm adservice.google.nl *.s-onetag.com adservice.google.mw adservice.google.se adservice.google.ki adservice.google.com.bd adservice.google.gg adservice.google.ch adservice.google.ie adservice.google.al adservice.google.sk adservice.google.com.pe adservice.google.sr *.googleadsserving.cn adservice.google.ge adservice.google.fm adservice.google.sc adservice.google.tt adservice.google.com.pr *.flashtalking.com adservice.google.rw *.consentmanager.net adservice.google.la adservice.google.az adservice.google.cd adservice.google.com.lb adservice.google.com.tr *.2mdn.net adservice.google.ci adservice.google.com.mm adservice.google.ps adservice.google.com.ar adservice.google.ae translate.google.cn adservice.google.co.ke adservice.google.com.sb j.6sc.co adservice.google.is adservice.google.nr adservice.google.kz translate.googleapis.com adservice.google.co.kr http://*.pro-market.net adservice.google.no adservice.google.hu adservice.google.lk adservice.google.li adservice.google.dj adservice.google.fi adservice.google.co.nz adservice.google.be adservice.google.to adservice.google.bf *.doubleclick.net adservice.google.co.ck adservice.google.gr adservice.google.cv adservice.google.nu adservice.google.ca adservice.google.gy a.fsdn.com adservice.google.hn *.microsoft.com *.gstatic.com adservice.google.tl adservice.google.cm adservice.google.com.kw adservice.google.bi adservice.google.com.bo adservice.google.dz adservice.google.co.uk adservice.google.com.uy adservice.google.gl adservice.google.vu adservice.google.mu adservice.google.com.tw adservice.google.td btloader.com adservice.google.lv adservice.google.iq adservice.google.de adservice.google.co.il adservice.google.ga adservice.google.jo adservice.google.com.ly *.cloudflareinsights.com adservice.google.pl adservice.google.mv *.crsspxl.com adservice.google.co.ug *.google.com 'unsafe-inline' 'unsafe-eval'; form-action 'self' lists.sourceforge.net
set-cookie: VISITOR=b4426549-859c-464d-aabc-68e353fc2290; Max-Age=315360000; Path=/; expires=Wed, 14-Jun-2034 13:30:39 GMT; secure; HttpOnly
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 894b27d8ab2b63d2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
PUT

https://sourceforge.net/p/sfapi/update_vid

msedge.exe

Remote address:

104.18.37.111:443

Request

PUT /p/sfapi/update_vid HTTP/2.0
host: sourceforge.net
content-length: 0
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
origin: https://sourceforge.net
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://sourceforge.net/projects/autokeyboardpresser/files/latest/download
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: VISITOR=b4426549-859c-464d-aabc-68e353fc2290
cookie: __cmpcc=1
cookie: __cmpconsentx11319=CQATa4AQATa4AAfUnBENA5EgAAAAAAAAACiQAAAAAAAA
cookie: __cmpcpcx11319=____
cookie: __cmpcvcx11319=__s135_U__

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:03 GMT
content-type: application/json; charset=utf-8
content-length: 16
cache-control: no-cache
pragma: no-cache
content-security-policy: script-src-attr 'none' 'report-sample'; object-src 'none'; upgrade-insecure-requests; frame-ancestors 'self'; form-action 'self'; script-src 'self' a.fsdn.com *.sf-syn.com *.slashdotmedia.com ml314.com *.cloudflareinsights.com *.doubleclick.net *.google.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.consentmanager.net *.microsofttranslator.com *.googleapis.com cdn.mxpnl.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; frame-src 'self' *.sf-syn.com *.google.com *.googlesyndication.com *.safeframe.usercontent.goog *.googletagmanager.com *.doubleclick.net *.recaptcha.net recaptcha.net www.youtube-nocookie.com *.youtube.com *.stripe.com *.plaid.com *.prosperstack.com *.consentmanager.net
permissions-policy: microphone=(), geolocation=(), camera=(), document-domain=(), display-capture=(), autoplay=()
feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; document-domain 'none'; display 'none'; autoplay 'none'
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 894b2872ff5763d2-LHR
alt-svc: h3=":443"; ma=86400
GET

https://sourceforge.net/projects/autokeyboardpresser/postdownload

msedge.exe

Remote address:

104.18.37.111:443

Request

GET /projects/autokeyboardpresser/postdownload HTTP/2.0
host: sourceforge.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: same-origin
sec-fetch-mode: navigate
sec-fetch-dest: document
referer: https://sourceforge.net/projects/autokeyboardpresser/files/latest/download
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: VISITOR=b4426549-859c-464d-aabc-68e353fc2290
cookie: __cmpcc=1
cookie: __cmpconsentx11319=CQATa4AQATa4AAfUnBENA5EgAAAAAAAAACiQAAAAAAAA
cookie: __cmpcpcx11319=____
cookie: __cmpcvcx11319=__s135_U__

Response

HTTP/2.0 103

link: <https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1718214368>; as=script; rel=preload, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2>; as=font; crossorigin; rel=preload, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2>; as=font; crossorigin; rel=preload, <https://a.fsdn.com/con/css/lato.css?1718214368>; as=style; rel=preload, <https://a.fsdn.com/con/css/sandiego.css?1718214368>; as=style; rel=preload, <https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1718214368>; as=script; rel=preload
GET

https://sourceforge.net/projects/autokeyboardpresser/

msedge.exe

Remote address:

104.18.37.111:443

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:23 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
pragma: no-cache
link: <https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1718214368>; rel=preload; as=script, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/lato.css?1718214368>; rel=preload; as=style, <https://a.fsdn.com/con/css/sandiego.css?1718214368>; rel=preload; as=style, <https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1718214368>; rel=preload; as=script
x-ua-compatible: IE=edge,chrome=1
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
x-frame-options: SAMEORIGIN
content-security-policy: frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com; script-src-attr 'none' 'report-sample'; form-action 'self' lists.sourceforge.net; script-src 'self' adservice.google.tg adservice.google.com.eg adservice.google.sc adservice.google.com.np adservice.google.nl adservice.google.com.ag adservice.google.com.et adservice.google.be adservice.google.bf *.consentmanager.net adservice.google.so http://*.pro-market.net *.flashtalking.com adservice.google.ga a.fsdn.com adservice.google.com.qa *.adsafeprotected.com adservice.google.fm adservice.google.se adservice.google.es adservice.google.co.za adservice.google.co.ao adservice.google.com.bn *.microsofttranslator.com adservice.google.co.vi j.6sc.co adservice.google.gy adservice.google.gg adservice.google.com.ua adservice.google.com.br adservice.google.mu adservice.google.co.zm adservice.google.com.sg adservice.google.cm adservice.google.com.au adservice.google.com.lb adservice.google.com.bo adservice.google.ki adservice.google.ca adservice.google.ht adservice.google.com.vc adservice.google.de adservice.google.co.ug adservice.google.nu translate.google.cn *.adnxs.com adservice.google.com.pa adservice.google.com.sa adservice.google.com.sv adservice.google.co.ke *.doubleverify.com adservice.google.at adservice.google.rw adservice.google.hn *.recaptcha.net adservice.google.co.ck adservice.google.com.mt adservice.google.com.py adservice.google.ie adservice.google.li adservice.google.com.co adservice.google.com.gt adservice.google.cg adservice.google.ne adservice.google.co.zw *.doubleclick.net adservice.google.dk adservice.google.to adservice.google.com.pk adservice.google.co.bw adservice.google.st adservice.google.bi adservice.google.ae adservice.google.com.jm *.gstatic.cn adservice.google.com.ec *.google.com *.gstatic.com *.trustarc.com adservice.google.mn adservice.google.cv adservice.google.co.cr adservice.google.al adservice.google.co.uk adservice.google.fr adservice.google.com.gi *.licdn.com adservice.google.com.ng adservice.google.co.kr adservice.google.mk adservice.google.com.hk adservice.google.bt adservice.google.com.ar adservice.google.com.pe btloader.com adservice.google.sn adservice.google.tt adservice.google.com.uy adservice.google.kz *.googletagservices.com adservice.google.lu adservice.google.nr adservice.google.com.sb adservice.google.com.ni http://c.sf-syn.com adservice.google.fi adservice.google.mv adservice.google.cz adservice.google.hu adservice.google.com.gh adservice.google.co.mz adservice.google.com.pr adservice.google.me adservice.google.sr adservice.google.sm adservice.google.dz adservice.google.co.nz adservice.google.com.pg adservice.google.mw adservice.google.bs adservice.google.com.mx adservice.google.la adservice.google.ad adservice.google.md recaptcha.net *.googlesyndication.com adservice.google.cd adservice.google.com.na adservice.google.ge adservice.google.com.tw adservice.google.as adservice.google.ro adservice.google.im *.google-analytics.com adservice.google.gl adservice.google.com.my *.s-onetag.com adservice.google.az adservice.google.co.th adservice.google.tm adservice.google.com.ai *.googleadsserving.cn *.script.ac adservice.google.pl adservice.google.mg *.googletagmanager.com adservice.google.com.kw *.4dex.io adservice.google.gm *.sharethrough.com adservice.google.td translate.googleapis.com adservice.google.hr http://b.sf-syn.com adservice.google.gr adservice.google.is adservice.google.je adservice.google.co.id adservice.google.cl adservice.google.com.om ml314.com adservice.google.sk adservice.google.ml adservice.google.com.ly adservice.google.com.kh adservice.google.kg adservice.google.com.af adservice.google.com.ph adservice.google.gt adservice.google.vg adservice.google.cf adservice.google.com.tj adservice.google.ci adservice.google.si adservice.google.no adservice.google.ch adservice.google.co.jp adservice.google.com.bd *.slashdotmedia.com adservice.google.co.il adservice.google.bg adservice.google.lt adservice.google.com.mm adservice.google.iq adservice.google.ws *.crsspxl.com adservice.google.rs adservice.google.com.fj adservice.google.co.ve adservice.google.com.bz adservice.google.tl adservice.google.com.vn *.moatads.com *.microsoft.com adservice.google.tn adservice.google.ee adservice.google.bj adservice.google.com.tr adservice.google.ms adservice.google.co.uz adservice.google.com.cy *.cloudflareinsights.com adservice.google.vu adservice.google.co.ls adservice.google.lv adservice.google.it adservice.google.ru adservice.google.co.in adservice.google.com.cu adservice.google.com.bh adservice.google.dj *.2mdn.net adservice.google.dm adservice.google.ps adservice.google.lk *.lijit.com adservice.google.pt adservice.google.co.tz *.tiny.cloud adservice.google.jo 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; frame-ancestors 'self'; object-src 'none'
set-cookie: VISITOR=b4426549-859c-464d-aabc-68e353fc2290; Max-Age=315360000; Path=/; expires=Wed, 14-Jun-2034 13:31:23 GMT; secure; HttpOnly
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 894b28f088c363d2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400

Request

GET /projects/autokeyboardpresser/ HTTP/2.0
host: sourceforge.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: same-origin
sec-fetch-mode: navigate
sec-fetch-dest: document
referer: https://sourceforge.net/projects/autokeyboardpresser/postdownload
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: VISITOR=b4426549-859c-464d-aabc-68e353fc2290
cookie: __cmpcc=1
cookie: __cmpconsentx11319=CQATa4AQATa4AAfUnBENA5EgAAAAAAAAACiQAAAAAAAA
cookie: __cmpcpcx11319=____
cookie: __cmpcvcx11319=__s135_U__
GET

https://sourceforge.net/rest/p/autokeyboardpresser/activity?limit=5

msedge.exe

Remote address:

104.18.37.111:443

Response

HTTP/2.0 103

link: <https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1718214368>; as=script; rel=preload, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2>; as=font; crossorigin; rel=preload, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2>; as=font; crossorigin; rel=preload, <https://a.fsdn.com/con/css/lato.css?1718214368>; as=style; rel=preload, <https://a.fsdn.com/con/css/sandiego.css?1718214368>; as=style; rel=preload, <https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1718214368>; as=script; rel=preload

Request

GET /rest/p/autokeyboardpresser/activity?limit=5 HTTP/2.0
host: sourceforge.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
accept: application/json, text/javascript, */*; q=0.01
dnt: 1
x-requested-with: XMLHttpRequest
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://sourceforge.net/projects/autokeyboardpresser/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: VISITOR=b4426549-859c-464d-aabc-68e353fc2290
cookie: __cmpcc=1
cookie: __cmpconsentx11319=CQATa4AQATa4AAfUnBENA5EgAAAAAAAAACiQAAAAAAAA
cookie: __cmpcpcx11319=____
cookie: __cmpcvcx11319=__s135_U__
DNS

msedge.exe

Remote address:

104.18.37.111:443

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:39 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
pragma: no-cache
link: <https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1718214368>; rel=preload; as=script, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2>; rel=preload; as=font; crossorigin, <https://a.fsdn.com/con/css/lato.css?1718214368>; rel=preload; as=style, <https://a.fsdn.com/con/css/sandiego.css?1718214368>; rel=preload; as=style, <https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1718214368>; rel=preload; as=script
x-ua-compatible: IE=edge,chrome=1
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
x-frame-options: SAMEORIGIN
content-security-policy: script-src 'self' adservice.google.ca adservice.google.bj adservice.google.cf adservice.google.com.bh a.fsdn.com adservice.google.hr *.moatads.com adservice.google.sn adservice.google.com.gi adservice.google.com.my adservice.google.gl adservice.google.fr adservice.google.vu adservice.google.com.bn adservice.google.lv adservice.google.com.ly adservice.google.com.vn adservice.google.mk *.google-analytics.com adservice.google.ee adservice.google.gy *.doubleverify.com adservice.google.mv adservice.google.fm adservice.google.com.ai adservice.google.fi adservice.google.se adservice.google.kg adservice.google.bg adservice.google.nr adservice.google.com.pr adservice.google.com.uy adservice.google.sm adservice.google.nu adservice.google.ch adservice.google.es adservice.google.com.ng adservice.google.co.ls adservice.google.ne *.2mdn.net adservice.google.rw adservice.google.tn adservice.google.gr adservice.google.is adservice.google.bs adservice.google.com.np adservice.google.com.pg adservice.google.pl adservice.google.ru adservice.google.ml adservice.google.mg adservice.google.com.mm adservice.google.mn adservice.google.st adservice.google.ws adservice.google.mw adservice.google.co.za adservice.google.com.vc adservice.google.com.mt adservice.google.no adservice.google.co.nz adservice.google.co.zm adservice.google.com.hk adservice.google.si adservice.google.com.pa adservice.google.sc adservice.google.com.tw adservice.google.co.uz adservice.google.com.jm adservice.google.co.bw adservice.google.com.cu *.flashtalking.com *.slashdotmedia.com ml314.com adservice.google.co.jp adservice.google.tl *.consentmanager.net adservice.google.com.kh adservice.google.me adservice.google.com.ni adservice.google.ro adservice.google.pt adservice.google.co.in *.adnxs.com adservice.google.co.ve adservice.google.com.eg adservice.google.com.kw adservice.google.ps adservice.google.mu adservice.google.ci adservice.google.it http://*.pro-market.net *.gstatic.cn adservice.google.so adservice.google.iq adservice.google.co.uk adservice.google.com.py adservice.google.co.cr adservice.google.jo adservice.google.li adservice.google.rs adservice.google.com.au adservice.google.co.tz adservice.google.gt adservice.google.com.na adservice.google.com.et http://c.sf-syn.com adservice.google.com.gt adservice.google.co.mz j.6sc.co adservice.google.com.co *.recaptcha.net adservice.google.je adservice.google.kz adservice.google.com.sg adservice.google.com.br adservice.google.lu adservice.google.co.ck adservice.google.com.sb http://b.sf-syn.com adservice.google.co.th adservice.google.to *.microsoft.com adservice.google.vg *.googletagservices.com adservice.google.ie adservice.google.ht translate.googleapis.com adservice.google.co.vi adservice.google.la adservice.google.com.sa *.googleadsserving.cn adservice.google.co.ug *.crsspxl.com *.doubleclick.net adservice.google.sr adservice.google.com.om adservice.google.com.ec adservice.google.com.lb adservice.google.cz adservice.google.dz *.script.ac *.trustarc.com adservice.google.com.bd adservice.google.md adservice.google.tg adservice.google.gg adservice.google.com.ag adservice.google.cm adservice.google.tm *.googletagmanager.com adservice.google.dj btloader.com adservice.google.dk adservice.google.com.bz *.adsafeprotected.com adservice.google.com.bo adservice.google.com.ua adservice.google.de adservice.google.com.mx adservice.google.sk adservice.google.dm adservice.google.td adservice.google.ga adservice.google.com.ar adservice.google.cg adservice.google.at adservice.google.cd adservice.google.co.zw *.cloudflareinsights.com adservice.google.co.ke *.s-onetag.com adservice.google.bt adservice.google.com.pk adservice.google.com.qa adservice.google.ad adservice.google.co.ao adservice.google.com.cy adservice.google.com.tr adservice.google.al adservice.google.ki adservice.google.com.af *.microsofttranslator.com adservice.google.ge adservice.google.as adservice.google.bi adservice.google.co.kr adservice.google.hu adservice.google.gm adservice.google.bf adservice.google.com.fj translate.google.cn adservice.google.com.ph adservice.google.az adservice.google.co.il adservice.google.com.sv adservice.google.ms adservice.google.cv *.tiny.cloud *.gstatic.com adservice.google.cl adservice.google.co.id adservice.google.im adservice.google.ae recaptcha.net *.4dex.io adservice.google.com.gh adservice.google.tt adservice.google.hn adservice.google.lk *.google.com *.sharethrough.com *.licdn.com *.googlesyndication.com adservice.google.com.pe adservice.google.nl *.lijit.com adservice.google.com.tj adservice.google.lt adservice.google.be 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; object-src 'none'; frame-ancestors 'self'; frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com; script-src-attr 'none' 'report-sample'; form-action 'self' lists.sourceforge.net
set-cookie: VISITOR=b4426549-859c-464d-aabc-68e353fc2290; Max-Age=315360000; Path=/; expires=Wed, 14-Jun-2034 13:31:39 GMT; secure; HttpOnly
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 894b29527f5063d2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
DNS

msedge.exe

Remote address:

104.18.37.111:443

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:40 GMT
content-type: application/json; charset=utf-8
cache-control: no-cache
pragma: no-cache
content-security-policy: script-src 'self' a.fsdn.com *.sf-syn.com *.slashdotmedia.com ml314.com *.cloudflareinsights.com *.doubleclick.net *.google.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.consentmanager.net *.microsofttranslator.com *.googleapis.com cdn.mxpnl.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; object-src 'none'; form-action 'self'; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; frame-ancestors 'self'; frame-src 'self' *.sf-syn.com *.google.com *.googlesyndication.com *.safeframe.usercontent.goog *.googletagmanager.com *.doubleclick.net *.recaptcha.net recaptcha.net www.youtube-nocookie.com *.youtube.com *.stripe.com *.plaid.com *.prosperstack.com *.consentmanager.net; upgrade-insecure-requests; script-src-attr 'none' 'report-sample'
permissions-policy: microphone=(), geolocation=(), camera=(), document-domain=(), display-capture=(), autoplay=()
feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; document-domain 'none'; display 'none'; autoplay 'none'
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3254
last-modified: Sun, 16 Jun 2024 12:37:26 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b295a59a063d2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
DNS

111.37.18.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

111.37.18.104.in-addr.arpa

IN PTR

Response
DNS

d.delivery.consentmanager.net

Remote address:

8.8.8.8:53

Request

d.delivery.consentmanager.net

IN A

Response

d.delivery.consentmanager.net

IN A

87.230.98.76
DNS

c.sf-syn.com

Remote address:

8.8.8.8:53

Request

c.sf-syn.com

IN A

Response

c.sf-syn.com

IN A

104.18.33.97

c.sf-syn.com

IN A

172.64.154.159
DNS

securepubads.g.doubleclick.net

Remote address:

8.8.8.8:53

Request

securepubads.g.doubleclick.net

IN A

Response

securepubads.g.doubleclick.net

IN A

142.250.186.130
DNS

130.186.250.142.in-addr.arpa

Remote address:

8.8.8.8:53

Request

130.186.250.142.in-addr.arpa

IN PTR

Response

130.186.250.142.in-addr.arpa

IN PTR

fra24s07-in-f21e100net
DNS

altushost-swe.dl.sourceforge.net

Remote address:

8.8.8.8:53

Request

altushost-swe.dl.sourceforge.net

IN A

Response

altushost-swe.dl.sourceforge.net

IN A

79.142.76.130
DNS

r.bing.com

Remote address:

8.8.8.8:53

Request

r.bing.com

IN A

Response

r.bing.com

IN CNAME

p-static.bing.trafficmanager.net

p-static.bing.trafficmanager.net

IN CNAME

r.bing.com.edgekey.net

r.bing.com.edgekey.net

IN CNAME

e86303.dscx.akamaiedge.net

e86303.dscx.akamaiedge.net

IN A

23.62.61.97

e86303.dscx.akamaiedge.net

IN A

23.62.61.194
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR

Response
DNS

42de3da8de1323b9b74bf13c6771734f.safeframe.googlesyndication.com

Remote address:

8.8.8.8:53

Request

42de3da8de1323b9b74bf13c6771734f.safeframe.googlesyndication.com

IN A

Response

42de3da8de1323b9b74bf13c6771734f.safeframe.googlesyndication.com

IN CNAME

pagead-googlehosted.l.google.com

pagead-googlehosted.l.google.com

IN A

172.217.169.65
DNS

20.160.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

20.160.190.20.in-addr.arpa

IN PTR

Response
DNS

cdn.consentmanager.net

Remote address:

8.8.8.8:53

Request

cdn.consentmanager.net

IN A

Response

cdn.consentmanager.net

IN CNAME

1376624012.rsc.cdn77.org

1376624012.rsc.cdn77.org

IN A

89.187.167.5

1376624012.rsc.cdn77.org

IN A

195.181.164.17
DNS

76.98.230.87.in-addr.arpa

Remote address:

8.8.8.8:53

Request

76.98.230.87.in-addr.arpa

IN PTR

Response

76.98.230.87.in-addr.arpa

IN PTR

ma5050018 psmanagedcom
DNS

99f8720aef60a6f3208858296e6e32a9.safeframe.googlesyndication.com

Remote address:

8.8.8.8:53

Request

99f8720aef60a6f3208858296e6e32a9.safeframe.googlesyndication.com

IN A

Response

99f8720aef60a6f3208858296e6e32a9.safeframe.googlesyndication.com

IN CNAME

pagead-googlehosted.l.google.com

pagead-googlehosted.l.google.com

IN A

172.217.18.1
DNS

1.18.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

1.18.217.172.in-addr.arpa

IN PTR

Response

1.18.217.172.in-addr.arpa

IN PTR

fra15s28-in-f11e100net

1.18.217.172.in-addr.arpa

IN PTR

fra24s22-in-f1�F

1.18.217.172.in-addr.arpa

IN PTR

fra02s19-in-f1�F
DNS

downloads.sourceforge.net

Remote address:

8.8.8.8:53

Request

downloads.sourceforge.net

IN A

Response

downloads.sourceforge.net

IN A

204.68.111.105
DNS

browser.pipe.aria.microsoft.com

Remote address:

8.8.8.8:53

Request

browser.pipe.aria.microsoft.com

IN A

Response

browser.pipe.aria.microsoft.com

IN CNAME

browser.events.data.trafficmanager.net

browser.events.data.trafficmanager.net

IN CNAME

onedscolprdcus19.centralus.cloudapp.azure.com

onedscolprdcus19.centralus.cloudapp.azure.com

IN A

52.182.143.214
DNS

97.61.62.23.in-addr.arpa

Remote address:

8.8.8.8:53

Request

97.61.62.23.in-addr.arpa

IN PTR

Response

97.61.62.23.in-addr.arpa

IN PTR

a23-62-61-97deploystaticakamaitechnologiescom
DNS

222.197.79.204.in-addr.arpa

Remote address:

8.8.8.8:53

Request

222.197.79.204.in-addr.arpa

IN PTR

Response
DNS

nexusrules.officeapps.live.com

Remote address:

8.8.8.8:53

Request

nexusrules.officeapps.live.com

IN A

Response

nexusrules.officeapps.live.com

IN CNAME

prod.nexusrules.live.com.akadns.net

prod.nexusrules.live.com.akadns.net

IN A

52.111.227.14
GET

https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://sourceforge.net
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: font/woff2
content-length: 25320
last-modified: Tue, 30 Nov 2021 16:01:15 GMT
etag: "61a64acb-62e8"
expires: Wed, 17 Jul 2024 13:30:39 GMT
cache-control: public, max-age=2678400
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 504445
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dc0da0640f-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://sourceforge.net
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: font/woff2
content-length: 24712
last-modified: Tue, 30 Nov 2021 16:01:17 GMT
etag: "61a64acd-6088"
expires: Wed, 17 Jul 2024 13:30:39 GMT
cache-control: public, max-age=2678400
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 508861
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dc0da4640f-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/css/lato.css?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/css/lato.css?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=772
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: W/"653aadc9-304"
expires: Wed, 17 Jul 2024 13:30:39 GMT
last-modified: Thu, 26 Oct 2023 18:19:53 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 329994
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dc0e986519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/css/sandiego.css?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/css/sandiego.css?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: text/css
cf-bgj: minify
cf-polished: status=cannot_optimize
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: W/"6638eb10-1510"
expires: Wed, 17 Jul 2024 13:30:39 GMT
last-modified: Mon, 06 May 2024 14:37:04 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 329994
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dc0ea66519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/css/sftheme/sandiego/cmp.css?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/css/sftheme/sandiego/cmp.css?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: application/javascript
content-length: 17
cf-bgj: minify
cf-polished: origSize=35
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: "653aadc9-23"
expires: Wed, 17 Jul 2024 13:30:39 GMT
last-modified: Thu, 26 Oct 2023 18:19:53 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 329994
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dc0eb56519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/min/sf.sandiego-cmp-top.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=29151
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: W/"6638eb0f-71df"
expires: Wed, 17 Jul 2024 13:30:39 GMT
last-modified: Mon, 06 May 2024 14:37:03 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 329984
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dc0eab6519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/min/sf.sandiego-head.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: text/css
cf-bgj: minify
cf-polished: status=cannot_optimize
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: W/"6669dfc6-646fc"
expires: Wed, 17 Jul 2024 13:30:39 GMT
last-modified: Wed, 12 Jun 2024 17:49:58 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 329994
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dc0e9d6519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/adsbanner.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/adsbanner.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=125036
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: W/"6660c0a4-1e86c"
expires: Wed, 17 Jul 2024 13:30:39 GMT
last-modified: Wed, 05 Jun 2024 19:46:44 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 329994
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dc0ead6519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/min/sf.sandiego-base.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/min/sf.sandiego-base.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=111752
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: W/"664cf7c4-1b488"
expires: Wed, 17 Jul 2024 13:30:39 GMT
last-modified: Tue, 21 May 2024 19:36:36 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 329994
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dd28986519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/min/sf.sandiego-foundation-base.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/min/sf.sandiego-foundation-base.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=88111
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: W/"61e9ca2b-1582f"
expires: Wed, 17 Jul 2024 13:30:39 GMT
last-modified: Thu, 20 Jan 2022 20:46:35 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 329994
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dd48b46519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/min/sf.sandiego-dwnld.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/min/sf.sandiego-dwnld.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: image/webp
content-length: 3406
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=6746
content-disposition: inline; filename="github-sync.webp"
vary: Accept
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: "631a002a-1a5a"
expires: Wed, 17 Jul 2024 13:30:39 GMT
last-modified: Thu, 08 Sep 2022 14:46:02 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 182143
accept-ranges: bytes
server: cloudflare
cf-ray: 894b27dd68ed6519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/images/sandiego/sf-logo-full.svg

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/images/sandiego/sf-logo-full.svg HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Sep 2022 19:46:33 GMT
etag: W/"6334a499-3ff8"
expires: Wed, 17 Jul 2024 13:30:39 GMT
cache-control: public, max-age=2678400
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 504453
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dd68ec6519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/images/sandiego/github-sync.png

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/images/sandiego/github-sync.png HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: image/webp
content-length: 4598
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=9237
last-modified: Sun, 16 Jun 2024 09:37:46 GMT
vary: Accept
cache-control: public, max-age=2678400
content-security-policy: script-src 'self' adservice.google.co.za *.doubleverify.com adservice.google.fi *.adsafeprotected.com adservice.google.je *.lijit.com adservice.google.td adservice.google.com.mm *.googleadsserving.cn adservice.google.com.ag *.consentmanager.net adservice.google.mu adservice.google.sc adservice.google.ch adservice.google.com.gi adservice.google.fr adservice.google.co.ck adservice.google.bt adservice.google.tg adservice.google.it adservice.google.cl adservice.google.com.ni adservice.google.bf adservice.google.com.cy adservice.google.cg adservice.google.co.zm http://c.sf-syn.com *.googletagservices.com adservice.google.cz adservice.google.al adservice.google.md adservice.google.ms adservice.google.gr *.tiny.cloud *.googletagmanager.com translate.google.cn adservice.google.ie adservice.google.co.ke btloader.com adservice.google.sn adservice.google.ca adservice.google.bj *.google.com adservice.google.no adservice.google.hn adservice.google.lt adservice.google.sr adservice.google.com.ar adservice.google.com.np adservice.google.as adservice.google.ws adservice.google.tt adservice.google.com.ec adservice.google.com.kh adservice.google.co.bw *.s-onetag.com adservice.google.com.pr adservice.google.kg adservice.google.com.bh adservice.google.nu *.licdn.com adservice.google.sk adservice.google.nr adservice.google.ro adservice.google.de adservice.google.cd adservice.google.ru adservice.google.gt recaptcha.net adservice.google.com.pa adservice.google.vu adservice.google.gm adservice.google.se adservice.google.es adservice.google.com.tr adservice.google.com.vn adservice.google.me *.2mdn.net adservice.google.com.cu adservice.google.com.ng adservice.google.com.ly *.gstatic.cn adservice.google.co.vi adservice.google.com.om adservice.google.ga adservice.google.com.bz adservice.google.so adservice.google.com.sa adservice.google.lv adservice.google.dm adservice.google.com.uy adservice.google.to adservice.google.fm adservice.google.co.ug adservice.google.tl adservice.google.com.bo adservice.google.tn adservice.google.com.pg j.6sc.co adservice.google.ge adservice.google.la adservice.google.co.ls *.crsspxl.com *.googlesyndication.com *.moatads.com adservice.google.com.pk adservice.google.bi adservice.google.com.kw adservice.google.com.py *.microsoft.com adservice.google.dj ml314.com adservice.google.dz adservice.google.co.th adservice.google.pl adservice.google.rs adservice.google.com.gh adservice.google.co.tz adservice.google.com.ai adservice.google.com.ua adservice.google.si *.flashtalking.com adservice.google.com.eg adservice.google.com.tj adservice.google.com.ph adservice.google.mk *.gstatic.com adservice.google.rw http://b.sf-syn.com adservice.google.com.sg adservice.google.nl adservice.google.co.id adservice.google.com.au adservice.google.bg adservice.google.kz adservice.google.com.vc adservice.google.com.mx adservice.google.co.ao adservice.google.sm adservice.google.co.ve translate.googleapis.com adservice.google.gl adservice.google.st adservice.google.ne adservice.google.co.jp adservice.google.hu adservice.google.ki adservice.google.hr adservice.google.gg adservice.google.com.na adservice.google.ml adservice.google.pt adservice.google.vg adservice.google.dk *.microsofttranslator.com adservice.google.com.sv adservice.google.co.il adservice.google.com.pe adservice.google.com.fj adservice.google.com.af adservice.google.at adservice.google.jo *.cloudflareinsights.com adservice.google.be adservice.google.com.qa adservice.google.com.bd adservice.google.com.my adservice.google.az adservice.google.co.uk adservice.google.co.in adservice.google.ee adservice.google.mv adservice.google.com.co adservice.google.mg adservice.google.ae adservice.google.com.gt adservice.google.com.bn *.doubleclick.net adservice.google.co.uz a.fsdn.com adservice.google.com.jm adservice.google.mw adservice.google.cf *.adnxs.com adservice.google.ad adservice.google.li adservice.google.com.mt adservice.google.ps adservice.google.is adservice.google.co.cr adservice.google.iq *.sharethrough.com adservice.google.com.tw adservice.google.ci adservice.google.com.sb adservice.google.mn *.trustarc.com adservice.google.com.lb adservice.google.bs adservice.google.co.nz *.slashdotmedia.com adservice.google.lk adservice.google.cv adservice.google.tm *.google-analytics.com adservice.google.gy adservice.google.cm adservice.google.com.br http://*.pro-market.net adservice.google.com.et adservice.google.ht *.4dex.io adservice.google.co.kr adservice.google.co.zw adservice.google.lu adservice.google.im adservice.google.com.hk adservice.google.co.mz *.recaptcha.net *.script.ac 'unsafe-inline' 'unsafe-eval'; frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com; upgrade-insecure-requests; form-action 'self' lists.sourceforge.net; object-src 'none'; script-src-attr 'none' 'report-sample'; frame-ancestors 'self'
expires: Wed, 17 Jul 2024 13:30:39 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
cf-cache-status: HIT
age: 1545
accept-ranges: bytes
server: cloudflare
cf-ray: 894b27dd79036519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/allura/p/autokeyboardpresser/icon?1436480738

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /allura/p/autokeyboardpresser/icon?1436480738 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: image/webp
cache-control: public, max-age=2678400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1154
content-security-policy: frame-src 'self' *.sf-syn.com *.google.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net www.youtube-nocookie.com *.youtube.com *.stripe.com *.plaid.com *.prosperstack.com *.consentmanager.net; object-src 'none'; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; script-src-attr 'none' 'report-sample'; upgrade-insecure-requests; frame-ancestors 'self'; script-src 'self' a.fsdn.com *.sf-syn.com *.slashdotmedia.com ml314.com *.cloudflareinsights.com *.doubleclick.net *.google.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.consentmanager.net *.microsofttranslator.com *.googleapis.com cdn.mxpnl.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; form-action 'self'
etag: "autosofted_keyboard2_32x32.png?2015-06-15 01:39:22+00:00"
expires: Wed, 17 Jul 2024 13:30:39 GMT
feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; document-domain 'none'; display 'none'; autoplay 'none'
last-modified: Mon, 15 Jun 2015 01:39:22 GMT
permissions-policy: microphone=(), geolocation=(), camera=(), document-domain=(), display-capture=(), autoplay=()
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 55409
server: cloudflare
cf-ray: 894b27dd78ef6519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/mirrorimages/altushost-xlarge.png

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /mirrorimages/altushost-xlarge.png HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: image/webp
content-length: 9600
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=12339
vary: Accept
cache-control: public, max-age=2678400
content-security-policy: frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com; form-action 'self' lists.sourceforge.net; upgrade-insecure-requests; script-src 'self' *.moatads.com adservice.google.co.nz adservice.google.com.gi adservice.google.gy adservice.google.mu adservice.google.es adservice.google.co.ao adservice.google.tg adservice.google.co.bw adservice.google.mw adservice.google.ml adservice.google.com.bh adservice.google.ci adservice.google.al adservice.google.is adservice.google.ne adservice.google.be adservice.google.ro adservice.google.st adservice.google.com.pg adservice.google.com.gh *.googletagmanager.com adservice.google.nu adservice.google.com.mt *.tiny.cloud adservice.google.im adservice.google.co.mz adservice.google.dz *.google.com btloader.com adservice.google.sn adservice.google.bi adservice.google.co.uz adservice.google.com.pr adservice.google.ms *.s-onetag.com adservice.google.so adservice.google.com.na *.adsafeprotected.com adservice.google.pl *.2mdn.net adservice.google.lt adservice.google.com.jm adservice.google.com.co *.licdn.com adservice.google.com.kh adservice.google.ht adservice.google.sk adservice.google.cz adservice.google.com.lb adservice.google.iq adservice.google.com.mx adservice.google.com.tr adservice.google.la adservice.google.ru adservice.google.co.ke *.trustarc.com adservice.google.com.tw adservice.google.co.zm adservice.google.at http://c.sf-syn.com *.consentmanager.net adservice.google.com.sa adservice.google.bs adservice.google.tl http://*.pro-market.net *.flashtalking.com *.googlesyndication.com adservice.google.com.bn adservice.google.com.ph adservice.google.ad adservice.google.cl *.lijit.com adservice.google.kz adservice.google.ki adservice.google.co.tz adservice.google.fm adservice.google.co.ug adservice.google.com.ag adservice.google.com.bz adservice.google.dm adservice.google.fi adservice.google.ee adservice.google.cv adservice.google.com.cy *.adnxs.com *.googleadsserving.cn adservice.google.mk adservice.google.se adservice.google.com.gt translate.googleapis.com adservice.google.co.za adservice.google.hn adservice.google.lv adservice.google.bt adservice.google.com.pk adservice.google.com.kw *.doubleverify.com adservice.google.ps adservice.google.com.ai adservice.google.co.jp adservice.google.gl adservice.google.sc adservice.google.me adservice.google.com.et adservice.google.it j.6sc.co adservice.google.co.vi adservice.google.co.zw adservice.google.nl adservice.google.li adservice.google.kg adservice.google.mv adservice.google.vu adservice.google.dj adservice.google.tt adservice.google.gm adservice.google.com.qa adservice.google.mg adservice.google.com.eg adservice.google.com.sg http://b.sf-syn.com *.microsofttranslator.com *.sharethrough.com adservice.google.com.pa adservice.google.no ml314.com adservice.google.ws recaptcha.net adservice.google.com.mm *.googletagservices.com adservice.google.com.ng adservice.google.lk adservice.google.vg adservice.google.com.ua adservice.google.as adservice.google.de adservice.google.com.ec adservice.google.ga adservice.google.com.vc adservice.google.co.ck adservice.google.hr adservice.google.sm *.cloudflareinsights.com translate.google.cn adservice.google.co.id adservice.google.com.np adservice.google.com.cu adservice.google.az adservice.google.tm adservice.google.pt adservice.google.mn adservice.google.tn *.recaptcha.net *.gstatic.com adservice.google.lu adservice.google.com.ar adservice.google.nr adservice.google.si adservice.google.co.th adservice.google.com.py *.google-analytics.com adservice.google.co.kr adservice.google.com.br *.gstatic.cn adservice.google.co.il adservice.google.co.uk adservice.google.com.pe adservice.google.co.in adservice.google.gg adservice.google.com.bo adservice.google.com.vn adservice.google.bj adservice.google.com.om *.4dex.io adservice.google.td adservice.google.com.au *.slashdotmedia.com adservice.google.gt adservice.google.md *.crsspxl.com adservice.google.ch adservice.google.sr adservice.google.com.fj adservice.google.com.ly a.fsdn.com adservice.google.bg adservice.google.com.uy adservice.google.cm adservice.google.com.sv adservice.google.com.af adservice.google.co.cr adservice.google.com.tj *.script.ac adservice.google.co.ve adservice.google.cg *.microsoft.com adservice.google.to adservice.google.ae adservice.google.com.my adservice.google.hu adservice.google.cd adservice.google.com.hk adservice.google.rs adservice.google.cf adservice.google.com.sb adservice.google.ca adservice.google.ge adservice.google.co.ls adservice.google.ie adservice.google.je adservice.google.com.bd adservice.google.jo adservice.google.fr adservice.google.rw adservice.google.bf adservice.google.gr adservice.google.dk *.doubleclick.net adservice.google.com.ni 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; object-src 'none'; script-src-attr 'none' 'report-sample'
expires: Wed, 17 Jul 2024 13:30:39 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
last-modified: Sun, 16 Jun 2024 12:41:49 GMT
cf-cache-status: HIT
age: 574
accept-ranges: bytes
server: cloudflare
cf-ray: 894b27dd79086519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/app/nel_img/18233

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/app/nel_img/18233 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: image/webp
content-length: 3220
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=5530
last-modified: Sun, 16 Jun 2024 11:39:59 GMT
vary: Accept
cache-control: public, max-age=2678400
content-security-policy: form-action 'self' lists.sourceforge.net; upgrade-insecure-requests; object-src 'none'; script-src-attr 'none' 'report-sample'; script-src 'self' adservice.google.nl *.s-onetag.com adservice.google.at adservice.google.tn adservice.google.dj adservice.google.co.th adservice.google.iq adservice.google.co.uk adservice.google.me adservice.google.so adservice.google.im adservice.google.ps adservice.google.be *.gstatic.com adservice.google.com.ng adservice.google.ee adservice.google.it adservice.google.cz *.lijit.com adservice.google.ga adservice.google.fr adservice.google.co.ao adservice.google.com.af *.doubleverify.com adservice.google.com.gt adservice.google.co.ke j.6sc.co *.cloudflareinsights.com *.4dex.io adservice.google.md adservice.google.bf adservice.google.com.sb adservice.google.com.tw adservice.google.td adservice.google.com.et adservice.google.com.lb adservice.google.com.jm adservice.google.rs *.gstatic.cn adservice.google.com.cu adservice.google.kz btloader.com adservice.google.es adservice.google.dm *.slashdotmedia.com adservice.google.mk adservice.google.com.ag adservice.google.is adservice.google.jo adservice.google.mu *.licdn.com adservice.google.lt adservice.google.com.mt adservice.google.co.zm adservice.google.no adservice.google.gy adservice.google.com.pg *.doubleclick.net adservice.google.si adservice.google.com.sv translate.google.cn adservice.google.cl adservice.google.com.ua adservice.google.gr adservice.google.ro adservice.google.com.pe adservice.google.vg adservice.google.com.tr adservice.google.sm adservice.google.co.bw adservice.google.co.ug adservice.google.gg adservice.google.co.ve adservice.google.mv adservice.google.hn adservice.google.bi adservice.google.as adservice.google.co.nz adservice.google.com.tj adservice.google.ru adservice.google.tl adservice.google.com.cy adservice.google.co.za adservice.google.ca adservice.google.bs adservice.google.com.vn http://b.sf-syn.com adservice.google.hu adservice.google.com.bn adservice.google.tt a.fsdn.com adservice.google.com.hk *.flashtalking.com adservice.google.ie adservice.google.com.vc adservice.google.com.ai adservice.google.com.py adservice.google.ci http://*.pro-market.net adservice.google.com.kw adservice.google.com.pa *.adsafeprotected.com adservice.google.nr adservice.google.com.bo adservice.google.com.ar adservice.google.co.uz adservice.google.dk adservice.google.sk adservice.google.com.sg adservice.google.bg adservice.google.de adservice.google.pt adservice.google.com.ly adservice.google.cv adservice.google.com.gh adservice.google.ml *.googletagservices.com *.adnxs.com *.googletagmanager.com adservice.google.com.mm adservice.google.com.fj adservice.google.com.pk adservice.google.com.bd adservice.google.com.pr adservice.google.je adservice.google.az adservice.google.co.zw adservice.google.com.bz adservice.google.com.ni adservice.google.fm *.microsofttranslator.com adservice.google.fi *.moatads.com *.2mdn.net adservice.google.rw *.microsoft.com adservice.google.se adservice.google.tm *.script.ac adservice.google.gt adservice.google.co.kr *.tiny.cloud adservice.google.nu adservice.google.com.uy adservice.google.ch adservice.google.cd translate.googleapis.com adservice.google.ne adservice.google.com.na adservice.google.vu adservice.google.sr adservice.google.co.vi adservice.google.co.cr ml314.com adservice.google.com.mx *.trustarc.com *.googlesyndication.com adservice.google.cf adservice.google.com.om adservice.google.kg adservice.google.ws adservice.google.com.ph *.sharethrough.com recaptcha.net adservice.google.com.br adservice.google.cm adservice.google.bt adservice.google.com.co *.google.com adservice.google.com.qa adservice.google.mn adservice.google.gl adservice.google.co.in adservice.google.li *.recaptcha.net adservice.google.mg adservice.google.hr adservice.google.co.jp adservice.google.com.my adservice.google.ki adservice.google.com.kh adservice.google.lu adservice.google.co.id adservice.google.st adservice.google.com.eg adservice.google.bj adservice.google.cg adservice.google.com.sa adservice.google.mw adservice.google.lv adservice.google.tg adservice.google.pl adservice.google.co.tz *.consentmanager.net adservice.google.com.bh adservice.google.sn adservice.google.co.mz adservice.google.lk adservice.google.com.np adservice.google.gm adservice.google.ms adservice.google.com.gi adservice.google.ht adservice.google.co.ls adservice.google.ge *.googleadsserving.cn adservice.google.ad adservice.google.co.il adservice.google.com.ec adservice.google.al *.crsspxl.com adservice.google.co.ck http://c.sf-syn.com adservice.google.dz adservice.google.sc *.google-analytics.com adservice.google.to adservice.google.la adservice.google.ae adservice.google.com.au 'unsafe-inline' 'unsafe-eval'; frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com; frame-ancestors 'self'
expires: Wed, 17 Jul 2024 13:30:39 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
cf-cache-status: HIT
age: 3014
accept-ranges: bytes
server: cloudflare
cf-ray: 894b27dd78fd6519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/app/nel_img/18157

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/app/nel_img/18157 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: image/webp
content-length: 2282
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2675
content-disposition: inline; filename="altushost-xlarge.webp"
vary: Accept
cache-control: public, max-age=2678400
etag: "61e73ce8-a73"
expires: Wed, 17 Jul 2024 13:30:39 GMT
last-modified: Tue, 18 Jan 2022 22:19:20 GMT
cf-cache-status: HIT
age: 73659
accept-ranges: bytes
server: cloudflare
cf-ray: 894b27dd78f96519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/app/nel_img/17815

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/app/nel_img/17815 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: image/webp
content-length: 3220
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=5530
last-modified: Sun, 16 Jun 2024 11:59:04 GMT
vary: Accept
cache-control: public, max-age=2678400
content-security-policy: frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com; script-src-attr 'none' 'report-sample'; form-action 'self' lists.sourceforge.net; script-src 'self' adservice.google.tg adservice.google.com.eg adservice.google.sc adservice.google.com.np adservice.google.nl adservice.google.com.ag adservice.google.com.et adservice.google.be adservice.google.bf *.consentmanager.net adservice.google.so http://*.pro-market.net *.flashtalking.com adservice.google.ga a.fsdn.com adservice.google.com.qa *.adsafeprotected.com adservice.google.fm adservice.google.se adservice.google.es adservice.google.co.za adservice.google.co.ao adservice.google.com.bn *.microsofttranslator.com adservice.google.co.vi j.6sc.co adservice.google.gy adservice.google.gg adservice.google.com.ua adservice.google.com.br adservice.google.mu adservice.google.co.zm adservice.google.com.sg adservice.google.cm adservice.google.com.au adservice.google.com.lb adservice.google.com.bo adservice.google.ki adservice.google.ca adservice.google.ht adservice.google.com.vc adservice.google.de adservice.google.co.ug adservice.google.nu translate.google.cn *.adnxs.com adservice.google.com.pa adservice.google.com.sa adservice.google.com.sv adservice.google.co.ke *.doubleverify.com adservice.google.at adservice.google.rw adservice.google.hn *.recaptcha.net adservice.google.co.ck adservice.google.com.mt adservice.google.com.py adservice.google.ie adservice.google.li adservice.google.com.co adservice.google.com.gt adservice.google.cg adservice.google.ne adservice.google.co.zw *.doubleclick.net adservice.google.dk adservice.google.to adservice.google.com.pk adservice.google.co.bw adservice.google.st adservice.google.bi adservice.google.ae adservice.google.com.jm *.gstatic.cn adservice.google.com.ec *.google.com *.gstatic.com *.trustarc.com adservice.google.mn adservice.google.cv adservice.google.co.cr adservice.google.al adservice.google.co.uk adservice.google.fr adservice.google.com.gi *.licdn.com adservice.google.com.ng adservice.google.co.kr adservice.google.mk adservice.google.com.hk adservice.google.bt adservice.google.com.ar adservice.google.com.pe btloader.com adservice.google.sn adservice.google.tt adservice.google.com.uy adservice.google.kz *.googletagservices.com adservice.google.lu adservice.google.nr adservice.google.com.sb adservice.google.com.ni http://c.sf-syn.com adservice.google.fi adservice.google.mv adservice.google.cz adservice.google.hu adservice.google.com.gh adservice.google.co.mz adservice.google.com.pr adservice.google.me adservice.google.sr adservice.google.sm adservice.google.dz adservice.google.co.nz adservice.google.com.pg adservice.google.mw adservice.google.bs adservice.google.com.mx adservice.google.la adservice.google.ad adservice.google.md recaptcha.net *.googlesyndication.com adservice.google.cd adservice.google.com.na adservice.google.ge adservice.google.com.tw adservice.google.as adservice.google.ro adservice.google.im *.google-analytics.com adservice.google.gl adservice.google.com.my *.s-onetag.com adservice.google.az adservice.google.co.th adservice.google.tm adservice.google.com.ai *.googleadsserving.cn *.script.ac adservice.google.pl adservice.google.mg *.googletagmanager.com adservice.google.com.kw *.4dex.io adservice.google.gm *.sharethrough.com adservice.google.td translate.googleapis.com adservice.google.hr http://b.sf-syn.com adservice.google.gr adservice.google.is adservice.google.je adservice.google.co.id adservice.google.cl adservice.google.com.om ml314.com adservice.google.sk adservice.google.ml adservice.google.com.ly adservice.google.com.kh adservice.google.kg adservice.google.com.af adservice.google.com.ph adservice.google.gt adservice.google.vg adservice.google.cf adservice.google.com.tj adservice.google.ci adservice.google.si adservice.google.no adservice.google.ch adservice.google.co.jp adservice.google.com.bd *.slashdotmedia.com adservice.google.co.il adservice.google.bg adservice.google.lt adservice.google.com.mm adservice.google.iq adservice.google.ws *.crsspxl.com adservice.google.rs adservice.google.com.fj adservice.google.co.ve adservice.google.com.bz adservice.google.tl adservice.google.com.vn *.moatads.com *.microsoft.com adservice.google.tn adservice.google.ee adservice.google.bj adservice.google.com.tr adservice.google.ms adservice.google.co.uz adservice.google.com.cy *.cloudflareinsights.com adservice.google.vu adservice.google.co.ls adservice.google.lv adservice.google.it adservice.google.ru adservice.google.co.in adservice.google.com.cu adservice.google.com.bh adservice.google.dj *.2mdn.net adservice.google.dm adservice.google.ps adservice.google.lk *.lijit.com adservice.google.pt adservice.google.co.tz *.tiny.cloud adservice.google.jo 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; frame-ancestors 'self'; object-src 'none'
expires: Wed, 17 Jul 2024 13:30:39 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
cf-cache-status: HIT
age: 1891
accept-ranges: bytes
server: cloudflare
cf-ray: 894b27dd79016519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/app/nel_img/15395

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/app/nel_img/15395 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=111416
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: W/"662678ad-1b338"
expires: Wed, 17 Jul 2024 13:30:39 GMT
last-modified: Mon, 22 Apr 2024 14:48:13 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 329963
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27dd68ea6519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/app/nel_img/15649

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/app/nel_img/15649 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:39 GMT
content-type: image/webp
content-length: 9742
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=13304
vary: Accept
cache-control: public, max-age=2678400
content-security-policy: frame-ancestors 'self'; object-src 'none'; form-action 'self' lists.sourceforge.net; frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com; script-src-attr 'none' 'report-sample'; upgrade-insecure-requests; script-src 'self' adservice.google.kg adservice.google.co.nz *.consentmanager.net adservice.google.pl *.doubleverify.com adservice.google.tn adservice.google.ms adservice.google.ch adservice.google.com.ni adservice.google.ws adservice.google.cz adservice.google.mg recaptcha.net adservice.google.cv adservice.google.gl adservice.google.ga adservice.google.mk adservice.google.li adservice.google.com.et adservice.google.com.na adservice.google.lk adservice.google.ml adservice.google.co.id adservice.google.sc adservice.google.iq *.trustarc.com http://*.pro-market.net http://c.sf-syn.com translate.google.cn adservice.google.com.sv adservice.google.dm adservice.google.com.tj adservice.google.ie adservice.google.co.th adservice.google.ae *.doubleclick.net http://b.sf-syn.com adservice.google.hn adservice.google.nu adservice.google.com.bh adservice.google.co.ls adservice.google.dk adservice.google.tt adservice.google.lt adservice.google.se adservice.google.be adservice.google.mu adservice.google.so adservice.google.com.gt adservice.google.tg adservice.google.mw *.sharethrough.com adservice.google.gt adservice.google.com.ar adservice.google.com.pa adservice.google.com.ly adservice.google.tm translate.googleapis.com adservice.google.gm adservice.google.com.bd adservice.google.nl adservice.google.to adservice.google.de a.fsdn.com adservice.google.al adservice.google.bf adservice.google.co.za adservice.google.sr adservice.google.nr adservice.google.ca adservice.google.co.mz adservice.google.gg adservice.google.bj adservice.google.cf *.googletagmanager.com *.gstatic.com adservice.google.com.cu adservice.google.mv adservice.google.com.qa *.cloudflareinsights.com adservice.google.gy adservice.google.mn adservice.google.com.pr adservice.google.com.tw adservice.google.lv adservice.google.sn adservice.google.ki adservice.google.com.uy adservice.google.bs adservice.google.com.br adservice.google.com.gh adservice.google.co.ve adservice.google.com.pg adservice.google.vu adservice.google.com.au adservice.google.com.af adservice.google.rs adservice.google.as adservice.google.lu adservice.google.com.bn adservice.google.com.sb adservice.google.com.py adservice.google.co.zw *.googleadsserving.cn adservice.google.co.ug adservice.google.dj adservice.google.md adservice.google.bg adservice.google.co.zm adservice.google.hr adservice.google.pt *.moatads.com adservice.google.com.ai adservice.google.ad adservice.google.ru j.6sc.co adservice.google.cg adservice.google.td adservice.google.gr adservice.google.com.pe adservice.google.ps *.google-analytics.com adservice.google.la adservice.google.co.vi adservice.google.dz adservice.google.com.ua adservice.google.cl adservice.google.fr adservice.google.co.cr *.microsofttranslator.com adservice.google.cm *.4dex.io adservice.google.com.mx *.gstatic.cn adservice.google.com.jm *.crsspxl.com adservice.google.co.uz adservice.google.com.vn adservice.google.kz adservice.google.je adservice.google.st adservice.google.com.ph adservice.google.co.in adservice.google.com.fj *.google.com *.recaptcha.net adservice.google.at adservice.google.com.mm adservice.google.im adservice.google.com.pk adservice.google.com.sg adservice.google.no *.adsafeprotected.com adservice.google.co.bw adservice.google.com.bz adservice.google.com.sa adservice.google.si adservice.google.com.gi adservice.google.ee *.googletagservices.com adservice.google.fm *.microsoft.com adservice.google.hu *.licdn.com *.2mdn.net adservice.google.com.kw adservice.google.com.ec *.slashdotmedia.com adservice.google.com.om adservice.google.vg adservice.google.ne adservice.google.es *.s-onetag.com adservice.google.com.mt adservice.google.com.ag adservice.google.ge adservice.google.bt adservice.google.com.hk adservice.google.sk adservice.google.com.kh adservice.google.co.uk adservice.google.co.il *.googlesyndication.com *.lijit.com adservice.google.it adservice.google.co.ke adservice.google.com.bo *.flashtalking.com adservice.google.bi adservice.google.com.ng adservice.google.co.tz adservice.google.co.jp adservice.google.com.np adservice.google.com.cy ml314.com adservice.google.com.lb adservice.google.sm adservice.google.ci adservice.google.com.my adservice.google.az *.adnxs.com adservice.google.com.tr adservice.google.me adservice.google.jo adservice.google.co.ao adservice.google.com.eg adservice.google.is adservice.google.tl *.script.ac adservice.google.cd adservice.google.ro adservice.google.rw adservice.google.com.vc adservice.google.co.ck *.tiny.cloud adservice.google.ht adservice.google.fi adservice.google.com.co adservice.google.co.kr btloader.com 'unsafe-inline' 'unsafe-eval'
expires: Wed, 17 Jul 2024 13:30:39 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
last-modified: Sun, 16 Jun 2024 13:03:37 GMT
cf-cache-status: HIT
age: 1317
accept-ranges: bytes
server: cloudflare
cf-ray: 894b27dd79066519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/img/sandiego/svg/originals/sf-icon-orange-no_sf.svg

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/img/sandiego/svg/originals/sf-icon-orange-no_sf.svg HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:40 GMT
content-type: image/svg+xml
last-modified: Wed, 07 Mar 2018 12:46:24 GMT
etag: W/"5a9fdf20-526"
expires: Wed, 17 Jul 2024 13:30:40 GMT
cache-control: public, max-age=2678400
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 208820
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27e3da706519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/lib/big-text.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/lib/big-text.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:23 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=9812
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: W/"5a9fdf20-2654"
expires: Wed, 17 Jul 2024 13:31:23 GMT
last-modified: Wed, 07 Mar 2018 12:46:24 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 330038
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b28f2bf7a6519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/min/sf.sandiego-project.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/min/sf.sandiego-project.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:23 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=122856
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: W/"6669d948-1dfe8"
expires: Wed, 17 Jul 2024 13:31:23 GMT
last-modified: Wed, 12 Jun 2024 17:22:16 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 330038
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b28f2df976519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/app/nel_img/18237

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/app/nel_img/18237 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:24 GMT
content-type: application/javascript
last-modified: Thu, 20 Jan 2022 20:46:35 GMT
etag: W/"61e9ca2b-a70e"
expires: Wed, 17 Jul 2024 13:31:24 GMT
cache-control: public, max-age=2678400
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 330039
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b28f31fe56519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/sandiego/vendor/owl.carousel.min.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/sandiego/vendor/owl.carousel.min.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:24 GMT
content-type: image/webp
content-length: 3220
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=5530
last-modified: Sun, 16 Jun 2024 12:22:28 GMT
vary: Accept
cache-control: public, max-age=2678400
content-security-policy: script-src 'self' adservice.google.gy *.google-analytics.com adservice.google.rs adservice.google.nr adservice.google.com.gt *.adnxs.com adservice.google.me adservice.google.si *.trustarc.com adservice.google.com.bz adservice.google.co.cr adservice.google.co.uz adservice.google.ee adservice.google.so adservice.google.kz adservice.google.com.my *.sharethrough.com *.gstatic.com adservice.google.de adservice.google.mv adservice.google.co.nz adservice.google.ie adservice.google.no adservice.google.com.co adservice.google.vg adservice.google.com.fj adservice.google.com.tw *.adsafeprotected.com *.microsoft.com adservice.google.com.ng adservice.google.ht adservice.google.cg adservice.google.co.za adservice.google.fm adservice.google.com.qa adservice.google.com.tj adservice.google.md adservice.google.com.kw adservice.google.bf adservice.google.co.ke adservice.google.co.il adservice.google.rw adservice.google.az adservice.google.co.bw adservice.google.com.cu a.fsdn.com adservice.google.com.kh adservice.google.cf adservice.google.tm adservice.google.dz adservice.google.mu adservice.google.co.ck adservice.google.com.ua adservice.google.tt *.s-onetag.com adservice.google.lv adservice.google.com.ni translate.googleapis.com adservice.google.ws adservice.google.bt adservice.google.co.mz adservice.google.hn adservice.google.com.au *.script.ac adservice.google.pl adservice.google.com.sb adservice.google.com.bd adservice.google.kg adservice.google.com.gh adservice.google.com.lb adservice.google.ch *.doubleverify.com adservice.google.hr adservice.google.at adservice.google.gm adservice.google.co.ug adservice.google.as translate.google.cn adservice.google.co.tz *.4dex.io adservice.google.im http://*.pro-market.net adservice.google.cl adservice.google.cm adservice.google.dm adservice.google.ge adservice.google.es adservice.google.cv btloader.com adservice.google.st *.googleadsserving.cn adservice.google.it adservice.google.mn adservice.google.co.ve adservice.google.com.hk adservice.google.bi adservice.google.pt adservice.google.com.et adservice.google.co.uk adservice.google.hu adservice.google.com.gi adservice.google.com.tr adservice.google.ml adservice.google.com.af adservice.google.co.jp adservice.google.com.py adservice.google.gg adservice.google.nl *.flashtalking.com adservice.google.ae recaptcha.net *.lijit.com adservice.google.fi adservice.google.com.ar adservice.google.co.ls *.doubleclick.net adservice.google.com.vc *.recaptcha.net adservice.google.ms adservice.google.com.pk adservice.google.mk adservice.google.com.pg adservice.google.bj adservice.google.com.ec adservice.google.co.id adservice.google.cz http://c.sf-syn.com adservice.google.com.sg adservice.google.lu adservice.google.ne adservice.google.dj adservice.google.ro adservice.google.com.ly adservice.google.lk adservice.google.ci adservice.google.ad adservice.google.fr *.cloudflareinsights.com adservice.google.bs adservice.google.com.pe adservice.google.com.na *.licdn.com adservice.google.se adservice.google.iq adservice.google.ru adservice.google.tg adservice.google.je adservice.google.com.sa adservice.google.com.jm adservice.google.sm adservice.google.co.th adservice.google.vu adservice.google.gr adservice.google.is adservice.google.dk adservice.google.com.np adservice.google.com.mt adservice.google.com.pr adservice.google.sc adservice.google.com.cy adservice.google.com.uy adservice.google.ga adservice.google.tn adservice.google.com.bo adservice.google.com.ag adservice.google.co.zw adservice.google.com.eg *.slashdotmedia.com *.gstatic.cn adservice.google.co.kr *.googletagservices.com adservice.google.co.in adservice.google.nu adservice.google.la adservice.google.ps adservice.google.sk *.moatads.com adservice.google.com.mm adservice.google.al adservice.google.com.ai *.google.com adservice.google.lt adservice.google.be j.6sc.co adservice.google.com.sv *.crsspxl.com adservice.google.li adservice.google.co.ao adservice.google.sn adservice.google.com.vn adservice.google.jo adservice.google.gl adservice.google.tl adservice.google.td ml314.com adservice.google.co.zm adservice.google.sr adservice.google.to adservice.google.com.bh *.googletagmanager.com *.microsofttranslator.com adservice.google.com.bn adservice.google.gt adservice.google.ca adservice.google.com.om adservice.google.mw *.tiny.cloud http://b.sf-syn.com *.consentmanager.net adservice.google.mg adservice.google.ki adservice.google.com.br adservice.google.com.pa adservice.google.co.vi *.2mdn.net adservice.google.com.mx adservice.google.bg adservice.google.cd *.googlesyndication.com adservice.google.com.ph 'unsafe-inline' 'unsafe-eval'; object-src 'none'; script-src-attr 'none' 'report-sample'; form-action 'self' lists.sourceforge.net; upgrade-insecure-requests; frame-ancestors 'self'; frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com
expires: Wed, 17 Jul 2024 13:31:24 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
cf-cache-status: HIT
age: 531
accept-ranges: bytes
server: cloudflare
cf-ray: 894b28f31fdf6519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/sandiego/vendor/featherlight.min.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/sandiego/vendor/featherlight.min.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:24 GMT
content-type: application/javascript
last-modified: Wed, 07 Mar 2018 12:46:24 GMT
etag: W/"5a9fdf20-ca5"
expires: Wed, 17 Jul 2024 13:31:24 GMT
cache-control: public, max-age=2678400
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 330039
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b28f31fea6519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/sandiego/vendor/featherlight.gallery.min.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/sandiego/vendor/featherlight.gallery.min.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:24 GMT
content-type: application/javascript
last-modified: Wed, 07 Mar 2018 12:46:24 GMT
etag: W/"5a9fdf20-21c0"
expires: Wed, 17 Jul 2024 13:31:24 GMT
cache-control: public, max-age=2678400
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 330039
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b28f31fe86519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/app/proj/autokeyboardpresser/screenshots/Autosofted_Key_Presser.png/245/183/1

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/app/proj/autokeyboardpresser/screenshots/Autosofted_Key_Presser.png/245/183/1 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:24 GMT
content-type: image/webp
content-length: 20652
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=26167
vary: Accept
cache-control: public, max-age=2678400
content-security-policy: frame-ancestors 'self'; frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com; script-src-attr 'none' 'report-sample'; upgrade-insecure-requests; object-src 'none'; script-src 'self' adservice.google.ht adservice.google.com.cu adservice.google.com.ag adservice.google.com.au adservice.google.fr adservice.google.com.sb adservice.google.com.kw adservice.google.li adservice.google.com.af adservice.google.fm adservice.google.vu adservice.google.ci http://b.sf-syn.com adservice.google.com.qa adservice.google.com.py adservice.google.com.na adservice.google.rw adservice.google.sr adservice.google.com.mm adservice.google.com.fj adservice.google.ae adservice.google.ro adservice.google.ie adservice.google.ms a.fsdn.com adservice.google.vg *.crsspxl.com adservice.google.com.np adservice.google.co.kr adservice.google.is adservice.google.tt adservice.google.td *.gstatic.cn adservice.google.at *.googlesyndication.com adservice.google.bt adservice.google.co.uz adservice.google.com.ua adservice.google.mu adservice.google.com.sa adservice.google.cv adservice.google.mg *.recaptcha.net adservice.google.com.bz adservice.google.com.co *.microsoft.com adservice.google.co.bw adservice.google.ne adservice.google.com.ng adservice.google.iq adservice.google.co.ao adservice.google.co.mz adservice.google.tg adservice.google.dj adservice.google.hn adservice.google.gl adservice.google.md adservice.google.be adservice.google.st adservice.google.bj adservice.google.cz adservice.google.se adservice.google.co.ls *.slashdotmedia.com adservice.google.com.uy adservice.google.so adservice.google.nr adservice.google.je adservice.google.com.bh adservice.google.bf adservice.google.com.mx adservice.google.co.th adservice.google.gy adservice.google.com.tj adservice.google.kg *.microsofttranslator.com http://*.pro-market.net adservice.google.sc *.licdn.com adservice.google.hu translate.google.cn *.adsafeprotected.com adservice.google.jo adservice.google.com.cy adservice.google.com.gt adservice.google.ru adservice.google.pl adservice.google.al adservice.google.dk adservice.google.co.ke adservice.google.com.mt adservice.google.bi *.flashtalking.com adservice.google.kz *.doubleclick.net adservice.google.nu adservice.google.co.tz adservice.google.bg adservice.google.fi adservice.google.com.om adservice.google.gr btloader.com adservice.google.pt adservice.google.com.sv adservice.google.com.pg adservice.google.gg adservice.google.com.tr adservice.google.com.vn adservice.google.tm *.lijit.com *.doubleverify.com adservice.google.co.id adservice.google.tl adservice.google.cg adservice.google.com.ai adservice.google.com.hk adservice.google.cl adservice.google.ws adservice.google.cm adservice.google.co.ug translate.googleapis.com j.6sc.co adservice.google.co.za adservice.google.cf *.cloudflareinsights.com adservice.google.com.sg adservice.google.co.ve adservice.google.ad adservice.google.mn ml314.com adservice.google.lt *.moatads.com *.googleadsserving.cn *.s-onetag.com adservice.google.co.il *.googletagservices.com adservice.google.com.et adservice.google.ca *.4dex.io *.google-analytics.com adservice.google.com.pe adservice.google.com.lb adservice.google.co.uk adservice.google.mk *.gstatic.com adservice.google.com.ni *.googletagmanager.com adservice.google.rs adservice.google.co.cr adservice.google.to adservice.google.gm adservice.google.as adservice.google.lv adservice.google.co.zw adservice.google.ee adservice.google.ps adservice.google.de adservice.google.co.zm adservice.google.la adservice.google.ki adservice.google.cd adservice.google.com.my adservice.google.ga *.adnxs.com adservice.google.com.eg adservice.google.it adservice.google.com.pr adservice.google.com.vc adservice.google.co.ck *.google.com adservice.google.hr adservice.google.mv adservice.google.dz adservice.google.com.gh adservice.google.ch adservice.google.bs http://c.sf-syn.com *.script.ac adservice.google.com.ph adservice.google.com.bn adservice.google.sk recaptcha.net adservice.google.com.jm adservice.google.me adservice.google.dm adservice.google.ge adservice.google.lu adservice.google.im adservice.google.co.nz adservice.google.com.bo adservice.google.com.pk adservice.google.com.gi adservice.google.co.jp adservice.google.no adservice.google.es *.2mdn.net adservice.google.nl adservice.google.mw adservice.google.sm adservice.google.com.bd *.sharethrough.com adservice.google.sn adservice.google.com.ec adservice.google.az adservice.google.com.kh adservice.google.com.br adservice.google.com.tw adservice.google.lk adservice.google.gt adservice.google.co.in *.trustarc.com adservice.google.com.pa adservice.google.com.ar adservice.google.tn *.consentmanager.net adservice.google.si adservice.google.com.ly adservice.google.ml adservice.google.co.vi *.tiny.cloud 'unsafe-inline' 'unsafe-eval'; form-action 'self' lists.sourceforge.net
expires: Wed, 17 Jul 2024 13:31:24 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
last-modified: Thu, 13 Jun 2024 08:40:56 GMT
cf-cache-status: HIT
age: 181561
accept-ranges: bytes
server: cloudflare
cf-ray: 894b28f3d8cb6519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/images/sandiego/sf-icon-black.svg

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/images/sandiego/sf-icon-black.svg HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:40 GMT
content-type: image/svg+xml
last-modified: Tue, 29 Nov 2022 21:50:12 GMT
etag: W/"63867e94-9f5"
expires: Wed, 17 Jul 2024 13:31:40 GMT
cache-control: public, max-age=2678400
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 161853
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b295798546519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/app/syndication/badge_img_direct/oss-open-source-excellence/oss-open-source-excellence/?variant_id=sf

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/app/syndication/badge_img_direct/oss-open-source-excellence/oss-open-source-excellence/?variant_id=sf HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:40 GMT
content-type: image/webp
content-length: 9100
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=15457
vary: Accept
cache-control: public, max-age=2678400
content-security-policy: script-src 'self' adservice.google.co.il adservice.google.com.sg a.fsdn.com adservice.google.dz adservice.google.com.sb adservice.google.com.pg adservice.google.com.gi adservice.google.me adservice.google.com.ng adservice.google.ms adservice.google.com.cu adservice.google.co.vi adservice.google.com.ai adservice.google.com.bo adservice.google.fm adservice.google.ch adservice.google.co.bw adservice.google.com.pe recaptcha.net *.adsafeprotected.com adservice.google.com.kw adservice.google.lu adservice.google.com.sv adservice.google.ro j.6sc.co adservice.google.com.vc adservice.google.com.tj adservice.google.gr adservice.google.it adservice.google.ru adservice.google.iq *.microsofttranslator.com adservice.google.com.bz adservice.google.com.br adservice.google.com.sa adservice.google.md adservice.google.com.my *.script.ac adservice.google.sr adservice.google.com.gh adservice.google.co.jp adservice.google.com.et *.licdn.com adservice.google.co.mz adservice.google.co.ug adservice.google.ae *.gstatic.com adservice.google.si adservice.google.com.na *.gstatic.cn adservice.google.tl *.adnxs.com adservice.google.dk adservice.google.as adservice.google.cg adservice.google.com.ar *.doubleverify.com adservice.google.com.bh *.lijit.com adservice.google.co.nz adservice.google.com.ly adservice.google.co.za *.recaptcha.net adservice.google.co.ke adservice.google.com.af adservice.google.gl *.consentmanager.net adservice.google.sc adservice.google.co.tz adservice.google.com.uy adservice.google.gy adservice.google.com.mm adservice.google.bg adservice.google.nu *.2mdn.net adservice.google.ws adservice.google.co.th adservice.google.li adservice.google.cf *.tiny.cloud *.google.com http://*.pro-market.net *.microsoft.com adservice.google.com.tw adservice.google.nl http://c.sf-syn.com adservice.google.com.ua adservice.google.co.ve adservice.google.ee adservice.google.mg adservice.google.gt adservice.google.jo adservice.google.lt adservice.google.co.id adservice.google.com.au adservice.google.de adservice.google.mk *.crsspxl.com adservice.google.co.zw *.slashdotmedia.com adservice.google.com.qa adservice.google.co.uk adservice.google.com.py adservice.google.com.vn btloader.com adservice.google.com.pr adservice.google.cl adservice.google.ad adservice.google.com.om translate.googleapis.com *.googletagservices.com adservice.google.ne *.doubleclick.net adservice.google.ht *.googlesyndication.com adservice.google.kg adservice.google.dj adservice.google.bf adservice.google.gg adservice.google.no adservice.google.ml adservice.google.so adservice.google.to adservice.google.com.ph *.googleadsserving.cn adservice.google.co.in adservice.google.pl adservice.google.com.bd translate.google.cn adservice.google.com.co adservice.google.je adservice.google.ie adservice.google.com.jm adservice.google.mw adservice.google.ge adservice.google.ps adservice.google.mu adservice.google.hu ml314.com adservice.google.bi adservice.google.is adservice.google.st adservice.google.sn adservice.google.se adservice.google.pt adservice.google.kz adservice.google.mv *.flashtalking.com adservice.google.co.ao adservice.google.be adservice.google.sk adservice.google.co.ls adservice.google.ga adservice.google.cz *.s-onetag.com adservice.google.gm adservice.google.rs adservice.google.com.tr adservice.google.lv *.sharethrough.com adservice.google.com.pa adservice.google.ca *.googletagmanager.com adservice.google.co.cr adservice.google.com.lb *.google-analytics.com adservice.google.com.eg adservice.google.com.cy adservice.google.com.np adservice.google.cm adservice.google.fr adservice.google.lk adservice.google.nr adservice.google.co.ck adservice.google.co.uz adservice.google.co.zm adservice.google.com.mx *.moatads.com adservice.google.es adservice.google.hr adservice.google.dm adservice.google.cv http://b.sf-syn.com *.trustarc.com *.cloudflareinsights.com adservice.google.az adservice.google.la adservice.google.com.ni adservice.google.tm adservice.google.mn adservice.google.cd adservice.google.ki adservice.google.com.mt adservice.google.com.fj adservice.google.at adservice.google.com.hk adservice.google.tg adservice.google.vg adservice.google.com.ec adservice.google.vu adservice.google.co.kr adservice.google.com.kh adservice.google.com.ag adservice.google.bj adservice.google.com.pk adservice.google.im adservice.google.rw adservice.google.td adservice.google.tt adservice.google.com.gt adservice.google.fi adservice.google.ci adservice.google.al adservice.google.tn adservice.google.sm adservice.google.hn adservice.google.bt *.4dex.io adservice.google.com.bn adservice.google.bs 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; object-src 'none'; script-src-attr 'none' 'report-sample'; frame-ancestors 'self'; form-action 'self' lists.sourceforge.net; frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com
expires: Wed, 17 Jul 2024 13:31:40 GMT
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-ua-compatible: IE=edge,chrome=1
last-modified: Sun, 16 Jun 2024 12:53:50 GMT
cf-cache-status: HIT
age: 614
accept-ranges: bytes
server: cloudflare
cf-ray: 894b2958297d6519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/app/nel_img/17759

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/app/nel_img/17759 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:40 GMT
content-type: image/svg+xml; charset=utf-8
x-ua-compatible: IE=edge,chrome=1
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
x-frame-options: SAMEORIGIN
content-security-policy: script-src 'self' adservice.google.cv adservice.google.lv adservice.google.com.eg adservice.google.vg adservice.google.st adservice.google.no *.flashtalking.com adservice.google.com.ar adservice.google.ki *.2mdn.net adservice.google.bg adservice.google.mu adservice.google.com.np adservice.google.com.cy adservice.google.com.gi *.google.com adservice.google.cz adservice.google.com.mm adservice.google.so *.moatads.com adservice.google.com.vn adservice.google.co.id adservice.google.kg adservice.google.pl adservice.google.mn adservice.google.co.mz *.tiny.cloud adservice.google.is adservice.google.gl adservice.google.gr *.crsspxl.com adservice.google.co.jp adservice.google.com.gh adservice.google.si adservice.google.mg adservice.google.com.br adservice.google.co.ug adservice.google.ge *.trustarc.com adservice.google.az adservice.google.mw adservice.google.com.pk http://b.sf-syn.com adservice.google.hr adservice.google.gt adservice.google.co.ke adservice.google.co.nz adservice.google.dk adservice.google.com.vc adservice.google.com.au adservice.google.com.ly adservice.google.gy *.lijit.com adservice.google.co.ls adservice.google.com.tj adservice.google.co.ve adservice.google.co.zm adservice.google.com.co adservice.google.tm adservice.google.rw adservice.google.co.il adservice.google.to adservice.google.com.uy adservice.google.gm adservice.google.co.ck adservice.google.mk *.google-analytics.com adservice.google.com.tw adservice.google.com.gt ml314.com adservice.google.com.ni http://*.pro-market.net adservice.google.hu adservice.google.com.pa adservice.google.fr adservice.google.de adservice.google.ws adservice.google.rs adservice.google.co.za adservice.google.co.uk adservice.google.la adservice.google.com.pr adservice.google.com.ai adservice.google.com.lb adservice.google.com.bh adservice.google.co.bw adservice.google.cg *.4dex.io adservice.google.im *.adnxs.com adservice.google.nr adservice.google.com.et *.s-onetag.com adservice.google.bf adservice.google.gg adservice.google.co.ao adservice.google.pt adservice.google.sr *.consentmanager.net adservice.google.bj http://c.sf-syn.com adservice.google.com.ag adservice.google.ci adservice.google.ht adservice.google.tg adservice.google.ca adservice.google.ae adservice.google.com.ng adservice.google.com.pe adservice.google.co.kr adservice.google.sm *.gstatic.com adservice.google.vu *.slashdotmedia.com *.licdn.com adservice.google.fi adservice.google.nu adservice.google.com.fj *.googleadsserving.cn adservice.google.tl adservice.google.jo adservice.google.ga adservice.google.sc adservice.google.al *.doubleverify.com adservice.google.com.na adservice.google.co.in adservice.google.ru adservice.google.ch adservice.google.it adservice.google.at j.6sc.co adservice.google.com.cu adservice.google.com.kw recaptcha.net adservice.google.es adservice.google.je adservice.google.sk adservice.google.co.tz adservice.google.iq adservice.google.tn adservice.google.li translate.google.cn adservice.google.com.ua *.recaptcha.net adservice.google.dz btloader.com adservice.google.com.jm adservice.google.bs adservice.google.dj adservice.google.com.sb *.googletagmanager.com *.gstatic.cn adservice.google.md adservice.google.com.bo adservice.google.ne adservice.google.cl *.microsoft.com adservice.google.lk adservice.google.td adservice.google.com.mt *.adsafeprotected.com adservice.google.co.zw *.cloudflareinsights.com adservice.google.co.th adservice.google.com.af adservice.google.bt adservice.google.com.pg adservice.google.mv adservice.google.cm a.fsdn.com adservice.google.hn adservice.google.fm adservice.google.com.hk adservice.google.ro adservice.google.com.my adservice.google.lu adservice.google.co.vi adservice.google.com.py *.doubleclick.net adservice.google.com.sg adservice.google.kz adservice.google.sn adservice.google.co.uz adservice.google.com.qa *.sharethrough.com adservice.google.com.sa adservice.google.dm *.microsofttranslator.com adservice.google.se adservice.google.com.kh adservice.google.as adservice.google.com.sv adservice.google.com.ec adservice.google.com.mx adservice.google.co.cr adservice.google.me adservice.google.com.bd adservice.google.nl adservice.google.com.bn adservice.google.cf adservice.google.ad adservice.google.lt adservice.google.com.ph adservice.google.com.om adservice.google.com.tr *.googletagservices.com adservice.google.com.bz *.googlesyndication.com adservice.google.be translate.googleapis.com adservice.google.ie adservice.google.ee adservice.google.bi adservice.google.ml adservice.google.tt adservice.google.cd adservice.google.ms adservice.google.ps *.script.ac 'unsafe-inline' 'unsafe-eval'; script-src-attr 'none' 'report-sample'; frame-ancestors 'self'; object-src 'none'; frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com; upgrade-insecure-requests; form-action 'self' lists.sourceforge.net
x-content-type-options: nosniff
expires: Wed, 17 Jul 2024 13:31:40 GMT
cache-control: public, max-age=2678400
last-modified: Sun, 16 Jun 2024 10:23:30 GMT
cf-cache-status: HIT
age: 7374
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b295829796519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/img/sandiego/svg/originals/sf_star_yellow.svg?1718214373

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/img/sandiego/svg/originals/sf_star_yellow.svg?1718214373 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://a.fsdn.com/con/css/sandiego.css?1718214368
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:40 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Jul 2021 18:27:03 GMT
etag: W/"60f5c3f7-236"
expires: Wed, 17 Jul 2024 13:31:40 GMT
cache-control: public, max-age=2678400
access-control-allow-origin: *
timing-allow-origin: *
cf-cache-status: HIT
age: 330023
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b295859c66519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/js/min/sf.sandiego-foundation-tooltip.js?1718214368

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/js/min/sf.sandiego-foundation-tooltip.js?1718214368 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:40 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=15737
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: W/"61e5a4f6-3d79"
expires: Wed, 17 Jul 2024 13:31:40 GMT
last-modified: Mon, 17 Jan 2022 17:18:46 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 330023
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b295879eb6519-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/allura/p/akp/icon?1457413254

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /allura/p/akp/icon?1457413254 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:40 GMT
content-type: image/gif
cache-control: public, max-age=2678400
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1008, status=webp_bigger
content-security-policy: frame-src 'self' *.sf-syn.com *.google.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net www.youtube-nocookie.com *.youtube.com *.stripe.com *.plaid.com *.prosperstack.com *.consentmanager.net; upgrade-insecure-requests; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; script-src 'self' a.fsdn.com *.sf-syn.com *.slashdotmedia.com ml314.com *.cloudflareinsights.com *.doubleclick.net *.google.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.consentmanager.net *.microsofttranslator.com *.googleapis.com cdn.mxpnl.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src-attr 'none' 'report-sample'
etag: "akp.gif?2015-06-09 11:50:57+00:00"
expires: Wed, 17 Jul 2024 13:31:40 GMT
feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; document-domain 'none'; display 'none'; autoplay 'none'
last-modified: Tue, 09 Jun 2015 11:50:57 GMT
permissions-policy: microphone=(), geolocation=(), camera=(), document-domain=(), display-capture=(), autoplay=()
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 72955
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b2958fa796519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/allura/p/autokeypresser/icon?1599238178

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /allura/p/autokeypresser/icon?1599238178 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:40 GMT
content-type: image/webp
cache-control: public, max-age=2678400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=5041
content-security-policy: report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; form-action 'self'; object-src 'none'; script-src 'self' a.fsdn.com *.sf-syn.com *.slashdotmedia.com ml314.com *.cloudflareinsights.com *.doubleclick.net *.google.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.consentmanager.net *.microsofttranslator.com *.googleapis.com cdn.mxpnl.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; frame-src 'self' *.sf-syn.com *.google.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net www.youtube-nocookie.com *.youtube.com *.stripe.com *.plaid.com *.prosperstack.com *.consentmanager.net; upgrade-insecure-requests; frame-ancestors 'self'; script-src-attr 'none' 'report-sample'
etag: "championify logo.png?2017-02-07 22:48:53+00:00"
expires: Wed, 17 Jul 2024 13:31:40 GMT
feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; document-domain 'none'; display 'none'; autoplay 'none'
last-modified: Tue, 07 Feb 2017 22:48:53 GMT
permissions-policy: microphone=(), geolocation=(), camera=(), document-domain=(), display-capture=(), autoplay=()
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 71960
server: cloudflare
cf-ray: 894b2958fa7f6519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/allura/p/get-automouser/icon?1472139305

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /allura/p/get-automouser/icon?1472139305 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:40 GMT
content-type: image/webp
cache-control: public, max-age=2678400
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3355
content-security-policy: script-src-attr 'none' 'report-sample'; script-src 'self' a.fsdn.com *.sf-syn.com *.slashdotmedia.com ml314.com *.cloudflareinsights.com *.doubleclick.net *.google.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.consentmanager.net *.microsofttranslator.com *.googleapis.com cdn.mxpnl.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; form-action 'self'; object-src 'none'; upgrade-insecure-requests; frame-ancestors 'self'; frame-src 'self' *.sf-syn.com *.google.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net www.youtube-nocookie.com *.youtube.com *.stripe.com *.plaid.com *.prosperstack.com *.consentmanager.net; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce
etag: "letter-a-icon.png?2015-09-14 17:37:27+00:00"
expires: Wed, 17 Jul 2024 13:31:40 GMT
feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; document-domain 'none'; display 'none'; autoplay 'none'
last-modified: Mon, 14 Sep 2015 17:37:27 GMT
permissions-policy: microphone=(), geolocation=(), camera=(), document-domain=(), display-capture=(), autoplay=()
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 83908
server: cloudflare
cf-ray: 894b2958fa7b6519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/allura/mirror/championify/icon?1659701229?&w=48

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /allura/mirror/championify/icon?1659701229?&w=48 HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:40 GMT
content-type: image/webp
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2888
vary: Accept
content-security-policy: script-src 'self' a.fsdn.com *.sf-syn.com *.slashdotmedia.com ml314.com *.cloudflareinsights.com *.doubleclick.net *.google.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.consentmanager.net *.microsofttranslator.com *.googleapis.com cdn.mxpnl.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; object-src 'none'; frame-src 'self' *.sf-syn.com *.google.com *.googlesyndication.com *.safeframe.usercontent.goog *.googletagmanager.com *.doubleclick.net *.recaptcha.net recaptcha.net www.youtube-nocookie.com *.youtube.com *.stripe.com *.plaid.com *.prosperstack.com *.consentmanager.net; form-action 'self'; script-src-attr 'none' 'report-sample'; frame-ancestors 'self'; upgrade-insecure-requests; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce
etag: "icon.png?2013-02-25 09:08:22+00:00"
expires: Wed, 17 Jul 2024 13:31:40 GMT
feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; document-domain 'none'; display 'none'; autoplay 'none'
last-modified: Mon, 25 Feb 2013 09:08:22 GMT
permissions-policy: microphone=(), geolocation=(), camera=(), document-domain=(), display-capture=(), autoplay=()
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 241017
cache-control: public, max-age=2678400
server: cloudflare
cf-ray: 894b2958fa7e6519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/allura/u/pyxxys/user_icon

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /allura/u/pyxxys/user_icon HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:40 GMT
content-type: image/jpeg
cf-bgj: imgq:100,h2pri
cf-polished: origSize=1330
content-security-policy: frame-ancestors 'self'; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; object-src 'none'; script-src-attr 'none' 'report-sample'; form-action 'self'; upgrade-insecure-requests; script-src 'self' a.fsdn.com *.sf-syn.com *.slashdotmedia.com ml314.com *.cloudflareinsights.com *.doubleclick.net *.google.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.consentmanager.net *.microsofttranslator.com *.googleapis.com cdn.mxpnl.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; frame-src 'self' *.sf-syn.com *.google.com *.googlesyndication.com *.safeframe.usercontent.goog *.googletagmanager.com *.doubleclick.net *.recaptcha.net recaptcha.net www.youtube-nocookie.com *.youtube.com *.stripe.com *.plaid.com *.prosperstack.com *.consentmanager.net
etag: "Autosofted_icon.jpg?2014-03-18 16:23:11+00:00"
expires: Wed, 17 Jul 2024 13:31:40 GMT
feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; document-domain 'none'; display 'none'; autoplay 'none'
last-modified: Tue, 18 Mar 2014 16:23:11 GMT
permissions-policy: microphone=(), geolocation=(), camera=(), document-domain=(), display-capture=(), autoplay=()
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, follow
cf-cache-status: HIT
age: 192052
cache-control: public, max-age=2678400
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b295b3d836519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/allura/u/autosofted/user_icon

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /allura/u/autosofted/user_icon HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 302

date: Sun, 16 Jun 2024 13:31:41 GMT
content-type: text/html; charset=UTF-8
location: https://a.fsdn.com/con/images/sandiego/icons/default-avatar.png
cache-control: no-cache
pragma: no-cache
x-robots-tag: noindex, follow
content-security-policy: form-action 'self'; frame-src 'self' *.sf-syn.com *.google.com *.googlesyndication.com *.safeframe.usercontent.goog *.googletagmanager.com *.doubleclick.net *.recaptcha.net recaptcha.net www.youtube-nocookie.com *.youtube.com *.stripe.com *.plaid.com *.prosperstack.com *.consentmanager.net; object-src 'none'; script-src-attr 'none' 'report-sample'; script-src 'self' a.fsdn.com *.sf-syn.com *.slashdotmedia.com ml314.com *.cloudflareinsights.com *.doubleclick.net *.google.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com *.googletagservices.com *.consentmanager.net *.microsofttranslator.com *.googleapis.com cdn.mxpnl.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; frame-ancestors 'self'; upgrade-insecure-requests; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce
permissions-policy: microphone=(), geolocation=(), camera=(), document-domain=(), display-capture=(), autoplay=()
feature-policy: microphone 'none'; geolocation 'none'; camera 'none'; document-domain 'none'; display 'none'; autoplay 'none'
set-cookie: VISITOR=94a5e69e-7cdb-4268-9f5e-81567fd9b660; Max-Age=315360000; Path=/; expires=Wed, 14-Jun-2034 13:31:41 GMT; secure; HttpOnly
set-cookie: _session_id=e0d98b3c83a695d491ef516d6ec2ac246a3a51220d7e7177fc9681e0982349af3616460d620e9080; secure; SameSite=Strict; Path=/
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b295b3d816519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://a.fsdn.com/con/images/sandiego/icons/default-avatar.png

msedge.exe

Remote address:

104.18.40.209:443

Request

GET /con/images/sandiego/icons/default-avatar.png HTTP/2.0
host: a.fsdn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:31:41 GMT
content-type: image/webp
content-length: 762
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=881
content-disposition: inline; filename="default-avatar.webp"
vary: Accept
access-control-allow-origin: *
cache-control: public, max-age=2678400
etag: "61e73ced-371"
expires: Wed, 17 Jul 2024 13:31:41 GMT
last-modified: Tue, 18 Jan 2022 22:19:25 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 504800
accept-ranges: bytes
server: cloudflare
cf-ray: 894b295e193d6519-LHR
alt-svc: h3=":443"; ma=86400
GET

https://cdn.consentmanager.net/delivery/js/cmp_en.min.js

msedge.exe

Remote address:

89.187.167.5:443

Request

GET /delivery/js/cmp_en.min.js HTTP/2.0
host: cdn.consentmanager.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:40 GMT
content-type: application/javascript
last-modified: Wed, 05 Jun 2024 12:59:57 GMT
etag: W/"692db-61a2424b12d40"
cache-control: max-age=86400
expires: Thu, 06 Jun 2024 13:41:06 GMT
edge-control: max-age=86400
x-77-nzt: EwwBWbunAQH3BE8BAAwBuUwKDAH3+iEBAAwBJRPCNAH3AAAAAA
x-77-nzt-ray: 9a26d7269054084900e96e66ac56d700
x-accel-expires: @1718545276
x-accel-date: 1718458876
x-77-cache: HIT
x-77-age: 85764
vary: Accept-Encoding
content-encoding: gzip
server: CDN77-Turbo
x-accel-date-max: 1717669100
x-cache: HIT
x-age: 85764
x-77-pop: londonGB
GET

https://cdn.consentmanager.net/delivery/customdata/bV8xLndfMTEzMTkucl9HRFBSLmxfZW4uZF8yNDkyLnhfMTEudi5wLnRfMjQ5Mi54dF8zMw.js

msedge.exe

Remote address:

89.187.167.5:443

Request

GET /delivery/customdata/bV8xLndfMTEzMTkucl9HRFBSLmxfZW4uZF8yNDkyLnhfMTEudi5wLnRfMjQ5Mi54dF8zMw.js HTTP/2.0
host: cdn.consentmanager.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:40 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
x-xss-protection: 0
expires: Sun, 16 Jun 2024 13:54:00 GMT
cache-control: public, max-age=1800
edge-control: public, max-age=1800
last-modified: Sun, 16 Jun 2024 13:24:00 GMT
x-77-nzt: EwwBWbunAQH3jQEAAAwBuUwKCQH3AwAAAAwB1GY4EQH3AAAAAA
x-77-nzt-ray: 9a26d7269054084900e96e6660e9ec16
x-accel-expires: @1718546040
x-accel-date: 1718544243
x-77-cache: HIT
x-77-age: 397
vary: Accept-Encoding
content-encoding: gzip
server: CDN77-Turbo
x-accel-date-max: 1718544243
x-cache: HIT
x-age: 397
x-77-pop: londonGB
GET

https://c.sf-syn.com/conversion_outbound_tracker/sf

msedge.exe

Remote address:

104.18.33.97:443

Request

GET /conversion_outbound_tracker/sf HTTP/2.0
host: c.sf-syn.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sun, 16 Jun 2024 13:30:40 GMT
content-type: text/html; charset=utf-8
x-ua-compatible: IE=edge,chrome=1
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
content-security-policy: object-src 'none'; script-src 'self' adservice.google.cl adservice.google.com.br *.cloudflareinsights.com adservice.google.tm *.tiny.cloud adservice.google.sr *.adnxs.com *.doubleverify.com adservice.google.com.gi adservice.google.ee adservice.google.co.uz adservice.google.bi adservice.google.com.uy adservice.google.je adservice.google.com.lb adservice.google.im adservice.google.hu *.googleadsserving.cn adservice.google.com.cy *.slashdotmedia.com adservice.google.ch adservice.google.com.cu adservice.google.com.mx adservice.google.ru adservice.google.com.vn adservice.google.dz adservice.google.com.np adservice.google.gg adservice.google.cz adservice.google.com.ph adservice.google.ml adservice.google.md adservice.google.com.ni adservice.google.ws adservice.google.se adservice.google.rw adservice.google.bg adservice.google.lk adservice.google.iq *.4dex.io adservice.google.gl adservice.google.nu adservice.google.jo adservice.google.com.bn adservice.google.com.af *.licdn.com *.2mdn.net adservice.google.co.ug adservice.google.de adservice.google.ms adservice.google.com.mt adservice.google.com.sg translate.google.cn adservice.google.com.pg adservice.google.ci adservice.google.co.ck adservice.google.dm http://b.sf-syn.com http://*.pro-market.net adservice.google.lv adservice.google.com.kh adservice.google.com.ua adservice.google.la adservice.google.com.sa adservice.google.co.ls adservice.google.tl adservice.google.fm adservice.google.td adservice.google.com.py *.moatads.com adservice.google.com.kw http://c.sf-syn.com adservice.google.tn *.consentmanager.net adservice.google.cv *.recaptcha.net *.googletagservices.com adservice.google.com.pe adservice.google.gr adservice.google.com.ng adservice.google.co.zm adservice.google.com.au adservice.google.co.za adservice.google.ga adservice.google.co.nz adservice.google.co.bw adservice.google.com.co adservice.google.com.fj adservice.google.com.eg *.s-onetag.com adservice.google.li adservice.google.st *.script.ac adservice.google.vg j.6sc.co adservice.google.no adservice.google.tg adservice.google.com.gt adservice.google.co.ve *.lijit.com adservice.google.bt adservice.google.bs adservice.google.to adservice.google.com.ec adservice.google.co.cr adservice.google.dk *.adsafeprotected.com adservice.google.cg ml314.com adservice.google.tt adservice.google.com.vc adservice.google.ge adservice.google.sk adservice.google.sm adservice.google.lu adservice.google.fr adservice.google.co.th *.trustarc.com adservice.google.com.tr *.flashtalking.com adservice.google.as adservice.google.com.bd adservice.google.com.sb *.doubleclick.net *.microsoft.com adservice.google.com.tj adservice.google.co.zw adservice.google.com.pr adservice.google.co.vi adservice.google.com.tw *.google-analytics.com adservice.google.mn adservice.google.co.in adservice.google.rs adservice.google.com.jm adservice.google.hn adservice.google.co.id adservice.google.pl *.sharethrough.com adservice.google.gt adservice.google.cf adservice.google.com.qa adservice.google.co.ao a.fsdn.com adservice.google.bj adservice.google.kz adservice.google.com.bo adservice.google.cd adservice.google.is adservice.google.al adservice.google.fi adservice.google.lt *.microsofttranslator.com adservice.google.com.et adservice.google.kg adservice.google.mu adservice.google.ae adservice.google.com.bz adservice.google.es adservice.google.be adservice.google.ps *.googletagmanager.com adservice.google.com.om adservice.google.com.pa adservice.google.vu adservice.google.cm adservice.google.co.kr adservice.google.co.ke *.google.com adservice.google.com.bh *.googlesyndication.com translate.googleapis.com adservice.google.co.jp adservice.google.ad adservice.google.com.ai adservice.google.sn adservice.google.mw adservice.google.co.il adservice.google.bf adservice.google.co.mz adservice.google.com.ar adservice.google.me adservice.google.com.my adservice.google.com.ag adservice.google.co.uk *.gstatic.cn adservice.google.nr adservice.google.it adservice.google.nl adservice.google.mg adservice.google.mk adservice.google.com.na adservice.google.az adservice.google.co.tz adservice.google.so adservice.google.com.sv adservice.google.com.hk adservice.google.ca adservice.google.mv *.crsspxl.com adservice.google.at adservice.google.ht adservice.google.ie adservice.google.si *.gstatic.com adservice.google.gy adservice.google.gm btloader.com adservice.google.ne adservice.google.ro adservice.google.com.ly adservice.google.ki adservice.google.com.mm adservice.google.sc adservice.google.com.gh adservice.google.pt adservice.google.hr adservice.google.dj adservice.google.com.pk recaptcha.net 'unsafe-inline' 'unsafe-eval'; script-src-attr 'none' 'report-sample'; frame-src 'self' http://*.pro-market.net *.crsspxl.com a.fsdn.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.googletagmanager.com *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.lijit.com *.btloader.com; upgrade-insecure-requests; form-action 'self' lists.sourceforge.net
x-content-type-options: nosniff
expires: Sun, 16 Jun 2024 17:30:40 GMT
cache-control: public, max-age=14400
cf-cache-status: HIT
age: 4835
last-modified: Sun, 16 Jun 2024 12:10:05 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 894b27e13e4893eb-LHR
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
GET

https://securepubads.g.doubleclick.net/tag/js/gpt.js

msedge.exe

Remote address:

142.250.186.130:443

Request

GET /tag/js/gpt.js HTTP/2.0
host: securepubads.g.doubleclick.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202406110101/pubads_impl.js

msedge.exe

Remote address:

142.250.186.130:443

Request

GET /pagead/managed/js/gpt/m202406110101/pubads_impl.js HTTP/2.0
host: securepubads.g.doubleclick.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://99f8720aef60a6f3208858296e6e32a9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

msedge.exe

Remote address:

172.217.18.1:443

Request

GET /safeframe/1-0-40/html/container.html HTTP/2.0
host: 99f8720aef60a6f3208858296e6e32a9.safeframe.googlesyndication.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://6881822ee0759634e748f6c3ab8e5de5.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

msedge.exe

Remote address:

172.217.18.1:443

Request

GET /safeframe/1-0-40/html/container.html HTTP/2.0
host: 6881822ee0759634e748f6c3ab8e5de5.safeframe.googlesyndication.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://tpc.googlesyndication.com/sodar/sodar2.js

msedge.exe

Remote address:

216.58.206.33:443

Request

GET /sodar/sodar2.js HTTP/2.0
host: tpc.googlesyndication.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://downloads.sourceforge.net/project/autokeyboardpresser/Autosofted_Auto_Keyboard_Presser_1.9.exe?ts=gAAAAABmbuj-2pJdWrZ7E2ffSubfM_POscGT2lr2YOclfy0_BnjbAPInsBSIuGL56xQKWc6zHSzSUgDuwrwaLV7Js5BuO0nLng%3D%3D&use_mirror=altushost-swe&r=

msedge.exe

Remote address:

204.68.111.105:443

Request

GET /project/autokeyboardpresser/Autosofted_Auto_Keyboard_Presser_1.9.exe?ts=gAAAAABmbuj-2pJdWrZ7E2ffSubfM_POscGT2lr2YOclfy0_BnjbAPInsBSIuGL56xQKWc6zHSzSUgDuwrwaLV7Js5BuO0nLng%3D%3D&use_mirror=altushost-swe&r= HTTP/2.0
host: downloads.sourceforge.net
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: same-site
sec-fetch-mode: navigate
sec-fetch-dest: document
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __cmpconsentx11319=CQATa4AQATa4AAfUnBENA5EgAAAAAAAAACiQAAAAAAAA
cookie: __cmpcpcx11319=____
cookie: __cmpcvcx11319=__s135_U__

Response

HTTP/2.0 302

server: nginx
date: Sun, 16 Jun 2024 13:31:09 GMT
content-type: text/html; charset=UTF-8
content-length: 417
location: https://altushost-swe.dl.sourceforge.net/project/autokeyboardpresser/Autosofted_Auto_Keyboard_Presser_1.9.exe?viasf=1
content-disposition: attachment; filename="Autosofted_Auto_Keyboard_Presser_1.9.exe"
set-cookie: sf_mirror_attempt=autokeyboardpresser:altushost-swe:Autosofted_Auto_Keyboard_Presser_1.9.exe; Max-Age=120; Path=/; expires=Sun, 16-Jun-2024 13:33:09 GMT
GET

https://altushost-swe.dl.sourceforge.net/project/autokeyboardpresser/Autosofted_Auto_Keyboard_Presser_1.9.exe?viasf=1

msedge.exe

Remote address:

79.142.76.130:443

Request

GET /project/autokeyboardpresser/Autosofted_Auto_Keyboard_Presser_1.9.exe?viasf=1 HTTP/1.1
Host: altushost-swe.dl.sourceforge.net
Connection: keep-alive
Upgrade-Insecure-Requests: 1
DNT: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: same-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
Referer: https://sourceforge.net/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: __cmpconsentx11319=CQATa4AQATa4AAfUnBENA5EgAAAAAAAAACiQAAAAAAAA; __cmpcpcx11319=____; __cmpcvcx11319=__s135_U__

Response

HTTP/1.1 200 OK

Server: nginx
Date: Sun, 16 Jun 2024 13:31:09 GMT
Content-Type: application/octet-stream
Content-Length: 1068032
Connection: close
last-modified: Thu, 28 Dec 2017 05:21:39 GMT
etag: "5a447f63-104c00"
X-Cache-Status: HIT
GET

https://42de3da8de1323b9b74bf13c6771734f.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

msedge.exe

Remote address:

172.217.169.65:443

Request

GET /safeframe/1-0-40/html/container.html HTTP/2.0
host: 42de3da8de1323b9b74bf13c6771734f.safeframe.googlesyndication.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
upgrade-insecure-requests: 1
dnt: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
referer: https://sourceforge.net/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

104.18.37.111:443

https://sourceforge.net/rest/p/autokeyboardpresser/activity?limit=5

tls, http2

msedge.exe

5.1kB
85.2kB
68
108

HTTP Request

GET https://sourceforge.net/projects/autokeyboardpresser/files/latest/download

HTTP Response

200

HTTP Request

PUT https://sourceforge.net/p/sfapi/update_vid

HTTP Response

200

HTTP Request

GET https://sourceforge.net/projects/autokeyboardpresser/postdownload

HTTP Response

103

HTTP Response

200

HTTP Request

GET https://sourceforge.net/projects/autokeyboardpresser/

HTTP Response

103

HTTP Response

200

HTTP Request

GET https://sourceforge.net/rest/p/autokeyboardpresser/activity?limit=5

HTTP Response

200
104.18.40.209:443

a.fsdn.com

tls, http2

msedge.exe

943 B
2.9kB
8
6
104.18.40.209:443

a.fsdn.com

tls, http2

msedge.exe

943 B
2.9kB
8
6
104.18.40.209:443

https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2

tls, http2

msedge.exe

3.3kB
56.1kB
47
50

HTTP Request

GET https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-regular.woff2

HTTP Request

GET https://a.fsdn.com/con/css/fonts/sftheme/lato-v20-latin-ext_latin-700.woff2

HTTP Response

200

HTTP Response

200
104.18.40.209:443

https://a.fsdn.com/con/images/sandiego/icons/default-avatar.png

tls, http2

msedge.exe

16.5kB
423.8kB
271
374

HTTP Request

GET https://a.fsdn.com/con/css/lato.css?1718214368

HTTP Request

GET https://a.fsdn.com/con/css/sandiego.css?1718214368

HTTP Request

GET https://a.fsdn.com/con/css/sftheme/sandiego/cmp.css?1718214368

HTTP Request

GET https://a.fsdn.com/con/js/min/sf.sandiego-cmp-top.js?1718214368

HTTP Request

GET https://a.fsdn.com/con/js/min/sf.sandiego-head.js?1718214368

HTTP Request

GET https://a.fsdn.com/con/js/adsbanner.js?1718214368

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://a.fsdn.com/con/js/min/sf.sandiego-base.js?1718214368

HTTP Request

GET https://a.fsdn.com/con/js/min/sf.sandiego-foundation-base.js?1718214368

HTTP Request

GET https://a.fsdn.com/con/js/min/sf.sandiego-dwnld.js?1718214368

HTTP Request

GET https://a.fsdn.com/con/images/sandiego/sf-logo-full.svg

HTTP Request

GET https://a.fsdn.com/con/images/sandiego/github-sync.png

HTTP Request

GET https://a.fsdn.com/allura/p/autokeyboardpresser/icon?1436480738

HTTP Request

GET https://a.fsdn.com/mirrorimages/altushost-xlarge.png

HTTP Request

GET https://a.fsdn.com/con/app/nel_img/18233

HTTP Request

GET https://a.fsdn.com/con/app/nel_img/18157

HTTP Request

GET https://a.fsdn.com/con/app/nel_img/17815

HTTP Request

GET https://a.fsdn.com/con/app/nel_img/15395

HTTP Request

GET https://a.fsdn.com/con/app/nel_img/15649

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://a.fsdn.com/con/img/sandiego/svg/originals/sf-icon-orange-no_sf.svg

HTTP Response

200

HTTP Request

GET https://a.fsdn.com/con/js/lib/big-text.js?1718214368

HTTP Request

GET https://a.fsdn.com/con/js/min/sf.sandiego-project.js?1718214368

HTTP Request

GET https://a.fsdn.com/con/app/nel_img/18237

HTTP Request

GET https://a.fsdn.com/con/js/sandiego/vendor/owl.carousel.min.js?1718214368

HTTP Request

GET https://a.fsdn.com/con/js/sandiego/vendor/featherlight.min.js?1718214368

HTTP Request

GET https://a.fsdn.com/con/js/sandiego/vendor/featherlight.gallery.min.js?1718214368

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://a.fsdn.com/con/app/proj/autokeyboardpresser/screenshots/Autosofted_Key_Presser.png/245/183/1

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://a.fsdn.com/con/images/sandiego/sf-icon-black.svg

HTTP Response

200

HTTP Request

GET https://a.fsdn.com/con/app/syndication/badge_img_direct/oss-open-source-excellence/oss-open-source-excellence/?variant_id=sf

HTTP Request

GET https://a.fsdn.com/con/app/nel_img/17759

HTTP Request

GET https://a.fsdn.com/con/img/sandiego/svg/originals/sf_star_yellow.svg?1718214373

HTTP Request

GET https://a.fsdn.com/con/js/min/sf.sandiego-foundation-tooltip.js?1718214368

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://a.fsdn.com/allura/p/akp/icon?1457413254

HTTP Request

GET https://a.fsdn.com/allura/p/autokeypresser/icon?1599238178

HTTP Request

GET https://a.fsdn.com/allura/p/get-automouser/icon?1472139305

HTTP Request

GET https://a.fsdn.com/allura/mirror/championify/icon?1659701229?&w=48

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://a.fsdn.com/allura/u/pyxxys/user_icon

HTTP Request

GET https://a.fsdn.com/allura/u/autosofted/user_icon

HTTP Response

200

HTTP Response

302

HTTP Request

GET https://a.fsdn.com/con/images/sandiego/icons/default-avatar.png

HTTP Response

200
104.18.40.209:443

a.fsdn.com

tls, http2

msedge.exe

943 B
2.9kB
8
6
104.18.40.209:443

a.fsdn.com

tls, http2

msedge.exe

943 B
2.9kB
8
6
104.18.40.209:443

a.fsdn.com

tls

msedge.exe

793 B
2.3kB
6
4
104.18.40.209:443

a.fsdn.com

tls, http2

msedge.exe

943 B
2.9kB
8
6
87.230.98.76:443

d.delivery.consentmanager.net

tls

msedge.exe

5.2kB
9.6kB
18
15
89.187.167.5:443

https://cdn.consentmanager.net/delivery/customdata/bV8xLndfMTEzMTkucl9HRFBSLmxfZW4uZF8yNDkyLnhfMTEudi5wLnRfMjQ5Mi54dF8zMw.js

tls, http2

msedge.exe

4.1kB
121.2kB
64
100

HTTP Request

GET https://cdn.consentmanager.net/delivery/js/cmp_en.min.js

HTTP Response

200

HTTP Request

GET https://cdn.consentmanager.net/delivery/customdata/bV8xLndfMTEzMTkucl9HRFBSLmxfZW4uZF8yNDkyLnhfMTEudi5wLnRfMjQ5Mi54dF8zMw.js

HTTP Response

200
104.18.33.97:443

https://c.sf-syn.com/conversion_outbound_tracker/sf

tls, http2

msedge.exe

1.9kB
8.5kB
17
17

HTTP Request

GET https://c.sf-syn.com/conversion_outbound_tracker/sf

HTTP Response

200
87.230.98.76:443

d.delivery.consentmanager.net

tls

msedge.exe

838 B
416 B
6
6
87.230.98.76:443

d.delivery.consentmanager.net

tls

msedge.exe

1.8kB
889 B
10
7
87.230.98.76:443

d.delivery.consentmanager.net

tls

msedge.exe

2.0kB
989 B
11
8
142.250.186.130:443

https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202406110101/pubads_impl.js

tls, http2

msedge.exe

5.3kB
193.2kB
89
152

HTTP Request

GET https://securepubads.g.doubleclick.net/tag/js/gpt.js

HTTP Request

GET https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202406110101/pubads_impl.js
172.217.18.1:443

https://6881822ee0759634e748f6c3ab8e5de5.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

tls, http2

msedge.exe

2.4kB
12.2kB
22
26

HTTP Request

GET https://99f8720aef60a6f3208858296e6e32a9.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

HTTP Request

GET https://6881822ee0759634e748f6c3ab8e5de5.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
216.58.206.33:443

https://tpc.googlesyndication.com/sodar/sodar2.js

tls, http2

msedge.exe

1.9kB
12.8kB
18
19

HTTP Request

GET https://tpc.googlesyndication.com/sodar/sodar2.js
204.68.111.105:443

downloads.sourceforge.net

tls, http2

msedge.exe

989 B
3.8kB
9
10
204.68.111.105:443

https://downloads.sourceforge.net/project/autokeyboardpresser/Autosofted_Auto_Keyboard_Presser_1.9.exe?ts=gAAAAABmbuj-2pJdWrZ7E2ffSubfM_POscGT2lr2YOclfy0_BnjbAPInsBSIuGL56xQKWc6zHSzSUgDuwrwaLV7Js5BuO0nLng%3D%3D&use_mirror=altushost-swe&r=

tls, http2

msedge.exe

1.9kB
4.7kB
12
12

HTTP Request

GET https://downloads.sourceforge.net/project/autokeyboardpresser/Autosofted_Auto_Keyboard_Presser_1.9.exe?ts=gAAAAABmbuj-2pJdWrZ7E2ffSubfM_POscGT2lr2YOclfy0_BnjbAPInsBSIuGL56xQKWc6zHSzSUgDuwrwaLV7Js5BuO0nLng%3D%3D&use_mirror=altushost-swe&r=

HTTP Response

302
79.142.76.130:443

https://altushost-swe.dl.sourceforge.net/project/autokeyboardpresser/Autosofted_Auto_Keyboard_Presser_1.9.exe?viasf=1

tls, http

msedge.exe

23.8kB
1.1MB
470
800

HTTP Request

GET https://altushost-swe.dl.sourceforge.net/project/autokeyboardpresser/Autosofted_Auto_Keyboard_Presser_1.9.exe?viasf=1

HTTP Response

200
95.101.129.225:443

www.bing.com

tls

7.5kB
147.4kB
123
117
52.182.143.214:443

browser.pipe.aria.microsoft.com

tls

3.4kB
7.5kB
20
15
23.62.61.97:443

r.bing.com

tls

1.1kB
5.2kB
15
12
23.62.61.97:443

r.bing.com

tls

1.1kB
5.2kB
15
12
23.62.61.97:443

r.bing.com

tls

50.5kB
1.4MB
1044
1022
23.62.61.97:443

r.bing.com

tls

1.1kB
5.2kB
15
12
23.62.61.97:443

r.bing.com

tls

1.1kB
5.2kB
15
12
23.62.61.97:443

r.bing.com

tls

1.1kB
5.2kB
15
12
87.230.98.76:443

d.delivery.consentmanager.net

tls

msedge.exe

2.7kB
3.8kB
13
10
87.230.98.76:443

d.delivery.consentmanager.net

tls

msedge.exe

2.7kB
6.8kB
12
12
172.217.169.65:443

https://42de3da8de1323b9b74bf13c6771734f.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

tls, http2

msedge.exe

2.0kB
9.1kB
16
17

HTTP Request

GET https://42de3da8de1323b9b74bf13c6771734f.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

8.8.8.8:53

sourceforge.net

dns

msedge.exe

851 B
1.8kB
12
12

DNS Request

sourceforge.net

DNS Response

104.18.37.111

172.64.150.145

DNS Request

config.edge.skype.com

DNS Response

13.107.42.16

DNS Request

login.live.com

DNS Response

20.190.160.20

40.126.32.140

40.126.32.136

40.126.32.74

20.190.160.17

40.126.32.138

40.126.32.133

40.126.32.68

DNS Request

8.8.8.8.in-addr.arpa

DNS Request

a.fsdn.com

DNS Response

104.18.40.209

172.64.147.47

DNS Request

209.40.18.104.in-addr.arpa

DNS Request

97.33.18.104.in-addr.arpa

DNS Request

tpc.googlesyndication.com

DNS Response

216.58.206.33

DNS Request

tpc.googlesyndication.com

DNS Response

216.58.206.33

DNS Request

105.111.68.204.in-addr.arpa

DNS Request

214.143.182.52.in-addr.arpa

DNS Request

6881822ee0759634e748f6c3ab8e5de5.safeframe.googlesyndication.com

DNS Response

172.217.18.1
8.8.8.8:53

111.37.18.104.in-addr.arpa

dns

672 B
1.1kB
9
9

DNS Request

111.37.18.104.in-addr.arpa

DNS Request

d.delivery.consentmanager.net

DNS Response

87.230.98.76

DNS Request

c.sf-syn.com

DNS Response

104.18.33.97

172.64.154.159

DNS Request

securepubads.g.doubleclick.net

DNS Response

142.250.186.130

DNS Request

130.186.250.142.in-addr.arpa

DNS Request

altushost-swe.dl.sourceforge.net

DNS Response

79.142.76.130

DNS Request

r.bing.com

DNS Response

23.62.61.97

23.62.61.194

DNS Request

95.221.229.192.in-addr.arpa

DNS Request

42de3da8de1323b9b74bf13c6771734f.safeframe.googlesyndication.com

DNS Response

172.217.169.65
8.8.8.8:53

20.160.190.20.in-addr.arpa

dns

759 B
1.4kB
10
10

DNS Request

20.160.190.20.in-addr.arpa

DNS Request

cdn.consentmanager.net

DNS Response

89.187.167.5

195.181.164.17

DNS Request

76.98.230.87.in-addr.arpa

DNS Request

99f8720aef60a6f3208858296e6e32a9.safeframe.googlesyndication.com

DNS Response

172.217.18.1

DNS Request

1.18.217.172.in-addr.arpa

DNS Request

downloads.sourceforge.net

DNS Response

204.68.111.105

DNS Request

browser.pipe.aria.microsoft.com

DNS Response

52.182.143.214

DNS Request

97.61.62.23.in-addr.arpa

DNS Request

222.197.79.204.in-addr.arpa

DNS Request

nexusrules.officeapps.live.com

DNS Response

52.111.227.14
224.0.0.251:5353

msedge.exe

463 B
7
142.250.186.130:443

securepubads.g.doubleclick.net

https

msedge.exe

3.1kB
6.0kB
6
7
216.58.206.33:443

tpc.googlesyndication.com

https

msedge.exe

4.5kB
52.0kB
37
53

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Autosofted License.txt

Filesize
42B

MD5
40dc555093acb3be2e0d582acb89215f

SHA1
38733e2af7cce34cd498684f94471d1eec0064b3

SHA256
49e57490269ac15161c504176cb0b49cc7807384830794c3dd422a392fc3f6d5

SHA512
95dc5705a13a0e87f3500d1b96aabcf87a9bced836526015525037651a517d3364c48f9a9648615d19fbf0d1f0edbd5425473cb2b9e5ca406fed9568bd0839b5

Download Submit
C:\Users\Admin\AppData\Local\Autosofted License.txt

Filesize
63B

MD5
ef4789a4b117479aac0a7123dcd6ad53

SHA1
36fef0a7244e21b4fc14d58f01a2dcb4f962638c

SHA256
24586cf937acce0a75d902b882ec80dea257524a75971236d3b5320fe1ea4edb

SHA512
c96be23c5286dc29d035b8c53d2512f05390368e097f3a9c4870e646e9741aa132039dbb05b84e7cc43fa728e018213f47014b64d1720091f5bd430f56fa074b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f717f56b5d8e2e057c440a5a81043662

SHA1
0ad6c9bbd28dab5c9664bad04db95fd50db36b3f

SHA256
4286cd3f23251d0a607e47eccb5e0f4af8542d38b32879d2db2ab7f4e6031945

SHA512
61e263935d51028ec0aab51b938b880945a950cec9635a0dafddf795658ea0a2dfcf9cfc0cab5459b659bb7204347b047a5c6b924fabea44ce389b1cbb9867d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
196eaa9f7a574c29bd419f9d8c2d9349

SHA1
19982d15d1e2688903b0a3e53a8517ab537b68ed

SHA256
df1e96677bcfffe5044826aa14a11e85ef2ebb014ee9e890e723a14dc5f31412

SHA512
e066d74da36a459c19db30e68b703ec9f92019f2d5f24fd476a5fd3653c0b453871e2c08cdc47f2b4d4c4be19ff99e6ef3956d93b2d7d0a69645577d44125ac7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
65KB

MD5
2e455d20330392f471bb82f94b4db358

SHA1
e976382a389bae4302cc713b4695e76f43332298

SHA256
62fd9333d870b1fde2e0f9aa333b93ccd988abbe578539f15915c22333268959

SHA512
ab752249dd5ae07a2df290aa8388c411da1b700af3e5b9ccbef104ec2830435229534629753a26406638c0198802bd3348041af76beb5424a951d8500fd8f31d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
91KB

MD5
f28973509eab060bcdf452c513e9376f

SHA1
52c5fbf886cf8d0b877e058fdb224883df1582b2

SHA256
f6d75d33e049e04a8ec08659202e07a7dd1886ac36622aed36c3c70f3dffb1ad

SHA512
955fee710fe7de08c9b7538358a1a8304c7a3577a2b89401a0b6bee566a75b1ce96efb77404d4938077e635e107ddea1355e593206782de4588e11329e97a54f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
17KB

MD5
7c66a748536ccbaa689d89dd713c015c

SHA1
51a9ddb74877310f353f3a583b6588758ba32717

SHA256
35a1960d8ac7356e4a2678f813d2be7446568c9e80d62744e1464b65e4f9537b

SHA512
0a6e5b76541cdd8a9ef94eee4d78d6bfa8edc496fee4ca1d9e7dded1a6213c46bd07de505040152eb09576ad8b966242ff347a774103fecd14b961d2f9e9b831

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
30KB

MD5
1daead32abfc09e619b0d1da6d8ec1d0

SHA1
1bc998f528c7a1aaaedd5bf760f102b710e20324

SHA256
59e5d7f2755d3957ab8736e9fb0a7b78e33c6ea476475f6396c4f3108722c0c3

SHA512
66f66d478b8c675bec40316e5d284a735a2bafe6a00c2e613a7231403067978f294f8ff13ef91173f8f4e31dfde71f0115d3218f716b2abb092d975f8b8d9298

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
143KB

MD5
3fccc4bc9a9369d3725e5e6f6b3384cc

SHA1
01652d2ecdba50ea130ad57417256c74e89f8165

SHA256
e338c50cac6c323b0dc576228b09f550c4d1d4345ee9259668d4f91133dc0228

SHA512
1afa0092b7f794ae9d6dc1108f13f239863607f39dcccfa0b6af3812f0a2352f5240ef1e0004faf65755c20379da9f7cb5c5a08f96a289ed8bf172a45fbf7b24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
20KB

MD5
4b2026d30018fb08216cad5165da2a9e

SHA1
c689f4dcfcaf371494da6384254698ba3a1466f1

SHA256
64bb69d41b5874df1ee2f5695056990120355a7cc124ddfe577574574657de5c

SHA512
f73986bc249a29d32fb601a286420868819850901495f3521af993f7733fc2f9ce7069d7d963c5407e13358416a905f8e56558729e6500761c7671c45a051936

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
64KB

MD5
be676a6820a16101eed8dfe9bc39211d

SHA1
84a68584fffc1863f604984161abefe9ddd727c0

SHA256
49e7c48f632a33abfebbf881e504a833abc8b5cf87d7be4dfa9b5b3cc86749ae

SHA512
3ef3fa135bd1ea25660d9b3e3cd0995d1f542d608302e99bacc22640cc7045700391f001f5ba43c4bf89597b8058d533282e92f934b6bfb746c9f2940b96af32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
19KB

MD5
e78f9f9e3c27e7c593b4355a84d7f65a

SHA1
562ce4ba516712d05ed293f34385d18f7138c904

SHA256
75488ac5677083f252c43009f026c2ec023ac4da3e65c5d7a084742e32abce3d

SHA512
05f9fbbd59c286024b3ad49961c4e0eaa1abcf36ed29a1d07ea73d2b057075d46fbfdda56f135145f942bd0c3d48246c73be1771c21861eec4ddf8bbc365a286

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\95db3886d331a9d2_0

Filesize
37KB

MD5
c8bb4d2788c0c5ce28405f2fc9fe144e

SHA1
7446f429577c3332b05e2a157fde2cef0d62e871

SHA256
4e517551b2ca3f87a0fce8516515290be1d32eab3bb069c2fca452c95a70fe53

SHA512
4d2cac182fe33afbb5ec322e77847b778f9d5b43f3c149174f8582da964d5782c5cc691644c2ca385f4b4d6263b6545bd1eb225b21030db8a1e6eed1af0d91ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b279c895bc73edca_0

Filesize
3KB

MD5
c77731d07b810c0f4aa39f227a4870a1

SHA1
0c751e6a9475db78de78fd891d1afac42b088e27

SHA256
b69a529d90cd1e960d77f66b07b4c1e453af209f12c40c6155611361fc2fa344

SHA512
ef87652e062132a746db23e87a6fc81ad0c09f2e708c3d0be8ed22c7d622dbb514a7050a61631d3eef920e548e542e6e820dcf6cc58eb0d076f0e7918f2a40e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
2819fad9cdfe41cb8adca49b79b83e78

SHA1
4be3d000afad833cbdd89cdb41db9ff9c94d1266

SHA256
9fcd0cee45b1df7491a243a4176a3c6ef364db167a3ac4b424dbb9d9b287d10a

SHA512
1c325b65c6c8f6e97883ee0b146a50b2fc024a4f7507fb0a0e6b6ffce1541f4e9bf33fabe7a10f89483221d8c9c63045d65cd6affa7906321bdeb100d2f8ec77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
840B

MD5
485265a6e7d37719c1a3ebc2e0abce78

SHA1
7bcb2e99fe2ed2a51932f8e787c56b6172fb29e3

SHA256
ace0e9e7c5a148fe302a997f5cbf9b55476be95d231cec4410677ee76f4a6aef

SHA512
2f1e9b0fa3ee1e6c6e9a87c332b424526ff0ec73e16b128c70189836e2306d22c923ed3e53203a11cf4fedd7e6241ecfd7924380d3fdc54c41562e4452959a6a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
840B

MD5
ac0dcd16454ffb09e6895b8801f64dda

SHA1
6fa68f717ee25c48f7458282bbcef412cb96f142

SHA256
3c1a37436d158f53e99f088456de9352833e67e77f690b7c81070ad241936f0f

SHA512
a29e656fc13cb4925933d40e48472346018ed958e86936269ee7a0e4c03ffc4cde190b7af96ad2e7193c62efabd6b0e9b251b8750f6bf64d1d72d67b9e6af48d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
09c0995025ab8c28bc52e5e5cd9a5339

SHA1
058c876567479545655d9af202eb1d44b826396d

SHA256
33147023a36c439ff70a20c02e9611d9a0c249a3b4c501a71eabc56ffe8aae85

SHA512
fbcee6bd39063b0d0578df266ef65bbab02f200d79230700e6ec7af7f5a7209c295a7d05e9a434d855a6d1a8e70ba73d7278027e0dc38026498a20993faeeebf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f8776a7c1181fcc98c9d03160608cf76

SHA1
4d8b3475a0cdd2b66cc24b8aaf2aa5c0e0476a13

SHA256
b306484bb9e5235899e9c39049ae3c1c5719aa6d92b88571558a7b9876a45409

SHA512
6bbffd7d73d4744edcc72108b6c156e2304d1c9854f17051e479223468d0fac4bad03800edce3b8363e6e235c11154cdfcf5d250632f39c7da73612272620a88

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
164e024126f056632d71e3956dcf627f

SHA1
4eaa1ec3d110adafb8861a76aebe9ee9fb604cea

SHA256
c79efa12757fde5aba0f04bb298bcc63833727b6d0641ecee302f7035b3cb361

SHA512
580ecd05992cabbe2fa3489cb616655c8d61c5baeb4444def2cb5756ef34e6df3731d7c1eea87ec046c98806544a8c90af9b8446d1180e7ccafd24d86a8a08f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8861537d5c6233fcccea66bbc4d325e2

SHA1
1bbf35c0dac0cca521b11929c09f0047422df1d7

SHA256
2b50e02189897d858447999852ff021670966e61207e527316374742359eb5ee

SHA512
f4e42e84dca06d4667d07184725fcaa621fded5967a0453860faca59f7c9da43857b00ae3a57504c59cf010a03764be3bc10673bf21a8617caa55fe704c359fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
23df6bfc0f9fc8161556e98be66d7776

SHA1
eedf046f62a2f52c0b0829e988005307635b3020

SHA256
7add455998dfec39dd7063d8f48d510d770923787c2f6240a87f9d4e99c94c26

SHA512
91614110abb3bc9fe96bc441263534345fdbd43a71b866e1f98e6814d2d8caead13ae2a84bc914f1fc1099f83c13e2d966938d03fa4a340de6e82a3309b4d01b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b9e281df99f9903f07f3e72ad633784f

SHA1
8dfe458efc1f6b28c086c29f5a2243931cdb7785

SHA256
abafabfab7a3d120d07c9ae561e66ad7a9d6015cc5324713be7136c7b1ac139e

SHA512
6c58632840e9f1e97942a393eac1cb4a29423ca60b4273a2af7dc47efb8b6fcfca706872c1b2192cde49234724eaec656bff8fd8df0f79d981aa717f37d16333

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
370B

MD5
db3eb5fd110ee7f1efe7a55001ed58b4

SHA1
af200fac8ba41c96c0c94d0e7046169856c08d8a

SHA256
180473e6be8a55cfe32f33ce4b5245829f229e4f4e57c50914dd5401e1b19f19

SHA512
9987634a8fc89f34834f29834c75cebb0e2b054f8617a73819641a5737020cc9022eea9cea72b22f68df8bfa1935f6b39cbcc44df97f93b4fa32bb539de8bedc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
370B

MD5
3a48d2fdb89a0068c1133712379711a7

SHA1
7c47b6865d1cbc5f870203a9de7ca45776876e84

SHA256
137228996a0c2bf3493a1ba9b37b7884913c0e2a8c5994798af229b27c19ad8a

SHA512
88c02125bc0605b0eb0e3e79a093821948a00a2fde9f9bacba5ef31e1f5cf3346b2d190727acede7c279281b25452e720e92ea3620ef0224f5e01dbd4f38ae0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
370B

MD5
24a0ba4e9ddd5340c63a53dab20f2043

SHA1
dcf3ff1d3736952530aff795a4d28d6db7bb45fa

SHA256
2c12741f694575cf499ce05beea447a883fb71ceee6fd17e332bea2f4b57c9d9

SHA512
c52429db47378bcc0bc192b88e7563de239159a9d879d6cd331c909ca84dd63c5d1d45619c544caa14c96fb196a35123ed1ecb3a0c83b895b029d43821b68217

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57fc61.TMP

Filesize
370B

MD5
fc38fb93457b9cf8dfe5eb7ac30a32c8

SHA1
5632df81dba8fd335d9df49e5ade8df918cbef09

SHA256
866e9572ffcb3264abd0f318a0455ab029e3d5c67f58b2a27b47797fad4bac9e

SHA512
dd06e88d00f249a1a817231cc2b4ef3eba1d20087123bc2bac8d46271f8fb53c3ee70544025923a3e4edc23d2c4f6cbfbe1d5e6cdaf85c8d96569899e85e3a24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ed012c1ced44c1dc3d8b9f43819a394b

SHA1
9895698474421ac8d2510f728ad59911d3edcd2d

SHA256
c7e251d3c7a1b91ef7f2f945e245d925836bc6621bcede55916b40c27159f70c

SHA512
5900053e146db3eaa15afd7b6891c91d3b2b90dc85bebf368de494ebebe941ca159386c840f7c36fdabccf0c19906a78961b068bcfecf2bf72d832529635e0f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
36c1e40d48fedd02bfaad24737e96d3d

SHA1
d1a387fad71f1f52e3d34dc69a411d4ab0b718c9

SHA256
ddb97ff49b661f049addd2520a09e0ee4dc31d0bb83f3a616d7f010854f68ed5

SHA512
b0fa74fc3df098b1e98f4a1615cc4740254e642f73699f6a1f26fcd9e470ce850f09fa0272ef86608d1c3c060fd6bebddd93768bb9922945f4628472a315bc82

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
0f3097e2d595fc969f515d98c61f016d

SHA1
6cd932efcb0156d6e4a2a2682626effebfa276c9

SHA256
61cf150709b287420a139d7376811c5b182f80cc186b0972a2398789a419ce2f

SHA512
7a13f5f5e213dc3ef310df4413f68c6459a04650bca3d5b34c516f0e87e177696bdb4f67d1e8eeccd2c4e54af34989cbe80c4a1d5407fa4b648d84ea6162e3ad

Download Submit
C:\Users\Admin\AppData\Local\Temp\Autosofted Keyboard Presser Config.txt

Filesize
51B

MD5
352d67a4ad8b08a7c7d6c79d9984a2fd

SHA1
87369159c77e26013391534193fc2d6b45f9960c

SHA256
31c6a4f11837167448108e12ec8a34e6328b3b791c1f46218dc0979136035ea2

SHA512
c11a423b4a0535c66c9f5404ae137ff2fd31b98756fd3fbe461b632d630843a72de7aa2ffdc43177b655be5a0a62b8918771ed5e487f2232490292caf71cb71f

Download Submit
C:\Users\Admin\Downloads\Autosofted_Auto_Keyboard_Presser_1.9.exe:Zone.Identifier

Filesize
114B

MD5
ec396719eaae26d32a0285e2657fd30d

SHA1
55856ac22daf949b97ba74b771409d795d37e066

SHA256
000e538688401a94acb44cf13fdf9d3dfa1f513fbce5ff7b15ef6b994c083718

SHA512
b68908dde0dd9067c8d01126afe2b90cab15e26368ecdb7ad174f89e9ded7935ac5075c07df456a2ae8789583dd2eb40ee785b355bbd4721af842ada0e9a45d1

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 56184.crdownload

Filesize
1.0MB

MD5
e60e845933d747c615286b762630919a

SHA1
948d219d89dae0a277519978b751cb70991eb577

SHA256
c21996d9bf78dc7172b5eaca6d2dedbb17ef0f86e9b23a6363550183e52778d8

SHA512
7a4210fd3a5e3542057fba5a86735ca69dc80b43cfc38c88d62423c6d297d51d8a150a97acb75af6840862d098168f711fba218124c8271ede5961e1e1e26907

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request