Edit tour

Windows Analysis Report
Polynomial.xlsb

Overview

General Information

Sample name:	Polynomial.xlsb
Analysis ID:	1360758
MD5:	10a9cbc0ba904f61adeaf6d00ced56e2
SHA1:	b6fb829cba814cb75e701864857ad128b79cdd86
SHA256:	7fae169ba93146f103535d2a14a428c4f02c08e5f5f2d8fb795cfe2f93734bc2
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Document contains VBA stomped code (only p-code) potentially bypassing AV detection

Document contains an embedded VBA macro which may execute processes

Document contains an embedded VBA with many GOTO operations indicating source code obfuscation

Connects to many different domains

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Document contains embedded VBA macros

Document misses a certain OLE stream usually present in this Microsoft Office document type

Found iframes

HTML page contains hidden URLs or javascript code

HTML title does not match URL

IP address seen in connection with other malware

Suspicious form URL found

Classification

Process Tree

System is w7x64

EXCEL.EXE (PID: 1048 cmdline: "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding MD5: D53B85E21886D2AF9815C377537BCAC3)

chrome.exe (PID: 1784 cmdline: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 3196 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1412 --field-trial-handle=1224,i,2370678201779808397,14656861565329268167,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 3996 cmdline: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 5872 cmdline: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 6060 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1428 --field-trial-handle=1236,i,12179144878932611703,17362965209824578044,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 4304 cmdline: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 4724 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1464 --field-trial-handle=1236,i,10779558887364630857,15594323145333810207,131072 /prefetch:8 MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 4580 cmdline: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 4840 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1448 --field-trial-handle=1320,i,17365852164750101580,5148545930953262033,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 5696 cmdline: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "http://www.interactiveds.com.au/ MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://ce.lijit.com/beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid=
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: //exchange.mediavine.com/usersync/sync?origin=https://mathblog.com&src=//exchange.mediavine.com&s2sVersion=production&mv_uuid=6120f800-992e-11ee-8a65-3f15d911ca60&version=invalidate-verizon-pushes&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22centro%22%3Atrue%2C%22emx_digital%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%7D
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://acdn.adnxs.com/dmp/async_usersync.html
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17404&endpoint=us-east
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://rtb.gumgum.com/usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://ads.yieldmo.com/pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://eb2.3lift.com/getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://sync.colossusssp.com/ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Iframe src: https://ssc-cms.33across.com/ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://ce.lijit.com/beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid=
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://google-bidout-d.openx.net/w/1.0/pd?plm=5
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://feed.pghub.io/tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%220.1.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Education%22%2C%22subcategory%22%3A%22Education%22%7D
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://google-bidout-d.openx.net/w/1.0/pd?plm=5
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/aframe
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=mathblog.com&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=#{"uid":{"origin":0},"lwid":{"origin":0},"bundle":{"value":"onR1gl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkxFZWp5Sjh0THdhV3h6Z09Lalc5T1V3cSUyRkRvanhXekdLTGJCS1F4THRWcTdHZTBUQnlEZUlqeDhaZEdGJTJCcm1NRnVjUWM5Vko2elZzRzI0dGlnalduWVpUYUVlelR5JTJGRGVPZWhGNm5uMmFsVmpBZ2JFWEtWNXRudE9BJTJCemxDOHl3JTNEJTNE","origin":3},"optout":{"value":false,"origin":0},"sid":{"origin":0},"tld":"mathblog.com","topUrl":"mathblog.com","version":145,"cw":true,"lsw":true,"origin":"publishertagids","requestId":"0.8667825497009589"}
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: //exchange.mediavine.com/usersync/sync?origin=https://mathblog.com&src=//exchange.mediavine.com&s2sVersion=production&mv_uuid=6120f800-992e-11ee-8a65-3f15d911ca60&version=invalidate-verizon-pushes&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22centro%22%3Atrue%2C%22emx_digital%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%7D
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://acdn.adnxs.com/dmp/async_usersync.html
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17404&endpoint=us-east
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://rtb.gumgum.com/usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://ads.yieldmo.com/pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://eb2.3lift.com/getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://sync.colossusssp.com/ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://ssc-cms.33across.com/ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=157108&us_privacy=1---
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://eus.rubiconproject.com/usync.html?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Iframe src: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

Source: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html

HTTP Parser: Base64 decoded: qoTCn_ZxQjsWpXXg3p09btofr9A16QbohAPSz9oO6rM",[null,null,null,"https://displayads-formats.googleusercontent.com/ads/preview/content.js?client=wta\u0026obfuscatedCustomerId=3050708355\u0026creativeId=678505183571\u0026versionId=0\u0026adGroupCreativeId=6315...

Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: Title: Polynomial Root-finding with the Jenkins-Traub Algorithm does not match URL
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Title: Polynomial Root-finding with the Jenkins-Traub Algorithm does not match URL
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Title: Polynomial Root-finding with the Jenkins-Traub Algorithm does not match URL

Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: Form action: https://mathblog.com/wp-comments-post.php
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: Form action: https://mathblog.com/wp-comments-post.php
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: Form action: https://mathblog.com/wp-comments-post.php
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Form action: https://mathblog.com/wp-comments-post.php
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Form action: https://mathblog.com/wp-comments-post.php
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Form action: https://mathblog.com/wp-comments-post.php
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: Form action: https://mathblog.com/wp-comments-post.php
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: Form action: https://mathblog.com/wp-comments-post.php

Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=17404&endpoint=us-east	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=17404&endpoint=us-east	HTTP Parser: No favicon
Source: https://interactiveds.com.au/IDSau/	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=gumgum	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyYi0xZmQzZWQzYTIzN2I=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=rth&i=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=gumgum	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://rtb.gumgum.com/usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D	HTTP Parser: No favicon
Source: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg	HTTP Parser: No favicon
Source: https://google-bidout-d.openx.net/w/1.0/pd?plm=5	HTTP Parser: No favicon
Source: https://google-bidout-d.openx.net/w/1.0/pd?plm=5	HTTP Parser: No favicon
Source: https://ce.lijit.com/beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid=	HTTP Parser: No favicon
Source: https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/v3/pr?exlist=gg&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0	HTTP Parser: No favicon
Source: https://us-u.openx.net/w/1.0/cm?id=c6a5ba0d-ce02-41bd-a1ea-842c68bd5108&ph=8f5ed5d4-642c-4222-968a-d709c87ac3c8&us_privacy=1---&r=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D70%26external_user_id%3D	HTTP Parser: No favicon
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: No favicon
Source: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&	HTTP Parser: No favicon
Source: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyYi0xZmQzZWQzYTIzN2I=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=157108&us_privacy=1---	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=157108&us_privacy=1---	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=AE4A8C3D-1096-459A-B091-2BADD5009F52	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:ViN9mkBO1Rd9xZ5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=GH_JvDj8VjdvrBlOavHmp2aBmNQ&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=a54b90ee-992e-11ee-aedd-513fc3dc3f08	HTTP Parser: No favicon
Source: https://ce.lijit.com/merge?pid=58&3pid=AE4A8C3D-1096-459A-B091-2BADD5009F52	HTTP Parser: No favicon
Source: https://ce.lijit.com/merge?pid=71&3pid=AE4A8C3D-1096-459A-B091-2BADD5009F52	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://rtb.gumgum.com/usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0	HTTP Parser: No favicon
Source: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=pbm&i=AE4A8C3D-1096-459A-B091-2BADD5009F52	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU757f221e63b64927b1c7a11275bcba2c	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7557000061611676171P	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=qL-zbSWCDwGtJkZ9MsV4ZQ	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=863968679737	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968625794546145592	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:26416578-c532-4500-add6-307cf0745029&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU69f6684a10134462a80749481aa6c408	HTTP Parser: No favicon
Source: https://pandg.tapad.com/tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%220.1.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Education%22%2C%22subcategory%22%3A%22Education%22%7D	HTTP Parser: No favicon
Source: https://69faac858c5d4dd1fe516cd03a7ff5a4.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://69faac858c5d4dd1fe516cd03a7ff5a4.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://69faac858c5d4dd1fe516cd03a7ff5a4.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://69faac858c5d4dd1fe516cd03a7ff5a4.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://69faac858c5d4dd1fe516cd03a7ff5a4.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://69faac858c5d4dd1fe516cd03a7ff5a4.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://69faac858c5d4dd1fe516cd03a7ff5a4.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU175665e227ff427986c82272bce47fbb	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=fXwOVOsIAmGPyDvtM8V4ZQ	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:038a6578-c533-4e00-a051-cd933f905263&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:c9ce6578-c536-4400-bb93-d22416541d01&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUb5d1f3b8746f478f8bbe11a7db7b8734	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=y0wla96ADdG3uE5kNsV4ZQ	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=lD1EGcujD9GlzdZxN8V4ZQ	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005	HTTP Parser: No favicon
Source: https://sync.targeting.unrulymedia.com/csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005	HTTP Parser: No favicon
Source: https://cti.w55c.net/ct/cms-2c-rubicon.html	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CMnoyAIQ2OLLAhjdqNfbATAB&v=APEucNXkdLsyAAaKZ_xLurlfSp3mg_ouUOK7ELhrkZLJ4eAaGFSVy0R-c7WptUB_HnTmHXalcvcOUkMj6UKZnSpwsi95cfRioAHJDuHpgZeJt7sctMU2uOo	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CMnoyAIQ2OLLAhi0qdfbATAB&v=APEucNVU2zbgXCKVTfZnPV-idvr4Rvu3dzHDbouPrSXHZJpB_grWN0OnHTfY15xfJGKckJg6fimrdE2kSFzN2xfGxsG_MAuWA-5QQuO2TehiFkuScxIkDxA	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=6&cv=31&https=1&cid=8CU5E5U43&prvid=2034%2C2033%2C193%2C2031%2C2030%2C273%2C154%2C2029%2C2028%2C2027%2C159%2C2026%2C2025%2C117%2C238%2C359%2C97%2C99%2C56%2C59%2C3012%2C3010%2C3008%2C201%2C2038%2C246%2C4%2C126%2C203%2C9%2C208%2C251%2C175%2C132%2C2009%2C178%2C3018%2C257%2C3017%2C214%2C3015%2C336%2C3014%2C337%2C338%2C459%2C339%2C77%2C182%2C184%2C261%2C141%2C262%2C186%2C461%2C188%2C222%2C2017%2C147%2C225%2C226%2C10000%2C80%2C108%2C229%2C508&itype=EBDA&purpose1=1&gdprconsent=1&gdpr=0&usp_status=0&usp_consent=1	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=10&cv=31&https=1&cid=8CUG3CC31&prvid=2034%2C2033%2C2031%2C2030%2C2074%2C394%2C2029%2C2028%2C2027%2C2104%2C159%2C2026%2C3038%2C2025%2C2069%2C117%2C238%2C359%2C239%2C437%2C97%2C99%2C59%2C2045%2C3057%2C3012%2C2043%2C2087%2C3011%2C3010%2C2041%2C201%2C3007%2C246%2C521%2C126%2C203%2C446%2C326%2C208%2C251%2C175%2C450%2C2009%2C178%2C255%2C3018%2C3017%2C455%2C214%2C3016%2C3015%2C336%2C413%2C3014%2C3058%2C337%2C338%2C339%2C77%2C38%2C182%2C141%2C222%2C102%2C345%2C226%2C468%2C80%2C108%2C229%2C109%2C41%2C508&itype=MEDIAVINE&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1&uspstring=1---	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/3291718278215255336/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/3291718278215255336/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/3291718278215255336/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/4207599684547219402/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/4207599684547219402/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/4207599684547219402/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CLSckNwEEMnO-vAEGL6KhvABMAE&v=APEucNWxaTy1m8EZ-ElLIqA2ra_pwPc3SjyE9X1tPslOaA4ZcLMbESQXc5bUwcZXfhvIns2UYNE2tJMkvXhsFldjki9aVK_OpQ	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?ix_um=1&cb=https%3A%2F%2Fjs-sec.indexww.com%2Fht%2Fhtw-pixel.gif%3F&s=184188&gdpr=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA	HTTP Parser: No favicon

Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No <meta name="copyright".. found
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No <meta name="copyright".. found
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/	HTTP Parser: No <meta name="copyright".. found
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: No <meta name="copyright".. found
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: No <meta name="copyright".. found
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: No <meta name="copyright".. found
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog	HTTP Parser: No <meta name="copyright".. found
Source: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#google_vignette	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 34MB later: 91MB

Source: unknown

Network traffic detected: DNS query count 231

Source: unknown

Network traffic detected: IP country count 11

Source: global traffic	TCP traffic: 192.168.2.22:49387 -> 8.8.8.8:53
Source: global traffic	TCP traffic: 192.168.2.22:49660 -> 8.8.8.8:53

Source: Joe Sandbox View	IP Address: 104.18.24.173 104.18.24.173
Source: Joe Sandbox View	IP Address: 216.22.16.5 216.22.16.5

Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 70.42.32.223
Source: unknown	TCP traffic detected without corresponding DNS query: 131.153.170.220
Source: unknown	TCP traffic detected without corresponding DNS query: 131.153.170.220
Source: unknown	TCP traffic detected without corresponding DNS query: 131.153.170.220
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 131.153.170.220
Source: unknown	TCP traffic detected without corresponding DNS query: 131.153.170.220
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 131.153.170.220
Source: unknown	TCP traffic detected without corresponding DNS query: 131.153.170.220
Source: unknown	TCP traffic detected without corresponding DNS query: 131.153.170.220
Source: unknown	TCP traffic detected without corresponding DNS query: 131.153.170.220
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 64.74.236.255
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.42.242
Source: unknown	TCP traffic detected without corresponding DNS query: 159.127.42.242

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\6AAA91BF.png

Jump to behavior

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=109.0.5414.120&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-109.0.5414.120Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polynomial-root-finding-with-the-jenkins-traub-algorithm/ HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-review-pro/assets/css/wp-review.css HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/mts_schema/style.css HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/mts_schema/css/responsive.css HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/mts_schema/css/magnific-popup.css HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-table-reloaded/css/plugin.css?ver=1.9.4 HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-table-reloaded/css/datatables.css?ver=1.9.4 HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/math-books.png HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/mts_schema/js/customscript.js HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-review-pro/assets/js/jquery.appear.js HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-review-pro/assets/js/main.js HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-review-pro/assets/js/jquery.knob.min.js HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/math-books.png HTTP/1.1Host: mathblog.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/comment-reply.min.js HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/mts_schema/js/jquery.magnific-popup.min.js HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/mts_schema/js/layzr.min.js HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mathblog.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/mts_schema/images/pattern13.png HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/akismet/_inc/akismet-frontend.js HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/mts_schema/images/pattern13.png HTTP/1.1Host: cdn.mathblog.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/mts_schema/images/nobg.png HTTP/1.1Host: cdn.mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2WOFDurG0lJJ.js?ts=78819 HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/mts_schema/images/nobg.png HTTP/1.1Host: cdn.mathblog.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: mathblog.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
Source: global traffic	HTTP traffic detected: GET /usersync.min.js?s2sVersion=production HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update?cats=687,687,687,687,687 HTTP/1.1Host: sda.fyiConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polynomial-root-finding-with-the-jenkins-traub-algorithm/ HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1079324331.1702413486; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.0.1702413486.0.0.0; _ga=GA1.1.1980800170.1702413486; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}}; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1--- HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/identity/envelope?pid=2 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update?cats=687,687,687,687,687 HTTP/1.1Host: sda.fyiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_sda=2023-12-12_687_5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1079324331.1702413486; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.0.1702413486.0.0.0; _ga=GA1.1.1980800170.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; am_tokens=null
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/sync?origin=https://mathblog.com&src=//exchange.mediavine.com&s2sVersion=production&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22centro%22%3Atrue%2C%22emx_digital%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%7D HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2WOFDurG0lJJ.js?ts=26386 HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1079324331.1702413486; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.0.1702413486.0.0.0; _ga=GA1.1.1980800170.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; am_tokens=null
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1---&b=1&g=wO%2BZMA%2FYawPipMinqc8CXvDYcoUq3KBxFo%2FbBkaLyP0%3D HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&cw=1&lsw=1&us_privacy=1--- HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId= HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=193478&cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=562036&ev=6120f800-992e-11ee-8a65-3f15d911ca60&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpulsepoint%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=19&type=mdv&ovsid=6120f800-992e-11ee-8a65-3f15d911ca60&us_privacy=1---&redirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediadotnet%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%3Cvsid%3E HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=8 HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1---&b=1&g=wO%2BZMA%2FYawPipMinqc8CXvDYcoUq3KBxFo%2FbBkaLyP0%3D HTTP/1.1Host: lexicon.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true
Source: global traffic	HTTP traffic detected: GET /dmp/async_usersync.html HTTP/1.1Host: acdn.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync.min.js?s2sVersion=production HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7DIf-None-Match: W/"3217-18c5aeae8c1"If-Modified-Since: Mon, 11 Dec 2023 22:06:33 GMT
Source: global traffic	HTTP traffic detected: GET /usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D HTTP/1.1Host: sync.colossusssp.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&cw=1&lsw=1&us_privacy=1--- HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702 HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3571062816453612499566
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId= HTTP/1.1Host: u.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498
Source: global traffic	HTTP traffic detected: GET /usermatchredir?cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D&s=193478&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=pulsepoint&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=4trFhcvjylTg&ev=6120f800-992e-11ee-8a65-3f15d911ca60&pid=562036 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=mediadotnet&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3454150986930039084V10 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: mathblog.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1079324331.1702413486; _gat_gtag_UA_192905992_1=1; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:2%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413496.0.0.0; _ga=GA1.1.1980800170.1702413486; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; cto_bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA; cto_bidid=tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNNlk2bnJzaVNzWGpPb2xpRWUlMkZHUWpBJTNEJTNE
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=yieldmo&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3zzUbmittUiV3rjzJy9H&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=huddled_masses&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=77ed72d2-2d26-4504-96ec-f9c2a46444c1 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=68913394&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID&sovrn_retry=true HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=triplelift&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3571062816453612499566 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=indexExchange&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=ZXjEurXK3YbtORulaCkY0QAA%26633 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb
Source: global traffic	HTTP traffic detected: GET /getuid?https://exchange.mediavine.com/usersync/redirect?partner=appnexus&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58294/sync?_origin=1&uid=f0c208bb-f950-06a8-3e6f-2503e69ff72d HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA%3D%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8216955376890449583
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=pubmatic&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 HTTP/1.1Host: hde.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGV4xLvEI2PjCmMC3Q==
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=sovrn&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=Hz32hLZHBFKxs3xrQUqrw0Qb HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3371&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AE4A8C3D-1096-459A-B091-2BADD5009F52&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dappnexus%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=2638779048715878353
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=smartmedia&partnerId=2527372694113908282&gdpr=0&gdpr_consent= HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=sovrn&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D92%263pid%3D%24UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4050678938750962602
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=AE4A8C3D-1096-459A-B091-2BADD5009F52&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3571062816453612499566
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AE4A8C3D-1096-459A-B091-2BADD5009F52&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwbPq6dwREYYqZr4aa5dxqw\|t
Source: global traffic	HTTP traffic detected: GET /getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=4050678938750962602
Source: global traffic	HTTP traffic detected: GET /ups/58294/sync?_origin=1&uid=f0c208bb-f950-06a8-3e6f-2503e69ff72d&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
Source: global traffic	HTTP traffic detected: GET /dsp/google/cookiematch/beacon?gdpr=0&gdpr_consent= HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxdkDsOxEAIQ%2B8ydQpgGMC52mrvHiWiweUzHxt%2BC7luTdlhW4BrRUy2iSokpHLDnoITZxuIlr0MdARzoFqpOVNCJhTSQf3kWU58iGlf0VOM9p3qxCfiqwdx0o30NIw8%2Fwd0uUyv
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=1mahn14&ttd_puid=6120f800-992e-11ee-8a65-3f15d911ca60&ttd_tpi=1&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthe_trade_desk%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%25%25TDID%25%25 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec
Source: global traffic	HTTP traffic detected: GET /ul_cb/check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid_lu=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1--- HTTP/1.1Host: lexicon.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /update?cats=687,687,687,687,687 HTTP/1.1Host: sda.fyiConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_sda=2023-12-12_687_10
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=appnexus&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=2638779048715878353 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=86d0f74f-3d90-871b-ad46-669e190fc8a4 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=7440927298114728342
Source: global traffic	HTTP traffic detected: GET /tum?umid=27&uid=Hz32hLZHBFKxs3xrQUqrw0Qb&gdpr=0&gdpr_consent= HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498\|vMbwgag2gKhEvPkWgyiK
Source: global traffic	HTTP traffic detected: GET /usersync/sync?origin=https://mathblog.com&src=//exchange.mediavine.com&s2sVersion=production&mv_uuid=6120f800-992e-11ee-8a65-3f15d911ca60&version=invalidate-verizon-pushes&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22centro%22%3Atrue%2C%22emx_digital%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%7D HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054
Source: global traffic	HTTP traffic detected: GET /aux/idsync?proto=gumgum HTTP/1.1Host: tg.socdm.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498\|vMbwgag2gKhEvPkWgyiK
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=de068b32-213a-3ce1-6d48-e409713c0344&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=8216955376890449583&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=sovrn&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: a.audrte.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lj_match?r=1702413499453&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/openx/4ac1ed76-b196-aea8-5c9f-f2fc8e6bce0d?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=0&gdpr_consent= HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId={PUB_USER_ID} HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498\|vMbwgag2gKhEvPkWgyiK
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/mediavine?exid=6120f800-992e-11ee-8a65-3f15d911ca60us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dapn%26i%3D%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=2638779048715878353
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid_lu=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_1296d48b0e654caba2d72; CDIPARTNERS=%7B%221%22%3A%2220231212%22%7D
Source: global traffic	HTTP traffic detected: GET /pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ssbsync.smartadserver.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-CXt61zNBpKUt1.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%20AE4A8C3D-1096-459A-B091-2BADD5009F52&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/AE4A8C3D-1096-459A-B091-2BADD5009F52?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=86d0f74f-3d90-871b-ad46-669e190fc8a4&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A1rhKsjaRkteiTTzE0HaIE4\|t
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=1---&ts=1702413499838.7&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71
Source: global traffic	HTTP traffic detected: GET /usersync?b=adf&i=8152669554817989381&gdpr=&gdpr_consent= HTTP/1.1Host: rtb.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /ups/58350/sync?redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u=wa1Gajuky8DdE2iDg0B6; g=wa1Gajuky8DdE2iDg0B6_1702413500542; ts=1702413500
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=sovrn&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=Hz32hLZHBFKxs3xrQUqrw0Qb HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=smartmedia&partnerId=2527372694113908282&gdpr=0&gdpr_consent= HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync?b=sus&i=ZXjEvcCo5tEAAK927qYAAAAA HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /464246.gif?partner_uid=8bc0f454-ec7d-0a81-3231-64fa48a7629c HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update?cats=687,687,687,687,687 HTTP/1.1Host: sda.fyiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_sda=2023-12-12_687_15
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEFcZYvZrLd3rzdzlSqdT4SY&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; PugT=1702413501
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId= HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; PugT=1702413501
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072399&val=4050678938750962602 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498\|vMbwgag2gKhEvPkWgyiK
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073061&val=7558899468789434902&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID} HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=IAEoAg..
Source: global traffic	HTTP traffic detected: GET /usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237bIf-None-Match: "0bf6efeb88aee59f7b5c580ade5903179"
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AwbPq6dwREYYqZr4aa5dxqw; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /usersync?b=rth&i=V1qRjAw1eTvnuk3RzYeT6Du-qBGtYdD9FvwI8chbqsg&pi=gumgum&tc=1 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: 828ea6707d12e484b3921bd7195f251f.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDSYNC=18za~2fkk; A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
Source: global traffic	HTTP traffic detected: GET /sync?ssp=the33across&us_privacy=1--- HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid_lu=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d
Source: global traffic	HTTP traffic detected: GET /ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D HTTP/1.1Host: sync.colossusssp.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gtm_usr=77ed72d2-2d26-4504-96ec-f9c2a46444c1; lmg_r=15
Source: global traffic	HTTP traffic detected: GET /ps/?_=1702413499838.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId={PUB_USER_ID} HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=9bfa3b33-914e-4ccc-b6f8-0f92df65339b; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /ope-dmplite.js HTTP/1.1Host: cdn.opecloud.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=268 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /usersync?b=oth&i=y-i5Vemz9E2pcAB3qsj5sq4a92wTUal4GhEbBQ~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3571062816453612499566
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=de068b32-213a-3ce1-6d48-e409713c0344&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI
Source: global traffic	HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/mediavine?exid=6120f800-992e-11ee-8a65-3f15d911ca60us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
Source: global traffic	HTTP traffic detected: GET /polynomial-root-finding-with-the-jenkins-traub-algorithm/ HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:2%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413496.0.0.0; _ga=GA1.1.1980800170.1702413486; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; cto_bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA; cto_bidid=tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNNlk2bnJzaVNzWGpPb2xpRWUlMkZHUWpBJTNEJTNE; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:2%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413496.0.0.0; _ga=GA1.1.1980800170.1702413486; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; cto_bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA; cto_bidid=tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNNlk2bnJzaVNzWGpPb2xpRWUlMkZHUWpBJTNEJTNE; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A
Source: global traffic	HTTP traffic detected: GET /2WOFDurG0lJJ.js?ts=79188 HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:2%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413496.0.0.0; _ga=GA1.1.1980800170.1702413486; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; cto_bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA; cto_bidid=tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNNlk2bnJzaVNzWGpPb2xpRWUlMkZHUWpBJTNEJTNE; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.interactiveds.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: mathblog.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; cto_bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA; cto_bidid=tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNNlk2bnJzaVNzWGpPb2xpRWUlMkZHUWpBJTNEJTNE; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413595.0.0.0; _ga=GA1.1.1980800170.1702413486; mediavine_session={%22depth%22:3%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}
Source: global traffic	HTTP traffic detected: GET /usersync.min.js?s2sVersion=production HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7DIf-None-Match: W/"3217-18c55b94fd8"If-Modified-Since: Sun, 10 Dec 2023 21:54:17 GMT
Source: global traffic	HTTP traffic detected: GET /IDSau HTTP/1.1Host: www.interactiveds.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IDSau/ HTTP/1.1Host: www.interactiveds.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IDSau/ HTTP/1.1Host: interactiveds.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update?cats=687,687,687,687,687 HTTP/1.1Host: sda.fyiConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_sda=2023-12-12_687_20
Source: global traffic	HTTP traffic detected: GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1--- HTTP/1.1Host: lexicon.33across.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /usersync/sync?origin=https://mathblog.com&src=//exchange.mediavine.com&s2sVersion=production&mv_uuid=6120f800-992e-11ee-8a65-3f15d911ca60&version=invalidate-verizon-pushes&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22centro%22%3Atrue%2C%22emx_digital%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%7D HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /IDSau/wp-content/themes/twentyeleven/style.css HTTP/1.1Host: interactiveds.com.auConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://interactiveds.com.au/IDSau/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IDSau/wp-content/uploads/2013/01/cropped-DSC06269-c.jpg HTTP/1.1Host: interactiveds.com.auConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactiveds.com.au/IDSau/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA&cw=1&lsw=1&us_privacy=1--- HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
Source: global traffic	HTTP traffic detected: GET /esp.js HTTP/1.1Host: oa.openxcdn.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /update?cats=687,687,687,687,687 HTTP/1.1Host: sda.fyiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_sda=2023-12-12_687_25
Source: global traffic	HTTP traffic detected: GET /js/pandg-sdk.js HTTP/1.1Host: pghub.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs/27053452/beacon.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aax2/apstag.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /ope-dmplite.js HTTP/1.1Host: cdn.opecloud.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3571062816453612499566
Source: global traffic	HTTP traffic detected: GET /ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D HTTP/1.1Host: sync.colossusssp.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gtm_usr=77ed72d2-2d26-4504-96ec-f9c2a46444c1; lmg_r=15
Source: global traffic	HTTP traffic detected: GET /internal-cs/27053452/beacon.js HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId= HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi
Source: global traffic	HTTP traffic detected: GET /server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId={PUB_USER_ID} HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=9bfa3b33-914e-4ccc-b6f8-0f92df65339b; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; IDSYNC="18za~2fkk:19bx~2fkk"
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/mediavine?exid=6120f800-992e-11ee-8a65-3f15d911ca60us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
Source: global traffic	HTTP traffic detected: GET /pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=3zzUbmittUiV3rjzJy9H%7C1702339200000%7C0
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=1mahn14&ttd_puid=6120f800-992e-11ee-8a65-3f15d911ca60&ttd_tpi=1&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthe_trade_desk%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%25%25TDID%25%25 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=IAEoAg..
Source: global traffic	HTTP traffic detected: GET /usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fmathblog.com&pubid=38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA&cw=1&lsw=1&us_privacy=1--- HTTP/1.1Host: gum.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async_usersync?cbfn=queuePixels HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acdn.adnxs.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=2638779048715878353
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=jURFnvrSHaGY9&cb=0&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=triplelift&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3571062816453612499566 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=kargo&partnerId=0c8954a7-ffa8-19a4-1cc4-650bafbcd1f0&s2sVersion=production&uuid=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=9bfa3b33-914e-4ccc-b6f8-0f92df65339b HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=huddled_masses&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=77ed72d2-2d26-4504-96ec-f9c2a46444c1 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=verizon&partnerId=y-lx7NKpZE2uIevh65FgChwsUh2tPcpg85~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=mediagrid&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: de.tynt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=OTTukGV4xLvEI2PjCmMC3Q==; pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%227daaa56bb0%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%5D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=yieldmo&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3zzUbmittUiV3rjzJy9H&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=b9f5c7de-85f6-48cc-ba86-351b90373b6b&r=https%3A%2F%2Fa.tribalfusion.com%2Fi.match%3Fp%3Db12%26redirect%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537141727%2526val%253D%2524TF_USER_ID_ENC%2524%26u%3D%7BOPENX_ID%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_1296d48b0e654caba2d72; CDIPARTNERS=%7B%221%22%3A%2220231212%22%2C%22142%22%3A%2220231212%22%7D
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: interactiveds.com.auConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactiveds.com.au/IDSau/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=8a323469-881a-408a-9858-5975924b765a\|1702413502774
Source: global traffic	HTTP traffic detected: GET /IDSau/wp-content/themes/twentyeleven/images/search.png HTTP/1.1Host: interactiveds.com.auConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactiveds.com.au/IDSau/wp-content/themes/twentyeleven/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=2638779048715878353
Source: global traffic	HTTP traffic detected: GET /CookieSyncOpenX HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/openx/4d309b50-5a8f-0e8a-3da5-bde1d7844f38 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22zdxidn%22%3A%222069.80%22%7D
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU
Source: global traffic	HTTP traffic detected: GET /usersync.aspx?bsw_custom_parameter=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=0&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D440%26ssp%3Dthemediagrid%26user_id%3D%24UID HTTP/1.1Host: server.cpmstar.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/ox HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAB3wk7K8YkAABTAD88gJQ; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=502649 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyYi0xZmQzZWQzYTIzN2I=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=opx&ovsid=162ae2ad-8a3a-0601-0e07-9a67c3d39198 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3454150986930039084V10; data-mv=6120f800-992e-11ee-8a65-3f15d911ca60~~19
Source: global traffic	HTTP traffic detected: GET /cdn/prod/config?src=600&u=https%3A%2F%2Fmathblog.com&pubid=38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=502649 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=1DASsxNWMH7qY1-EP1FQ
Source: global traffic	HTTP traffic detected: GET /esp?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&rid=esp HTTP/1.1Host: oajs.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
Source: global traffic	HTTP traffic detected: GET /usersync/rubicon/ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=1DASsxNWMH7qY1-EP1FQ
Source: global traffic	HTTP traffic detected: GET /pixel.gif HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: 0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASABKAIyCwjAnfOHqNe9PBAFOAFaBzFtYWhuMTRgAg..
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=440&ssp=themediagrid&user_id=jzw3XABN4jyXhRljypiQ0 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /configs/38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1Host: config.aps.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /IDSau/wp-content/uploads/2013/01/cropped-DSC06269-c.jpg HTTP/1.1Host: interactiveds.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=rth&i=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=gumgum HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=jURFnvrSHaGY9&cb=1&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22sd%22%3A%22sidebar_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%2C%7B%22sd%22%3A%22content_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAB3wk7K8YkAABTAD88gJQ&r=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fbee_sync_partners%3Dsas%252Cpp%252Csyn%252Cox%26bee_sync_current_partner%3Dpm%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; PugT=1702378946
Source: global traffic	HTTP traffic detected: GET /match/bidswitch?id=${user_id}&gdpr=&consent=&usp=1---&ssp=gumgum2&bsw=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1Host: sync-dmp.mobtrakk.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.match?p=b12&redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537141727%26val%3D%24TF_USER_ID_ENC%24&u=d73dfa8f-b445-057f-1a13-5aee83e2fb78 HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxdkDsOxEAIQ%2B8ydQpgGMC52mrvHiWiweUzHxt%2BC7luTdlhW4BrRUy2iSokpHLDnoITZxuIlr0MdARzoFqpOVNCJhTSQf3kWU58iGlf0VOM9p3qxCfiqwdx0o30NIw8%2Fwd0uUyv
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=2638779048715878353 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D97%263pid%3DRX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OpenX.ashx HTTP/1.1Host: oxp.mxptint.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IDSau/wp-content/themes/twentyeleven/images/comment-bubble.png HTTP/1.1Host: interactiveds.com.auConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://interactiveds.com.au/IDSau/wp-content/themes/twentyeleven/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pdmp/b4/v2/pixel.gif?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&ref=&tref=&tz=-1&screen=1280x1024x24&dcRegion=us-east-1&cmpstatus=notrequired&e=%5B%5D&fpid=223e362f-211b-485a-8f8e-b769f2bcebb9 HTTP/1.1Host: pdmp.tagger.opecloud.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=opx&i=293b2f42-092f-04b7-0a33-f4e4b96c0202 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=jURFnvrSHaGY9&cb=0&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /usersync?b=dit&i=di_1296d48b0e654caba2d72 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=1---&ts=1702413605897.5&ri=70&ru=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fcm%3Fid%3Dc6a5ba0d-ce02-41bd-a1ea-842c68bd5108%26ph%3D8f5ed5d4-642c-4222-968a-d709c87ac3c8%26us_privacy%3D%24%7BUS_PRIVACY%7D%26r%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D70%2526external_user_id%253D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /usersync?b=vnt&i=8a323469-881a-408a-9858-5975924b765a HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=8.20.0&referrer=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&tmax=2801&us_privacy=1--- HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3571062816453612499566
Source: global traffic	HTTP traffic detected: GET /v1/targeting?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&fpid=223e362f-211b-485a-8f8e-b769f2bcebb9&tenant=b4 HTTP/1.1Host: pdmp.profiles.tagger.opecloud.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=OPENX&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537072979%26val%3D_wfivefivec_ HTTP/1.1Host: i.w55c.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=1 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync?bee_sync_partners=sas%2Cpp%2Csyn%2Cox&bee_sync_current_partner=pm&bee_sync_initiator=ox&bee_sync_hop_count=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAB3wk7K8YkAABTAD88gJQ; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /bidRequest/?s2sVersion=production HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=kargo&partnerId=0c8954a7-ffa8-19a4-1cc4-650bafbcd1f0&s2sVersion=production&uuid=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=f0v35ew&ttd_tpi=1&us_privacy=1--- HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASABKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=verizon&partnerId=y-lx7NKpZE2uIevh65FgChwsUh2tPcpg85~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /sync?nid=33across&us_privacy=1--- HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=mediagrid&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?plm=5 HTTP/1.1Host: google-bidout-d.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
Source: global traffic	HTTP traffic detected: GET /ps/?_=1702413605897.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=9bfa3b33-914e-4ccc-b6f8-0f92df65339b HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /esp?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&rid=esp HTTP/1.1Host: oajs.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mathblog.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoqIf-None-Match: W/"55-muGH0vcZs6k0igZH/WpVPIvDE88"
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=104&us_privacy=1---&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D1---%26xi%3D45%26xu%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%220.1.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Education%22%2C%22subcategory%22%3A%22Education%22%7D HTTP/1.1Host: feed.pghub.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=1---&ts=1702413605897.3&ri=2&ru=https%3A%2F%2Fssum-sec.casalemedia.com%2Fusermatchredir%3Fs%3D191740%26us_privacy%3D%24%7BUS_PRIVACY%7D%26cb%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D2%2526external_user_id%253D HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /usersync?b=oth&i=y-i5Vemz9E2pcAB3qsj5sq4a92wTUal4GhEbBQ~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=openx&gdpr=0 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
Source: global traffic	HTTP traffic detected: GET /ps/?us_privacy=1---&ts=1702413605897.7&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1Host: data.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASABKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /cksync.php?type=opx&ovsid=162ae2ad-8a3a-0601-0e07-9a67c3d39198 HTTP/1.1Host: contextual.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3454150986930039084V10; data-mv=6120f800-992e-11ee-8a65-3f15d911ca60~~19; data-o=162ae2ad-8a3a-0601-0e07-9a67c3d39198~~3
Source: global traffic	HTTP traffic detected: GET /match/bidswitch?id=%24%7Buser_id%7D&gdpr=&consent=&usp=1---&ssp=gumgum2&bsw=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&chk=1 HTTP/1.1Host: sync-dmp.mobtrakk.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chk=1
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b12&redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537141727%26val%3D%24TF_USER_ID_ENC%24&u=d73dfa8f-b445-057f-1a13-5aee83e2fb78 HTTP/1.1Host: s.tribalfusion.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aNnoeUyg6ArrA7uaPUhZcQ4dqm3SS2GAUsmyC66r3
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D92%263pid%3D%24UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=2638779048715878353
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=23&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=c6a5ba0d-ce02-41bd-a1ea-842c68bd5108&ph=8f5ed5d4-642c-4222-968a-d709c87ac3c8&us_privacy=1---&r=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D70%26external_user_id%3D HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558355&ev=1&rurl=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=4trFhcvjylTg; pb_rtb_ev=3-1oif\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60; INGRESSCOOKIE=185d6ef7c41ed78f
Source: global traffic	HTTP traffic detected: GET /tum?umid=2 HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: auid=863968679737; aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+/uGdmVyc2lvbsL7
Source: global traffic	HTTP traffic detected: GET /usersync?b=zem&i=1DASsxNWMH7qY1-EP1FQ&us_privacy=1--- HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /77781087eb9a0621642f9ebec6beb8d1.gif?puid=[UID]&redir=[RED]&gdpr=0&gdpr_consent= HTTP/1.1Host: cs.krushmedia.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/pr?exlist=gg&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=ggAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=gumgum&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /cookie/?ssp=7 HTTP/1.1Host: dsp.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072954&val=AAAFpUUg-oxSbgNMk9I8AAAAAAA&expiration=1702500006&nuid={OX_USER_ID}&is_secure=true HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
Source: global traffic	HTTP traffic detected: GET /pixel/p-CXt61zNBpKUt1.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EBcBDQHSKoir0QA; mc=6578c4bd-6486d-f7b32-08b36
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=185&cm=Hz32hLZHBFKxs3xrQUqrw0Qb&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent= HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=rubicon&uid=LQ2T1KDU-17-IBG6 HTTP/1.1Host: s2s.t13.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073059&val=Q7557000061611676171 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
Source: global traffic	HTTP traffic detected: GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=jURFnvrSHaGY9&cb=1&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22sd%22%3A%22sidebar_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%2C%7B%22sd%22%3A%22content_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1Host: aax.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2527372694113908282
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537113484&val=8152669554817989381 HTTP/1.1Host: eu-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
Source: global traffic	HTTP traffic detected: GET /x/ae12848777b41970a5f2?gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=rubicon&partnerId=LQ2T1KDU-17-IBG6 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=thirty_three_across&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=212377533762873 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=4884872&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607
Source: global traffic	HTTP traffic detected: GET /merge?pid=97&3pid=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
Source: global traffic	HTTP traffic detected: GET /ps/?xi=1&xu=LQ2T1KDU-17-IBG6 HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=2638779048715878353 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /ps/?ri=102&ru=https%3A%2F%2Fcms-xch-chicago.33across.com%2Fmatch%3Fbidder_id%3D102%26ttl%3D1705005607%26external_user_id%3D3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /IDSau/wp-content/themes/twentyeleven/images/search.png HTTP/1.1Host: interactiveds.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=8.20.0&referrer=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&tmax=2801&us_privacy=1--- HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3571062816453612499566
Source: global traffic	HTTP traffic detected: GET /pdmp/b4/v2/pixel.gif?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&ref=&tref=&tz=-1&screen=1280x1024x24&dcRegion=us-east-1&cmpstatus=notrequired&e=%5B%5D&fpid=223e362f-211b-485a-8f8e-b769f2bcebb9 HTTP/1.1Host: pdmp.tagger.opecloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&ei=OPENX&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537072979%26val%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=ViN9mkBO1Rd9xZ5
Source: global traffic	HTTP traffic detected: GET /usersync/rubicon/LQ2T1KDU-17-IBG6 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?plm=5 HTTP/1.1Host: google-bidout-d.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE
Source: global traffic	HTTP traffic detected: GET /redir?partneruserid=AAB3wk7K8YkAABTAD88gJQ&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fbee_sync_partners%3Dpp%252Csyn%252Cox%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2527372694113908282
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=440&ssp=themediagrid&user_id=jzw3XABN4jyXhRljypiQ0 HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /esp?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&rid=esp HTTP/1.1Host: oajs.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=1 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc#1702413607708
Source: global traffic	HTTP traffic detected: GET /usersync?b=opx&i=293b2f42-092f-04b7-0a33-f4e4b96c0202 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537116306&val=R35CA9_10D97F8E3_7A5609BE HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=rubicon&uid=LQ2T1KDU-17-IBG6 HTTP/1.1Host: prebid-s2s.media.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3454150986930039084V10; data-mv=6120f800-992e-11ee-8a65-3f15d911ca60~~19; data-o=162ae2ad-8a3a-0601-0e07-9a67c3d39198~~3
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=179872 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
Source: global traffic	HTTP traffic detected: GET /usersync?b=dit&i=di_1296d48b0e654caba2d72 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=104&partneruserid=LQ2T1KDU-17-IBG6 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2527372694113908282
Source: global traffic	HTTP traffic detected: GET /ps/?xi=120&xu=GH_JvDj8VjdvrBlOavHmp2aBmNQ&us_privacy=1--- HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=23&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25#1702413608270
Source: global traffic	HTTP traffic detected: GET /IDSau/wp-content/themes/twentyeleven/images/comment-bubble.png HTTP/1.1Host: interactiveds.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
Source: global traffic	HTTP traffic detected: GET /usersync?b=vnt&i=8a323469-881a-408a-9858-5975924b765a HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /usersync?b=pln&i=4trFhcvjylTg&ev=1&pid=558355 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=104&us_privacy=1---&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D1---%26xi%3D45%26xu%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=c2de9d03-71b9-4aab-a691-2cd3acac0faf#1702413608300
Source: global traffic	HTTP traffic detected: GET /tum?tpid=22&uid=a0e6c68f-8dbd-0afb-3786-0e94c1983b43&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537123500%26val%3D___AUID___ HTTP/1.1Host: openx-ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: auid=863968679737; aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+/uGdmVyc2lvbsL7
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=81&gdpr=0 HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2527372694113908282
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=openx&gdpr=0 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
Source: global traffic	HTTP traffic detected: GET /tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%220.1.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Education%22%2C%22subcategory%22%3A%22Education%22%7D HTTP/1.1Host: pandg.tapad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072954&val=AAAFpUUg-oxSbgNMk9I8AAAAAAA&expiration=1702500006&nuid={OX_USER_ID}&is_secure=true HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDtpvE
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=rubicon&uid=LQ2T1KDU-17-IBG6 HTTP/1.1Host: s2s.t13.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uids=eyJ1aWRzIjp7fSwidGVtcFVJRHMiOnsicnViaWNvbiI6eyJ1aWQiOiJMUTJUMUtEVS0xNy1JQkc2IiwiZXhwaXJlcyI6IjIwMjMtMTItMjZUMjA6NDA6MDguNzE5NjkwNDEyWiJ9fX0=
Source: global traffic	HTTP traffic detected: GET /cookiesyncendpoint?biddername=5&auid=&key=LQ2T1KDU-17-IBG6 HTTP/1.1Host: sync.aniview.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/ae12848777b41970a5f2?gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
Source: global traffic	HTTP traffic detected: GET /w/user.sync?ptrid=14&userid=LQ2T1KDU-17-IBG6 HTTP/1.1Host: match.sync.ad.cpe.dotomi.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DotomiTest=4e0e82958e5611ea
Source: global traffic	HTTP traffic detected: GET /sn.ashx HTTP/1.1Host: rbp.mxptint.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000000000000000000000000000006578C527
Source: global traffic	HTTP traffic detected: GET /v1/targeting?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&fpid=223e362f-211b-485a-8f8e-b769f2bcebb9&tenant=b4 HTTP/1.1Host: pdmp.profiles.tagger.opecloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?aid=21479&id=LQ2T1KDU-17-IBG6 HTTP/1.1Host: cs.minutemedia-prebid.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/openx HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/rubicon HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs?aid=11590&id=LQ2T1KDU-17-IBG6 HTTP/1.1Host: cs.yellowblue.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073059&val=Q7557000061611676171 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDtpvE
Source: global traffic	HTTP traffic detected: GET /merge?pid=27&3pid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
Source: global traffic	HTTP traffic detected: GET /merge?pid=92&3pid=2638779048715878353&gdpr=0&gdpr_consent= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
Source: global traffic	HTTP traffic detected: GET /usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0 HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /match?liv=h&us_privacy=1---&bidder_id=70&external_user_id=a86d875c-ffb1-0c0e-017f-ebd97b68911b HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /pixel.gif HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D90%26external_user_id%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=2638779048715878353
Source: global traffic	HTTP traffic detected: GET /bidRequest/?s2sVersion=production HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16&gdpr=0&gdpr_consent= HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
Source: global traffic	HTTP traffic detected: GET /usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=gumgum&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /rtv/012310301456000/amp4ads-v0.mjs HTTP/1.1Host: cdn.ampproject.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=191740&us_privacy=1---&cb=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D2%26external_user_id%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537141727&val=18072662090765666652 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDtpvE
Source: global traffic	HTTP traffic detected: GET /merge?pid=84&3pid=ZXjFKB8auyNdakE1Q8hBrAGq HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=30&external_user_id=LQ2T1KDU-17-IBG6&ts=1702413609&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=rubicon&partnerId=LQ2T1KDU-17-IBG6 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Rubicon?exid=LQ2T1KDU-17-IBG6 HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
Source: global traffic	HTTP traffic detected: GET /usersync?b=sad&i=2527372694113908282 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /rb_match HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=EAF92472013E4E6D9A751C1DA567BFFF
Source: global traffic	HTTP traffic detected: GET /merge?pid=43&gdpr=0&gdpr_consent=&us_privacy=&3pid=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072979&val=ViN9mkBO1Rd9xZ5 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.t1s7rZvswwvDtpsvv5vE
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537113484&val=8152669554817989381 HTTP/1.1Host: eu-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.t1s7rZvswwvDtpsvv5vE
Source: global traffic	HTTP traffic detected: GET /bid-engine/cs/377c7998bb9f42e5aea0416c9dac091f/v1?rd=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537146931%26val%3D%24UID HTTP/1.1Host: openx.adhaven.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=oth&i=y-i5Vemz9E2pcAB3qsj5sq4a92wTUal4GhEbBQ~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=thirty_three_across&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=212377533762873 HTTP/1.1Host: exchange.mediavine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /merge?pid=97&3pid=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005
Source: global traffic	HTTP traffic detected: GET /sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA& HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3571062816453612499566
Source: global traffic	HTTP traffic detected: GET /polynomial-root-finding-with-the-jenkins-traub-algorithm/ HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413595.0.0.0; _ga=GA1.1.1980800170.1702413486; mediavine_session={%22depth%22:3%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; cto_bundle=onR1gl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkxFZWp5Sjh0THdhV3h6Z09Lalc5T1V3cSUyRkRvanhXekdLTGJCS1F4THRWcTdHZTBUQnlEZUlqeDhaZEdGJTJCcm1NRnVjUWM5Vko2elZzRzI0dGlnalduWVpUYUVlelR5JTJGRGVPZWhGNm5uMmFsVmpBZ2JFWEtWNXRudE9BJTJCemxDOHl3JTNEJTNE; cto_bidid=p16MSF8lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNSDBWeTgwSCUyQkdMZDExa2N4RXliT245VXpHQzJnbUxpcUJWaVl6UWZlNm5NJTNE; TAPAD=%7B%22id%22%3A%226bba3ea6-2fb6-4f4c-a1fa-4873c1b3a0ff%22%7D
Source: global traffic	HTTP traffic detected: GET /usersync?b=zem&i=1DASsxNWMH7qY1-EP1FQ&us_privacy=1--- HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=6578c4bd-6486d-f7b32-08b36; d=EGkBEwHSKt-owQqPoQA
Source: global traffic	HTTP traffic detected: GET /cm/api/openx HTTP/1.1Host: dmp.brand-display.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
Source: global traffic	HTTP traffic detected: GET /html/usersync.html?cb=https%3A%2F%2Fcs.krushmedia.com%2F462e2b5850cd99fa168d581296d0f392.gif%3Fpuid%3D%5BUSER_ID%5D HTTP/1.1Host: ad-cdn.technoratimedia.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=457&user_id=MzFlNmI4MzI0ZWQzZmEyNw&gdpr=&gdpr_consent=&us_privacy=1---&ssp=gumgum2&bsw_param=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /esp?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&rid=esp HTTP/1.1Host: oajs.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvEIf-None-Match: W/"55-muGH0vcZs6k0igZH/WpVPIvDE88"
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=21463991&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607
Source: global traffic	HTTP traffic detected: GET /cookie-sync?bee_sync_partners=pp%2Csyn%2Cox&bee_sync_current_partner=sas&bee_sync_initiator=ox&bee_sync_hop_count=2&userid=2527372694113908282 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAB3wk7K8YkAABTAD88gJQ; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
Source: global traffic	HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aCnsPCO5nP87PRo7TGr724PPWXk4aGSjVaiSAdW8yDlTXIWD1lZahNKhwgeMpS4uTTHXis6VHrUHyg7Bs
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc#1702413607708; _ssuma=eyIxNSI6MTcwMjQxMzYwOTUwMH0
Source: global traffic	HTTP traffic detected: GET /sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D HTTP/1.1Host: vop.sundaysky.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/redirect?partner=pubmatic&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1Host: exchange.mediavine.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
Source: global traffic	HTTP traffic detected: GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; matchopenx=5
Source: global traffic	HTTP traffic detected: GET /match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e HTTP/1.1Host: match.justpremium.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-e4m3Yko6bFYVc.gif?idmatch=0 HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EBcBDQHSKoir0QA; mc=6578c4bd-6486d-f7b32-08b36
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
Source: global traffic	HTTP traffic detected: GET /sync?ssp=fmx&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=102&ttl=1705005607&external_user_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1Host: cms-xch-chicago.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /tum?tpid=22&uid=a0e6c68f-8dbd-0afb-3786-0e94c1983b43&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537123500%26val%3D___AUID___ HTTP/1.1Host: openx-ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: auid=863968679737; aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+/uGdmVyc2lvbsL7
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=1DASsxNWMH7qY1-EP1FQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyYi0xZmQzZWQzYTIzN2I=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537116306&val=R35CA9_10D97F8E3_7A5609BE HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=120&external_user_id=GH_JvDj8VjdvrBlOavHmp2aBmNQ&ts=1702413610&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: events-ssc.33across.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33XAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=87 HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2527372694113908282; csync=104:LQ2T1KDU-17-IBG6
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=rubicon&uid=LQ2T1KDU-17-IBG6 HTTP/1.1Host: prebid-s2s.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3454150986930039084V10; data-mv=6120f800-992e-11ee-8a65-3f15d911ca60~~19; data-o=162ae2ad-8a3a-0601-0e07-9a67c3d39198~~3; uids=eyJ1aWRzIjp7fSwidGVtcFVJRHMiOnsicnViaWNvbiI6eyJ1aWQiOiJMUTJUMUtEVS0xNy1JQkc2IiwiZXhwaXJlcyI6IjIwMjMtMTItMjZUMjA6NDA6MDkuNTQ0MDYxNzI2WiJ9fSwiYmRheSI6IjIwMjMtMTItMTJUMjA6NDA6MDkuNTQzMjg4NTE2WiIsImhvc3RfdWlkcyI6eyJtZWRpYW5ldCI6eyJ1aWQiOiIzNDU0MTUwOTg2OTMwMDM5MDg0VjEwIn19fQ==
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=4229144&p=156212&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; DPSync3=1702944000%3A265%7C1703548800%3A262_261_260_259_201_263%7C1702425600%3A248; SyncRTB3=1703548800%3A3_104_13_54_250_22_48_5_176_231_220_21_178_8_165_240_166_71_55_233%7C1703203200%3A63%7C1702944000%3A223_15_2
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=33525283&p=137711&s=137812&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; DPSync3=1702944000%3A265%7C1703548800%3A262_261_260_259_201_263%7C1702425600%3A248; SyncRTB3=1703548800%3A3_104_13_54_250_22_48_5_176_231_220_21_178_8_165_240_166_71_55_233%7C1703203200%3A63%7C1702944000%3A223_15_2
Source: global traffic	HTTP traffic detected: GET /merge?pid=83&3pid=LQ2T1KDU-17-IBG6&gdpr=0 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/openx HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=sovrn&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
Source: global traffic	HTTP traffic detected: GET /lj_match?r=1702413607293&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=EAF92472013E4E6D9A751C1DA567BFFF
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=560687&ev=1&rurl=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D390200%26nid%3D5120%26put%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=4trFhcvjylTg; INGRESSCOOKIE=185d6ef7c41ed78f; pb_rtb_ev=3-1oif\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60\|7bq.0.1
Source: global traffic	HTTP traffic detected: GET /merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
Source: global traffic	HTTP traffic detected: GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1Host: pmp.mxptint.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000000000000000000000000000006578C527
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
Source: global traffic	HTTP traffic detected: GET /sync?pid=187&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.bfmio.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?cn=5529&ttt=1&dpui=LQ2T1KDU-17-IBG6 HTTP/1.1Host: e.serverbid.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.match?p=b10&u={rubicon_user_token}&redirect=https%3A//pixel.rubiconproject.com/tap.php%3Fv%3D111756%26nid%3D3856%26put%3D%24TF_USER_ID_ENC%24%26expires%3D180 HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aCnsPCO5nP87PRo7TGr724PPWXk4aGSjVaiSAdW8yDlTXIWD1lZahNKhwgeMpS4uTTHXis6VHrUHyg7Bs
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=81&gdpr=0 HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2527372694113908282
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
Source: global traffic	HTTP traffic detected: GET /cookie-sync/svr?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AAB3wk7K8YkAABTAD88gJQ; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /bid-engine/cs/377c7998bb9f42e5aea0416c9dac091f/v1?rd=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537146931%26val%3D%24UID HTTP/1.1Host: openx.adhaven.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/setuid?bidder=rubicon&gdpr=&gdpr_consent=&uid=LQ2T1KDU-17-IBG6 HTTP/1.1Host: sync.ex.coConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537123500&val=863968679737 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=2638779048715878353
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_1296d48b0e654caba2d72; CDIPARTNERS=%7B%221%22%3A%2220231212%22%2C%22142%22%3A%2220231212%22%7D
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540394477&val=2527372694113908282&gdpr=0&gdpr_consent= HTTP/1.1Host: u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; DPSync3=1702944000%3A265%7C1703548800%3A262_261_260_259_201_263%7C1702425600%3A248; SyncRTB3=1703548800%3A3_104_13_54_250_22_48_5_176_231_220_21_178_8_165_240_166_71_55_233%7C1703203200%3A63%7C1702944000%3A223_15_2
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=2289741&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; DPSync3=1702944000%3A265%7C1703548800%3A262_261_260_259_201_263%7C1702425600%3A248; SyncRTB3=1703548800%3A3_104_13_54_250_22_48_5_176_231_220_21_178_8_165_240_166_71_55_233%7C1703203200%3A63%7C1702944000%3A223_15_2
Source: global traffic	HTTP traffic detected: GET /match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e HTTP/1.1Host: match.justpremium.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASACKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=8a323469-881a-408a-9858-5975924b765a\|1702413502774
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D HTTP/1.1Host: vop.sundaysky.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rubiconmatch HTTP/1.1Host: match.adsby.bidtheatre.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&url=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D32128%26nid%3D2915%26put%3D[sas_uid] HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pid=2527372694113908282; csync=104:LQ2T1KDU-17-IBG6
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=157108&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63
Source: global traffic	HTTP traffic detected: GET /dsp/google/cookiematch/beacon?gdpr=0&gdpr_consent= HTTP/1.1Host: ap.lijit.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; ljtrtb=eJyrVrI0V7JSCorQTUm2SDRJNTPTNTayMNI1MUgz1020MDXXTTY0NzNJSQFKGifpGhiYKtUCAFmVDRE%3D
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%252C%252C%25257B%252522architecture%252522%25253A%252522x86%252522%25252C%252522bitness%252522%25253A%25252264%252522%25252C%252522brands%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Not_A%252BBrand%252522%25252C%252522version%252522%25253A%25252299%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Google%252BChrome%252522%25252C%252522version%252522%25253A%252522109%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522109%252522%25257D%25255D%25252C%252522fullVersionList%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Not_A%252BBrand%252522%25252C%252522version%252522%25253A%25252299.0.0.0%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Google%252BChrome%252522%25252C%252522version%252522%25253A%252522109.0.5414.120%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522109.0.5414.120%252522%25257D%25255D%25252C%252522mobile%252522%25253Afalse%25252C%252522model%252522%25253A%252522%252522%25252C%252522platform%252522%25253A%252522Windows%252522%25252C%252522platformVersion%252522%25253A%2525220.1.0%252522%25257D&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pandg.tapad.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASACKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=openx&gdpr=0 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:ViN9mkBO1Rd9xZ5&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63; KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=GH_JvDj8VjdvrBlOavHmp2aBmNQ&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63; KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /web/cookie/bidswitch/sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1Host: sonata-notifications.taptapnetworks.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=1389&tp=STSC&tpid=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%26partner_url%3Dhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D16%25263pid%253D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ce.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mathblog.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413595.0.0.0; _ga=GA1.1.1980800170.1702413486; mediavine_session={%22depth%22:3%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; cto_bundle=onR1gl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkxFZWp5Sjh0THdhV3h6Z09Lalc5T1V3cSUyRkRvanhXekdLTGJCS1F4THRWcTdHZTBUQnlEZUlqeDhaZEdGJTJCcm1NRnVjUWM5Vko2elZzRzI0dGlnalduWVpUYUVlelR5JTJGRGVPZWhGNm5uMmFsVmpBZ2JFWEtWNXRudE9BJTJCemxDOHl3JTNEJTNE; cto_bidid=p16MSF8lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNSDBWeTgwSCUyQkdMZDExa2N4RXliT245VXpHQzJnbUxpcUJWaVl6UWZlNm5NJTNE; TAPAD=%7B%22id%22%3A%226bba3ea6-2fb6-4f4c-a1fa-4873c1b3a0ff%22%7D
Source: global traffic	HTTP traffic detected: GET /tum?tpid=22&uid=a0e6c68f-8dbd-0afb-3786-0e94c1983b43&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537123500%26val%3D___AUID___ HTTP/1.1Host: openx-ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: auid=863968679737; aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7+4Z2ZXJzaW9uwvs="
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
Source: global traffic	HTTP traffic detected: GET /usersync?b=pbm&i=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D&_cvt=t HTTP/1.1Host: vop.sundaysky.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sskyu=d6.c5bd044156be4b89a58d19d2b5fdecfd; sskyCreationTime=1702413611975
Source: global traffic	HTTP traffic detected: GET /b?c1=2&c2=27053452&cs_it=b8&cv=4.0.0%2B2301240627&ns__t=1702413604442&ns_c=UTF-8&c7=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&c8=Polynomial%20Root-finding%20with%20the%20Jenkins-Traub%20Algorithm&c9= HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=66226892&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=a54b90ee-992e-11ee-aedd-513fc3dc3f08 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63
Source: global traffic	HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aynvfMRwEfES2QVoqavnPw4nsa7hbvm5RZa9DZa8PZbYltbZbZaypJEPsyBPtmnW6v5Pn0poZaIrj3k95b1YYBYHPQoJIYVGkZap4MSWnpC7nPhgFUpjxPIaZaNZa
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?plm=3&ph=b9be4168-e450-46a9-a2f2-8e12fc5e4de6 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
Source: global traffic	HTTP traffic detected: GET /usersync?b=rth&i=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=gumgum HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537146931&val=4c_0f2fd50c-4ce9-46bf-8fbf-4c75ac6b55dc HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=539237773&val=985ce834-0b5c-1dd8-f7d7179d HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us-u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
Source: global traffic	HTTP traffic detected: GET /sync/triplelift/3571062816453612499566?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=6578c4bd-6486d-f7b32-08b36; d=ELoBEgHSKsujC8_8EA
Source: global traffic	HTTP traffic detected: GET /usersync?b=bsw&i=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=3571062816453612499566
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc#1702413607708; _ssuma=eyI0NSI6MTcwMjQxMzYxMTk3OSwiMTUiOjE3MDI0MTM2MDk1MDB9
Source: global traffic	HTTP traffic detected: GET /usersync?b=zem&i=1DASsxNWMH7qY1-EP1FQ&gdpr=0 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU
Source: global traffic	HTTP traffic detected: GET /bh/rtset?ev=AAB3wk7K8YkAABTAD88gJQ&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D2527372694113908282%26bee_sync_partners%3Dsyn%252Cox%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D3 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://u.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=4trFhcvjylTg; INGRESSCOOKIE=185d6ef7c41ed78f; pb_rtb_ev=3-1oif\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60\|7bq.0.1
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?pn_id=rc&id=LQ2T1KDU-17-IBG6 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=3zzUbmittUiV3rjzJy9H%7C1702339200000%7C0
Source: global traffic	HTTP traffic detected: GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIoQEQw-eI_sUxCgoIkQIQw-eI_sUxCgoItAIQw-eI_sUxCgoI5gEQw-eI_sUxCgoIhwIQw-eI_sUxCgoItwIQw-eI_sUxCgkIOhDD54j-xTEKCgiMAhDD54j-xTEKCQhfEMPniP7FMQoJCB8Qw-eI_sUx; tluid=3571062816453612499566
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=a4552c04-658f-4c5b-8dc8-e09b6c6982fb&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; PugT=1702413613; chkChromeAb67Sec=3; pi=156212:4; DPSync3=1703548800%3A262_261_201_263_256_260_259_258%7C1703376000%3A257%7C1702425600%3A255_248%7C1702944000%3A265; SyncRTB3=1703635200%3A35%7C1707523200%3A69%7C1704931200%3A224%7C1703548800%3A250_240_233_7_165_96_214_54_176_56_13_220_21_166_46_99_3_249_243_81_48_231_178_71_55_5_264_104_22_8_234_238%7C1703203200%3A63%7C1702944000%3A223_38_15_2
Source: global traffic	HTTP traffic detected: GET /encrypted-signals/encrypted-tag-g.js HTTP/1.1Host: invstatic101.creativecdn.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mathblog.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASACKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=2638779048715878353 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b

Source: chromecache_682.3.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/mathblogcom/" /> equals www.facebook.com (Facebook)
Source: chromecache_625.3.dr, chromecache_776.3.dr	String found in binary or memory: return b}sC.F="internal.enableAutoEventOnTimer";var yc=ea(["data-gtm-yt-inspected-"]),tC=["www.youtube.com","www.youtube-nocookie.com"],uC,vC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+962; SOCS=CAESHAgCEhJnd3NfMjAyMzA4MDEtMF9SQzMaAmVuIAEaBgiAi8amBg; AEC=Ad49MVFCiIL4dH3NdVUPM9qw5tUX8unGaMgN_qTAwv0uoiOzKAI-JttOlg; __Secure-ENID=14.SE=LM-NkPAvbCtuNhK73uRS1U27fKMegq7R6_Ue_GnOGI1dekNKandC6Dto1fKS9ocnnyUmf2MAXGM269U9HhkgndYLxWy3FrZaGzh_yODdv1ouU12fBCNmRhMUwM3dzKbRlYRnbKhIQz9fV5WGdCRRjXQx5RGii6FbIw100Hc46oWQ6bysmy2hqA

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Tue, 12 Dec 2023 20:38:21 GMTContent-Type: text/htmlContent-Length: 581Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 12 Dec 2023 20:40:06 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 315Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 12 Dec 2023 20:40:07 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 12 Dec 2023 20:40:11 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 12 Dec 2023 20:40:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 12 Dec 2023 20:40:31 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 12 Dec 2023 20:40:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Tue, 12 Dec 2023 20:40:46 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 8348c86f8af2da9f-MIA
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 12 Dec 2023 20:40:47 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 12 Dec 2023 20:40:48 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff

Source: chromecache_537.3.dr	String found in binary or memory: http://ad.doubleclick.net/viewad/817-grey.gif
Source: chromecache_778.3.dr	String found in binary or memory: http://callmecavs.github.io/layzr.js/
Source: vbaProject.bin	String found in binary or memory: http://chrisrae.com/vba
Source: chromecache_473.3.dr	String found in binary or memory: http://createjs.com/
Source: chromecache_630.3.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_456.3.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_456.3.dr	String found in binary or memory: http://interactiveds.com.au/IDSau/xmlrpc.php
Source: chromecache_493.3.dr	String found in binary or memory: http://meyerweb.com/eric/tools/css/reset/index.html
Source: chromecache_608.3.dr, chromecache_809.3.dr	String found in binary or memory: http://mythemeshop.com/
Source: chromecache_608.3.dr, chromecache_809.3.dr	String found in binary or memory: http://mythemeshop.com/plugins/wp-review-pro/
Source: chromecache_682.3.dr	String found in binary or memory: http://rdf.data-vocabulary.org/#
Source: chromecache_682.3.dr	String found in binary or memory: http://schema.org/Person
Source: chromecache_533.3.dr	String found in binary or memory: http://schema.org/SiteNavigationElement
Source: chromecache_682.3.dr	String found in binary or memory: http://schema.org/UserComments
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: http://schema.org/WPFooter
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: http://schema.org/WPHeader
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: http://schema.org/WPSideBar
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: http://schema.org/WebPage
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: http://schema.org/WebSite
Source: chromecache_452.3.dr	String found in binary or memory: http://tap.rubiconproject.com/partner/agent/rubicon/channels.js?cb=oz_onPixelsLoaded
Source: ~DFE893A05C734ADDCC.TMP.0.dr, vbaProject.bin	String found in binary or memory: http://van-der-waals.pc.uni-koeln.de/q
Source: ~DFE893A05C734ADDCC.TMP.0.dr, vbaProject.bin	String found in binary or memory: http://van-der-waals.pc.uni-koeln.de/quartic/quartic.html
Source: chromecache_456.3.dr, chromecache_493.3.dr	String found in binary or memory: http://wordpress.org/
Source: chromecache_493.3.dr	String found in binary or memory: http://wordpress.org/extend/themes/twentyeleven
Source: chromecache_431.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_715.3.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_493.3.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_420.3.dr, chromecache_634.3.dr	String found in binary or memory: http://www.google.com
Source: ~DFE893A05C734ADDCC.TMP.0.dr, vbaProject.bin	String found in binary or memory: http://www.netlib.org/to
Source: ~DFE893A05C734ADDCC.TMP.0.dr, vbaProject.bin	String found in binary or memory: http://www.netlib.org/toms/493
Source: vbaProject.bin	String found in binary or memory: http://www.netlib.org/toms/493Co
Source: chromecache_473.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.html
Source: chromecache_781.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_420.3.dr, chromecache_634.3.dr	String found in binary or memory: https://07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com/fonts/toyotatype.c
Source: chromecache_420.3.dr, chromecache_634.3.dr	String found in binary or memory: https://07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com/icons/Ad-Choice-Ic
Source: chromecache_787.3.dr	String found in binary or memory: https://a.audrte.com/get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%
Source: chromecache_766.3.dr, chromecache_507.3.dr, chromecache_769.3.dr, chromecache_517.3.dr	String found in binary or memory: https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcod
Source: chromecache_766.3.dr, chromecache_507.3.dr, chromecache_769.3.dr, chromecache_517.3.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009F52
Source: chromecache_424.3.dr, chromecache_508.3.dr, chromecache_863.3.dr	String found in binary or memory: https://aax-us-east.amazon-adsystem.com
Source: chromecache_475.3.dr	String found in binary or memory: https://acdn.adnxs.com/dmp/async_usersync.html
Source: chromecache_660.3.dr	String found in binary or memory: https://ad.doubleclick.net/dbm/ad
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=
Source: chromecache_782.3.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=9&gdpr=0
Source: chromecache_475.3.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&
Source: chromecache_684.3.dr, chromecache_746.3.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fus
Source: chromecache_417.3.dr, chromecache_876.3.dr	String found in binary or memory: https://ads.stickyadstv.com/user-registering?dataProviderId=641&userId=a29a2e2d-5af0-0811-3bf6-e705c
Source: chromecache_579.3.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?gdpr=&gdpr_consent=&us_privacy=&redirectUri=https%3A%2F%2Fcookies.nex
Source: chromecache_475.3.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchang
Source: chromecache_682.3.dr	String found in binary or memory: https://akiti.ca
Source: chromecache_682.3.dr	String found in binary or memory: https://akiti.ca/
Source: chromecache_461.3.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_579.3.dr	String found in binary or memory: https://ap.lijit.com/pixel?redir=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dsovrn%2
Source: chromecache_475.3.dr	String found in binary or memory: https://ap.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702
Source: chromecache_749.3.dr	String found in binary or memory: https://apis.google.com/js/plusone.js
Source: chromecache_684.3.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_c
Source: chromecache_746.3.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=0&gdpr_
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52/gdpr=0/gdpr_
Source: chromecache_742.3.dr, chromecache_400.3.dr	String found in binary or memory: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode
Source: chromecache_684.3.dr, chromecache_746.3.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&rurl=https%3A%2F%2Fusersync.gumgum.com%2Fusersync
Source: chromecache_745.3.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=562539&ev=2b54fb5c-44a3-088a-25af-cc01d824051c&rurl=https%3A%
Source: chromecache_612.3.dr	String found in binary or memory: https://bpi.rtactivate.com/tag/?id=20909&user_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_co
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P
Source: chromecache_625.3.dr, chromecache_776.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_663.3.dr, chromecache_772.3.dr	String found in binary or memory: https://cdn.doubleverify.com/redirect/?host=
Source: chromecache_682.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/plugins/akismet/_inc/akismet-frontend.js
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/plugins/wp-review-pro/assets/css/wp-review-ie7.css
Source: chromecache_682.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/plugins/wp-review-pro/assets/css/wp-review.css
Source: chromecache_682.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/plugins/wp-review-pro/assets/js/jquery.appear.js
Source: chromecache_682.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/plugins/wp-review-pro/assets/js/jquery.knob.min.js
Source: chromecache_682.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/plugins/wp-review-pro/assets/js/main.js
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/plugins/wp-table-reloaded/css/datatables.css?ver=1.9.4
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/plugins/wp-table-reloaded/css/plugin.css?ver=1.9.4
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/themes/mts_schema/css/magnific-popup.css
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/themes/mts_schema/css/responsive.css
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/themes/mts_schema/images/nobg.png
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/themes/mts_schema/images/pattern13.png);
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/themes/mts_schema/js/customscript.js
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/themes/mts_schema/js/jquery.magnific-popup.min.js
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/themes/mts_schema/js/layzr.min.js
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/themes/mts_schema/style.css
Source: chromecache_682.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/uploads/2016/08/testing_up_to_huge_numbers-211x150.png
Source: chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-content/uploads/2018/03/G-300x200.png
Source: chromecache_682.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-includes/js/comment-reply.min.js
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-includes/js/jquery/jquery-migrate.min.js
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://cdn.mathblog.com/wp-includes/js/jquery/jquery.min.js
Source: chromecache_495.3.dr, chromecache_876.3.dr	String found in binary or memory: https://ce.lijit.com/merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16
Source: chromecache_495.3.dr	String found in binary or memory: https://ce.lijit.com/merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16&gdpr=0&gdpr_consent=
Source: chromecache_682.3.dr	String found in binary or memory: https://chretiens.republicains.neuf.fr/
Source: chromecache_745.3.dr	String found in binary or memory: https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=3
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_484.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0
Source: chromecache_805.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0
Source: chromecache_684.3.dr, chromecache_746.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyY
Source: chromecache_805.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm&gdpr=0
Source: chromecache_782.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_782.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZjI2OTU4ZjgtZTg0ZC02MjQ1LTc4YTgtYmViMG
Source: chromecache_816.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=rkqMPRCWRZqwkSut1QCfUg%3D%3
Source: chromecache_816.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_816.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=QUU0QThDM0QtMTA5Ni00NTlBLUIwOTEtMkJ
Source: chromecache_484.3.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_dbm&gdpr=0
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_787.3.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_420.3.dr, chromecache_634.3.dr	String found in binary or memory: https://code.createjs.com/1.0.0/createjs.min.js
Source: chromecache_745.3.dr	String found in binary or memory: https://cookies.nextmillmedia.com/sync?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D5
Source: chromecache_612.3.dr, chromecache_712.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://crb.kargo.com/api/v1/dsync/Martin?exid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_cons
Source: chromecache_684.3.dr, chromecache_746.3.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=gumgum
Source: chromecache_495.3.dr, chromecache_876.3.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=openx&gdpr=0
Source: chromecache_805.3.dr	String found in binary or memory: https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJn
Source: chromecache_579.3.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11364&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fcookies.nextmillmedi
Source: chromecache_657.3.dr	String found in binary or memory: https://developers.google.com/open-source/licenses/bsd
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https:
Source: chromecache_787.3.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.sm
Source: chromecache_745.3.dr	String found in binary or memory: https://dm-us.hybrid.ai/match?id=412&gdpr=0
Source: chromecache_417.3.dr, chromecache_876.3.dr	String found in binary or memory: https://dmp.brand-display.com/cm/api/openx
Source: chromecache_805.3.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.ne
Source: chromecache_579.3.dr	String found in binary or memory: https://eb2.3lift.com/getuid?gdpr=&cmp_cs=&us_privacy=&gpp=
Source: chromecache_475.3.dr	String found in binary or memory: https://eb2.3lift.com/getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.co
Source: chromecache_816.3.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=AE4A8C3D-1096-459A-B091-2BADD5009F52&dongle=u6nf&gdpr=0&gdp
Source: chromecache_504.3.dr	String found in binary or memory: https://esp.rtbhouse.com/encrypt
Source: chromecache_876.3.dr	String found in binary or memory: https://events-ssc.33across.com/match?liv=h&us_privacy=1---&bidder_id=70&external_user_id=a86d875c-f
Source: chromecache_684.3.dr	String found in binary or memory: https://exchange.mediavine.com/usersync/redirect?partner=gumgum&uuid=6120f800-992e-11ee-8a65-3f15d91
Source: chromecache_745.3.dr, chromecache_782.3.dr	String found in binary or memory: https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911
Source: chromecache_775.3.dr, chromecache_864.3.dr, chromecache_649.3.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_649.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_864.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2)
Source: chromecache_864.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv79oQ.woff2)
Source: chromecache_864.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvD9oS_a.woff2)
Source: chromecache_864.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2)
Source: chromecache_864.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2)
Source: chromecache_864.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB77TKx9.woff2
Source: chromecache_864.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBD7TA.woff2)
Source: chromecache_864.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBP7TKx9.woff2
Source: chromecache_864.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBT7TKx9.woff2
Source: chromecache_864.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etB_7TKx9.woff2
Source: chromecache_851.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcA.woff2)
Source: chromecache_851.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY5KcCsww.woff2)
Source: chromecache_851.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNXaxMICA.woff2)
Source: chromecache_851.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2)
Source: chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_596.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_596.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_596.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_596.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_596.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_596.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_596.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_596.3.dr, chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_596.3.dr, chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_596.3.dr, chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_596.3.dr, chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_596.3.dr, chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_596.3.dr, chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_596.3.dr, chromecache_544.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_709.3.dr	String found in binary or memory: https://github.com/conversant/pubcid.js
Source: chromecache_709.3.dr	String found in binary or memory: https://github.com/conversant/pubcid.js/blob/master/LICENSE
Source: chromecache_430.3.dr	String found in binary or memory: https://github.com/morr/jquery.appear/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://gocm.c.appier.net/pubmatic
Source: chromecache_660.3.dr	String found in binary or memory: https://googleads.g.doubleclick.net/dbm/ad
Source: chromecache_612.3.dr	String found in binary or memory: https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=AE4A8C3D-1096-459A-B091-2BADD5009F52
Source: chromecache_579.3.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dappnexus%26n
Source: chromecache_484.3.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=$
Source: chromecache_816.3.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_782.3.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://idsync.rlcdn.com/712188.gif?partner_uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_con
Source: chromecache_579.3.dr	String found in binary or memory: https://image8.pubmatic.com/AdServer/ImgSync?p=157577&gdpr=&gdpr_consent=&us_privacy=&pu=https%3A%2F
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?author=1
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?cat=1
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?feed=comments-rss2
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?feed=rss2
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?p=3
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?p=3#respond
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=12
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=13
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=14
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=15
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=16
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=17
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=18
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=23
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=74
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=78
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=86
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/?page_id=98
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/wp-content/themes/twentyeleven/js/html5.js
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/wp-content/themes/twentyeleven/style.css
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/wp-content/uploads/2013/01/cropped-DSC06269-c.jpg
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/wp-includes/wlwmanifest.xml
Source: chromecache_456.3.dr	String found in binary or memory: https://interactiveds.com.au/IDSau/xmlrpc.php?rsd
Source: chromecache_612.3.dr	String found in binary or memory: https://io.narrative.io/?companyId=673&id=pubmatic_id:AE4A8C3D-1096-459A-B091-2BADD5009F52
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR
Source: chromecache_612.3.dr, chromecache_712.3.dr, chromecache_528.3.dr	String found in binary or memory: https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_684.3.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent=
Source: chromecache_746.3.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_816.3.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_782.3.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=de068b32-213a-3ce1-6d48-e409713c0344&gdpr=0
Source: chromecache_816.3.dr	String found in binary or memory: https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=
Source: chromecache_684.3.dr, chromecache_746.3.dr	String found in binary or memory: https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dd
Source: chromecache_417.3.dr, chromecache_876.3.dr	String found in binary or memory: https://match.justpremium.com/match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e
Source: chromecache_816.3.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_612.3.dr, chromecache_712.3.dr, chromecache_528.3.dr	String found in binary or memory: https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/#/schema/person/bce55487c4c704f59e50c0b4967d923f
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/#/schema/person/image/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/#breadcrumb
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/#website
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/?s=
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/about-us/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/alan-schoenfeld-boundaries-effective-mathematics-thinking-teaching-learning/
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/author/binner/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/author/mgoldenberg/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/author/timlexen/
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/but-it-worked-in-the-computer-simulation/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/category/applied-math/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/category/basic-mathematics/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/category/books/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/category/general/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/category/history/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/category/math-education/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/category/math-news/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/category/probability-theory-and-statistics/
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/category/tutorial/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/category/uncategorized/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/dr-devlin-finds-fibonacci/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/finding-square-roots-without-estimating/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/james-grime-fool-maths/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/joe-rosenstein-art-discrete/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/keith-devlin-ambassador-mathematics-many-eras/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/mathematics-books/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/models-delving-deeper-division/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/page/2/
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/playing-with-mersenne-numbers/
Source: chromecache_682.3.dr, sharedStrings.bin	String found in binary or memory: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#breadcrumb
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#comments
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#primaryimage
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/privacy-policy/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/asymptotes/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/binomial-expansion/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/factoring/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/graphing-inequalities/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/how-to-calculate-slope/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/hyperbolas/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/interval-notation/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/inverse-functions/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/linear-programming/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/matrix-algebra/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/quadratic-formula/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/synthetic-division/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/algebra/variables-with-exponents/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/absolute-value/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/addition/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/arithmetic-sequence/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/decimals/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/distance-two-points/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/division/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/equations/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/estimation/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/fibonacci-sequence/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/fractions/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/how-to-find-the-mean/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/how-to-find-the-median/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/how-to-find-the-mode/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/logarithm/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/multiplication/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/negative-numbers/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/number-line/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/number-theory/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/order-of-operations/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/percentages/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/place-value/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/prime-factorization/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/probability/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/ratios/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/rounding/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/subtraction/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/arithmetic/whole-numbers/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/calculus/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/calculus/definite-integrals/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/calculus/improper-integrals/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/calculus/minima-and-maxima/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/angles/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/area-of-a-square/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/area/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/asa-triangles/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/circle/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/circumference/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/cone/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/congruent-shapes/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/cylinder/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/heptagon/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/hexagon/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/octagon/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/parallel-lines/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/parallelogram/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/pentagon/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/pi/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/polygon/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/pyramid/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/radian-measure/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/rectangle/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/rectangular-pyramid/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/rhombus/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/right-triangle/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/sas-triangle/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/sphere/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/ssa-triangle/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/sss-triangles/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/tessellations/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/trapezoid/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/geometry/triangles/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/theorems/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/theorems/bayes-theorem/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/theorems/pythagorean-theorem/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/trigonometry/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/trigonometry/law-of-cosines/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/trigonometry/law-of-sines/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/trigonometry/right-triangle-trig/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/trigonometry/trig-functions/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/trigonometry/trig-integrals/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/reference/trigonometry/trig-ratios/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/review-problem-solving-reasoning-discrete-mathematics/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/statistics/definitions/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/statistics/definitions/10-condition/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/statistics/definitions/95-confidence-interval/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/statistics/definitions/absolute-error/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/statistics/definitions/continuity-correction/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/statistics/definitions/continuity-correction/calculator/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/statistics/definitions/z-score/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/statistics/definitions/z-score/calculator/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/statistics/definitions/z-score/z-table/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/subtraction-standard-algorithm/
Source: chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/tiling-one-arc-sided-shape/
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/wp-admin/admin-ajax.php
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/wp-comments-post.php
Source: chromecache_682.3.dr	String found in binary or memory: https://mathblog.com/write-for-us/
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://mathblog.com/xmlrpc.php
Source: chromecache_814.3.dr, chromecache_830.3.dr, chromecache_467.3.dr, chromecache_623.3.dr, chromecache_657.3.dr	String found in binary or memory: https://mths.be/cssescape
Source: chromecache_738.3.dr, chromecache_856.3.dr	String found in binary or memory: https://offers.seteventshowroom.com/xml/
Source: chromecache_495.3.dr, chromecache_876.3.dr	String found in binary or memory: https://openx-ums.acuityplatform.com/tum?tpid=22&uid=a0e6c68f-8dbd-0afb-3786-0e94c1983b43&rurl=https
Source: chromecache_495.3.dr, chromecache_876.3.dr	String found in binary or memory: https://openx.adhaven.com/bid-engine/cs/377c7998bb9f42e5aea0416c9dac091f/v1?rd=https%3A%2F%2Fus-u.op
Source: chromecache_420.3.dr, chromecache_634.3.dr	String found in binary or memory: https://optout.aboutads.info/?c=2&lang=EN
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0
Source: chromecache_646.3.dr, chromecache_527.3.dr, chromecache_494.3.dr, chromecache_620.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_414.3.dr, chromecache_740.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_431.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_431.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_431.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_577.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_791.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss
Source: chromecache_740.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_414.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_625.3.dr, chromecache_776.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_646.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: chromecache_660.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_440.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_740.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_414.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_766.3.dr, chromecache_507.3.dr, chromecache_769.3.dr, chromecache_517.3.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=214&mapped=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_co
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-
Source: chromecache_816.3.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=AE4A8C3D-1096-459A-B091-
Source: chromecache_742.3.dr, chromecache_400.3.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=
Source: chromecache_684.3.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=&gdpr_consent=
Source: chromecache_746.3.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=
Source: chromecache_782.3.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/4ac1ed76-b196-aea8-5c9f-f2fc8e6bce0d?gdpr=0
Source: chromecache_816.3.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/AE4A8C3D-1096-459A-B091-2BADD5009F52?gdpr=0&gdpr_consent=
Source: chromecache_579.3.dr	String found in binary or memory: https://prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp=
Source: chromecache_816.3.dr	String found in binary or memory: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=AE4A8C3D-1096-
Source: chromecache_612.3.dr, chromecache_712.3.dr, chromecache_528.3.dr	String found in binary or memory: https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=
Source: chromecache_579.3.dr	String found in binary or memory: https://rtb.openx.net/sync/prebid?gdpr=&gdpr_consent=&r=https%3A%2F%2Fcookies.nextmillmedia.com%2Fse
Source: chromecache_816.3.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AE4A8C3D-1096-459A-B09
Source: chromecache_782.3.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=86d0f74f-3d90-871b-ad4
Source: chromecache_746.3.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=gg.com&id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
Source: chromecache_453.3.dr, chromecache_438.3.dr, chromecache_411.3.dr, chromecache_601.3.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg
Source: chromecache_537.3.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_537.3.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_835.3.dr	String found in binary or memory: https://sb.scorecardresearch.com/b2?
Source: chromecache_835.3.dr	String found in binary or memory: https://sb.scorecardresearch.com/b?
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://schema.org
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://scripts.mediavine.com/tags/math-blog.js
Source: chromecache_475.3.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17404&endpoint=us-east
Source: chromecache_579.3.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17888&endpoint=us-east&nmuid=c
Source: chromecache_684.3.dr, chromecache_746.3.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum
Source: chromecache_684.3.dr, chromecache_746.3.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/0357be48a77180052e32b659cd94bad6?s=160&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/0357be48a77180052e32b659cd94bad6?s=80&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/2dba0e1f37c50ff66849dc68c4e4816a?s=160&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/2dba0e1f37c50ff66849dc68c4e4816a?s=80&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/3d15937d91acdbeec260742f36ecaf22?s=160&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/3d15937d91acdbeec260742f36ecaf22?s=80&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/6351d5c8c991067a7c217f9548f3760e?s=160&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/6351d5c8c991067a7c217f9548f3760e?s=80&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/8aa3206ec1e859b32f90e17f138f0450?s=160&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/8aa3206ec1e859b32f90e17f138f0450?s=80&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/ba51f84bcae9a5f5db84699198452d64?s=160&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/ba51f84bcae9a5f5db84699198452d64?s=80&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/ea0e0b733362594417cccfb7e87d4799?s=160&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/ea0e0b733362594417cccfb7e87d4799?s=80&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/f7f6fb5e9a83603612b1e39a984cb981?s=100&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/f7f6fb5e9a83603612b1e39a984cb981?s=200&d=identicon&r=g
Source: chromecache_682.3.dr	String found in binary or memory: https://secure.gravatar.com/avatar/f7f6fb5e9a83603612b1e39a984cb981?s=96&d=identicon&r=g
Source: chromecache_684.3.dr, chromecache_746.3.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com
Source: chromecache_417.3.dr, chromecache_495.3.dr, chromecache_876.3.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=81&gdpr=0
Source: chromecache_579.3.dr	String found in binary or memory: https://ssc-cms.33across.com/ps/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fcook
Source: chromecache_579.3.dr	String found in binary or memory: https://ssum.casalemedia.com/usermatchredir?s=194962&gdpr=&gdpr_consent=&us_privacy=&gpp=
Source: chromecache_586.3.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
Source: chromecache_625.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_625.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_461.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_782.3.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3
Source: chromecache_612.3.dr, chromecache_712.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_787.3.dr	String found in binary or memory: https://sync.adotmob.com/cookie/smart?r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://sync.bfmio.com/sync?pid=187&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=
Source: chromecache_475.3.dr	String found in binary or memory: https://sync.colossusssp.com/ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredire
Source: chromecache_612.3.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_
Source: chromecache_816.3.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_684.3.dr, chromecache_746.3.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=$
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmati
Source: chromecache_745.3.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fu.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537
Source: chromecache_684.3.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=
Source: chromecache_746.3.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&part
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub8730968190912
Source: chromecache_745.3.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub9322105895424
Source: chromecache_461.3.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_625.3.dr, chromecache_776.3.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_
Source: chromecache_452.3.dr	String found in binary or memory: https://token.rubiconproject.com/khaos.json?
Source: chromecache_484.3.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=2249&pt=n&gdpr=0
Source: chromecache_414.3.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_414.3.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_663.3.dr, chromecache_772.3.dr	String found in binary or memory: https://tps.doubleverify.com/visit.jpg
Source: chromecache_495.3.dr, chromecache_876.3.dr	String found in binary or memory: https://tr.blismedia.com/v1/api/sync/openx
Source: chromecache_475.3.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc
Source: chromecache_766.3.dr, chromecache_507.3.dr, chromecache_769.3.dr, chromecache_517.3.dr	String found in binary or memory: https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD500
Source: chromecache_612.3.dr, chromecache_712.3.dr, chromecache_528.3.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_816.3.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_712.3.dr, chromecache_742.3.dr, chromecache_435.3.dr, chromecache_528.3.dr	String found in binary or memory: https://ums.acuityplatform.com/tum?umid=6
Source: chromecache_816.3.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&re
Source: chromecache_782.3.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=f0c208bb-f950-06a8-3e6f-2503e69ff72d
Source: chromecache_684.3.dr, chromecache_746.3.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?_=
Source: chromecache_745.3.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=16b43347-54eb-4af6-9a28-e449f503d935&r=https://ads.scorecardresea
Source: chromecache_745.3.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=2b29b5e1-7836-48c4-a896-43668f76f459&r=https://dpm.demdex.net/ibs
Source: chromecache_782.3.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=540245193&val=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_co
Source: chromecache_579.3.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=557617007&val=csuid_50f425cc-f697-4641-8d2e-58c9f6c7ba00
Source: chromecache_816.3.dr	String found in binary or memory: https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4B
Source: chromecache_417.3.dr, chromecache_876.3.dr	String found in binary or memory: https://vop.sundaysky.com/sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D54029
Source: chromecache_682.3.dr	String found in binary or memory: https://www.akiti.ca/PolyRootRe.html
Source: chromecache_682.3.dr	String found in binary or memory: https://www.amazon.com/gp/product/048641454X?ie=UTF8&tag=antoniocangia-20&linkCode=as2&c
Source: chromecache_682.3.dr	String found in binary or memory: https://www.amazon.com/gp/product/0521880688?ie=UTF8&tag=antoniocangia-20&linkCode=as2&c
Source: chromecache_682.3.dr	String found in binary or memory: https://www.assoc-amazon.com/e/ir?t=antoniocangia-20&l=as2&o=1&a=048641454X
Source: chromecache_682.3.dr	String found in binary or memory: https://www.assoc-amazon.com/e/ir?t=antoniocangia-20&l=as2&o=1&a=0521880688
Source: chromecache_586.3.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_682.3.dr	String found in binary or memory: https://www.codeproject.com/Articles/552678/Polynomial-Equation-Solver
Source: chromecache_776.3.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_461.3.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_461.3.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_461.3.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_414.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_461.3.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_768.3.dr	String found in binary or memory: https://www.google.com/pagead/drt/ui
Source: chromecache_414.3.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_431.3.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_625.3.dr, chromecache_776.3.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_461.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-192905992-1
Source: chromecache_625.3.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_682.3.dr	String found in binary or memory: https://www.netlib.org/toms/419
Source: chromecache_682.3.dr	String found in binary or memory: https://www.netlib.org/toms/493
Source: chromecache_682.3.dr	String found in binary or memory: https://www.numericalmethod.com/javadoc/suanshu/com/numericalmethod/suanshu/analysis/function/polyno
Source: chromecache_504.3.dr	String found in binary or memory: https://www.rtbhouse.com/
Source: chromecache_682.3.dr	String found in binary or memory: https://www.traviscj.com/
Source: chromecache_579.3.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dgrid%
Source: chromecache_475.3.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpart
Source: chromecache_684.3.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_c
Source: chromecache_746.3.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=0&gdpr_
Source: chromecache_516.3.dr, chromecache_400.3.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY
Source: chromecache_475.3.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-
Source: chromecache_682.3.dr, chromecache_533.3.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 49451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 49590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 49589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 49300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 49373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 49618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 49639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 49652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 49593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51114
Source: unknown	Network traffic detected: HTTP traffic on port 49664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51121
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51130
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51140
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 50659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51195
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51196
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51193
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50858
Source: unknown	Network traffic detected: HTTP traffic on port 49519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50859
Source: unknown	Network traffic detected: HTTP traffic on port 50749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50851
Source: unknown	Network traffic detected: HTTP traffic on port 49279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50868
Source: unknown	Network traffic detected: HTTP traffic on port 50956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50863
Source: unknown	Network traffic detected: HTTP traffic on port 50864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 51056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50877
Source: unknown	Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50879
Source: unknown	Network traffic detected: HTTP traffic on port 50932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50871
Source: unknown	Network traffic detected: HTTP traffic on port 51020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50873
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 50601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50886
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50880
Source: unknown	Network traffic detected: HTTP traffic on port 49610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50884
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50811
Source: unknown	Network traffic detected: HTTP traffic on port 49544 -> 443

System Summary

Document contains an embedded VBA macro which may execute processes

Source: Polynomial.xlsb	OLE, VBA macro line: res = Application.Run("py_Polyroots", Tdata)
Source: Polynomial.xlsb	OLE, VBA macro line: res = Application.Run("py_polyroots", prange)

Source: Polynomial.xlsb

OLE indicator, VBA macros: true

Source: Polynomial.xlsb	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: 2971.tmp.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: classification engine

Classification label: mal52.evad.winXLSB@135/500@895/100

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\Desktop\~$Polynomial.xlsb

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\CVR7223.tmp

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1412 --field-trial-handle=1224,i,2370678201779808397,14656861565329268167,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1428 --field-trial-handle=1236,i,12179144878932611703,17362965209824578044,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1464 --field-trial-handle=1236,i,10779558887364630857,15594323145333810207,131072 /prefetch:8
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1448 --field-trial-handle=1320,i,17365852164750101580,5148545930953262033,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "http://www.interactiveds.com.au/
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1412 --field-trial-handle=1224,i,2370678201779808397,14656861565329268167,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1428 --field-trial-handle=1236,i,12179144878932611703,17362965209824578044,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1464 --field-trial-handle=1236,i,10779558887364630857,15594323145333810207,131072 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1448 --field-trial-handle=1320,i,17365852164750101580,5148545930953262033,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Polynomial.LNK.0.dr

LNK file: ..\..\..\..\..\Desktop\Polynomial.xlsb

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/media/image3.png
Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/drawings/_rels/drawing2.xml.rels
Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/charts/chart1.xml
Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/drawings/drawing2.xml
Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/media/image1.png
Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/media/image2.png
Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/media/image4.png
Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/media/image5.png
Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/media/image6.png
Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/media/image7.png
Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/printerSettings/printerSettings3.bin
Source: Polynomial.xlsb	Initial sample: OLE zip file path = xl/printerSettings/printerSettings2.bin
Source: Polynomial.xlsb	Initial sample: OLE zip file path = docProps/custom.xml

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: 2971.tmp.0.dr

Initial sample: OLE indicators vbamacros = False

Data Obfuscation

Document contains an embedded VBA with many GOTO operations indicating source code obfuscation

Source: Polynomial.xlsb

Stream path 'VBA/mRPoly' : High number of GOTO operations

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Document contains VBA stomped code (only p-code) potentially bypassing AV detection

Source: Polynomial.xlsb

OLE indicator, VBA stomping: true

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
1 Drive-by Compromise	21 Scripting	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	1 File and Directory Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Ingress Tool Transfer	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Non-Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	21 Scripting	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	5 Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names
Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Scheduled Transfer	Fallback Channels			Data Encrypted for Impact	Server	Gather Victim Network Information
Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Obfuscated Files or Information	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Data Transfer Size Limits	Multiband Communication			Service Stop	Botnet	Domain Properties
External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over C2 Channel	Commonly Used Port			Inhibit System Recovery	Web Services	DNS

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://bttrack.com/pixel/cookiesync?source=0cde99c5-e480-47ab-89d3-b23d5ff0b88e&secure=1https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D10%26vsid%3D3454150986930039084V10%26type%3Dbdt%26refUrl%3D%26vid%3D24136334023454150986930039084V10%26axid_e%3D%26ovsid%3D	0%	Avira URL Cloud	safe
http://callmecavs.github.io/layzr.js/	0%	Avira URL Cloud	safe
https://pixel.onaudience.com/?partner=214&mapped=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://sync-dmp.mobtrakk.com/match/bidswitch?id=${user_id}&gdpr=&consent=&usp=1---&ssp=gumgum2&bsw=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d	0%	Avira URL Cloud	safe
https://pixel.onaudience.com/?partner=104&icm&cver&mapped=a31bb17c5a71a653e40698b548c9c280&gdpr=0	0%	Avira URL Cloud	safe
https://ad-cdn.technoratimedia.com/html/usersync.html?cb=https%3A%2F%2Fcs.krushmedia.com%2F462e2b5850cd99fa168d581296d0f392.gif%3Fpuid%3D%5BUSER_ID%5D	0%	Avira URL Cloud	safe
https://e.serverbid.com/usersync?cn=5529&ttt=1&dpui=LQ2T1KDU-17-IBG6	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://usync.vrtcal.com/o?xs=1624&did=LQ2T1KDU-17-IBG6	0%	Avira URL Cloud	safe
https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://rtb.adentifi.com/CookieSyncAdX?google_gid=CAESEPWoaHe3-IKev4L_ULpuCwI&google_cver=1&google_push=AXcoOmSBWZ1C_Jl_lyBdwn_v5SZge5in93TnfSwvnsw13PAC1AbmhClvJThnpI-c3gstVaOmR-JykQu0gkeMgSX27QASstwcf1YP	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=0&gdpr_	0%	Avira URL Cloud	safe
https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=402a9937-9d5c-4b95-8106-4af28162991a	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync?dsp_id=457&user_id=MzFlNmI4MzI0ZWQzZmEyNw&gdpr=&gdpr_consent=&us_privacy=1---&ssp=gumgum2&bsw_param=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d	0%	Avira URL Cloud	safe
https://www.traviscj.com/	0%	Avira URL Cloud	safe
https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=54&ckls=true&ci=1bcm0pMKiA&nc=false&trid=-1222597418	0%	Avira URL Cloud	safe
https://oa.openxcdn.net/esp.js	0%	Avira URL Cloud	safe
https://onetag-sys.com/match/?int_id=4	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync?dsp_id=452&ssp=themediagrid&user_id=	0%	Avira URL Cloud	safe
https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync?ssp=triplelift&user_id=3571062816453612499566&gdpr=0&gdpr_consent=${GDPR_CONSENT}	0%	Avira URL Cloud	safe
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
um.simpli.fi	35.236.220.17	true	false	high
rtb-csync-use1.smartadserver.com	216.22.16.40	true	false	high
global.px.quantserve.com	192.184.69.201	true	false	high
cm119.appier.org	172.105.220.23	true	false	high
us-east-eb2.3lift.com	35.71.139.29	true	false	high
id5-sync.com	141.95.98.64	true	false	unknown
pixel-a.sitescout.com	207.198.113.86	true	false	high
rtb.openx.net	35.186.253.211	true	false	high
bttrack.com	192.132.33.67	true	false	unknown
a5588.casalemedia.com	209.204.229.29	true	false	high
cdn.w55c.net	54.163.159.203	true	false	high
pandg.tapad.com	34.102.243.38	true	false	high
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	34.202.175.95	true	false	high
sync.ex.co	52.202.38.96	true	false	unknown
crb.kargo.com	44.194.252.189	true	false	high
us-east-tlx.3lift.com	3.231.136.235	true	false	high
mwzeom.zeotap.com	104.22.24.87	true	false	high
lga-direct-bgp.contextweb.com	198.148.27.131	true	false	high
www.google.com	142.250.189.132	true	false	high
sync.intentiq.com	18.173.219.5	true	false	unknown
id.rlcdn.com	35.244.154.8	true	false	high
dta23xhexutk5.cloudfront.net	18.164.124.81	true	false	high
idaas6.cph.liveintent.com	52.205.232.189	true	false	high
bcp.crwdcntrl.net	34.199.141.155	true	false	high
sync1.intentiq.com	18.173.219.51	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	3.93.251.5	true	false	high
match.prod.bidr.io	52.86.218.58	true	false	unknown
creativecdn.com	185.184.8.90	true	false	high
pagead-googlehosted.l.google.com	192.178.50.33	true	false	high
widget.va1.vip.prod.criteo.com	74.119.119.150	true	false	high
pugm-vac.pubmnet.com	8.28.7.81	true	false	unknown
googleads4.g.doubleclick.net	192.178.50.34	true	false	high
m.deepintent.com	169.197.150.7	true	false	unknown
events-ssc.33across.com	34.117.239.71	true	false	high
esp.rtbhouse.com	35.190.39.111	true	false	high
nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com	34.202.194.6	true	false	high
pixel.onaudience.com	141.94.171.215	true	false	unknown
d1ykf07e75w7ss.cloudfront.net	18.164.84.102	true	false	high
warp.media.net	23.221.16.23	true	false	high
ssum-sec.casalemedia.com	172.64.151.101	true	false	high
oajs.openx.net	34.120.135.53	true	false	high
oxp.mxptint.net	38.68.201.140	true	false	unknown
googleads.g.doubleclick.net	192.178.50.34	true	false	high
hblg.media.net	23.221.16.23	true	false	high
clients.l.google.com	192.178.50.78	true	false	high
config.aps.amazon-adsystem.com	18.173.132.10	true	false	high
syncsc.aniview.com	96.46.186.182	true	false	high
load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com	52.9.147.99	true	false	high
www.googletagservices.com	192.178.50.34	true	false	high
sda.fyi	104.21.41.99	true	false	unknown
hbx.media.net	23.221.16.23	true	false	high
iad-2-sync.go.sonobi.com	69.166.1.66	true	false	high
oa.openxcdn.net	34.102.146.192	true	false	unknown
de.tynt.com	67.202.105.31	true	false	high
tps-ue1.doubleverify.com	34.117.228.201	true	false	high
hde.tynt.com	67.202.105.32	true	false	high
pghub.io	35.241.45.217	true	false	unknown
contextual.media.net	104.110.176.23	true	false	high
core.iprom.net	195.5.165.20	true	false	unknown
idsync.rlcdn.com	35.244.154.8	true	false	high
api.rlcdn.com	34.120.155.137	true	false	high
cs1561.wpc.edgecastcdn.net	152.199.5.184	true	false	high
pdmp.profiles.tagger.opecloud.com	54.92.250.61	true	false	unknown
rtb.adentifi.com	3.228.157.65	true	false	unknown
cx.serverbid.com	159.89.246.130	true	false	unknown
ad.mrtnsvr.com	34.102.163.6	true	false	unknown
sync.srv.stackadapt.com	52.86.155.246	true	false	high
synchroscript.deliveryengine.adswizz.com	18.67.39.71	true	false	high
thrtle.com	52.71.16.59	true	false	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.70.186.203	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
sync.adotmob.com	45.137.176.88	true	false	high
cs.lkqd.net	69.20.43.192	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
pippio.com	107.178.254.65	true	false	high
sync.ipredictive.com	54.146.33.131	true	false	unknown
elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com	52.70.100.39	true	false	high
accounts.google.com	192.178.50.77	true	false	high
sync-dmp.mobtrakk.com	5.161.124.197	true	false	unknown
s.amazon-adsystem.com	209.54.182.161	true	false	high
aax-eu.amazon-adsystem.com	67.220.226.232	true	false	high
aep.mxptint.net	38.68.201.140	true	false	unknown
fei.pro-market.net	107.178.240.89	true	false	high
cm124.appier.org	172.105.232.22	true	false	high
ssbsync-use1.smartadserver.com	216.22.16.5	true	false	high
ipac.ctnsnet.com	35.186.193.173	true	false	high
trace.mediago.io	35.208.249.213	true	false	unknown
spug-njrpb.pubmnet.com	162.248.18.34	true	false	unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false	high
sync.colossusssp.com	172.240.155.68	true	false	high
match.adsby.bidtheatre.com	134.122.57.34	true	false	unknown
d1wsawskf2klzj.cloudfront.net	18.173.132.84	true	false	high
feed.pghub.io	34.102.243.38	true	false	unknown
ib.anycast.adnxs.com	68.67.161.208	true	false	high
us01.z.antigena.com	40.76.134.238	true	false	unknown
matching.truffle.bid	162.55.120.196	true	false	unknown
aorta.clickagy.com	34.197.163.191	true	false	high
uipus.semasio.net	50.57.31.206	true	false	high
tr.blismedia.com	34.96.105.8	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ssc-cms.33across.com/ps/?_=1702413499838.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X	false		high
https://pm.w55c.net/ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D10%26vsid%3D3454150986930039084V10%26type%3Ddxu%26refUrl%3D%26vid%3D24136334023454150986930039084V10%26axid_e%3D%26ovsid%3D_wfivefivec_	false		high
https://secure.gravatar.com/avatar/ba51f84bcae9a5f5db84699198452d64?s=80&d=identicon&r=g	false		high
https://pixel.onaudience.com/?partner=104&icm&cver&mapped=a31bb17c5a71a653e40698b548c9c280&gdpr=0	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	false		high
https://bttrack.com/pixel/cookiesync?source=0cde99c5-e480-47ab-89d3-b23d5ff0b88e&secure=1https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D10%26vsid%3D3454150986930039084V10%26type%3Dbdt%26refUrl%3D%26vid%3D24136334023454150986930039084V10%26axid_e%3D%26ovsid%3D	false	Avira URL Cloud: safe	unknown
https://pm.w55c.net/ping_match.gif?scc=1&ei=OPENX&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537072979%26val%3D_wfivefivec_	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent=	false		high
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=40260786&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=	false		high
about:blank	false	Avira URL Cloud: safe	low
https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec	false		high
https://e.serverbid.com/usersync?cn=5529&ttt=1&dpui=LQ2T1KDU-17-IBG6	false	Avira URL Cloud: safe	unknown
https://pr-bh.ybp.yahoo.com/sync/triplelift/3571062816453612499566?gdpr=0&gdpr_consent=	false		high
https://cm.g.doubleclick.net/pixel/attr?d=AHNF13JMSAV5M_VrZMeZj-t6YUHQkv6NfPrVS3ZNJ37EbJr0j_IoyHgn_6QKZPK6Sbgmexsfiq3v	false		high
https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553&partner_url=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D16%263pid%3D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%26gdpr%3D0%26gdpr_consent%3D	false		high
https://ad-cdn.technoratimedia.com/html/usersync.html?cb=https%3A%2F%2Fcs.krushmedia.com%2F462e2b5850cd99fa168d581296d0f392.gif%3Fpuid%3D%5BUSER_ID%5D	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=index&google_cm&google_hm=ZXjEurXK3YbtORulaCkY0QAAAnkAAAIB&gdpr_consent=&us_privacy=1---&gdpr=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=	false		high
https://sync.srv.stackadapt.com/sync?nid=114&gdpr=0&gdpr_consent=	false		high
https://um.simpli.fi/lj_match?r=1702413607293&gdpr=0&gdpr_consent=	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=0&gdpr_consent=&gdpr_pd=&us_privacy=#US_PRIVACY	false		high
https://server.cpmstar.com/usersync.aspx?bsw_custom_parameter=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=0&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D440%26ssp%3Dthemediagrid%26user_id%3D%24UID	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=qL-zbSWCDwGtJkZ9MsV4ZQ	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai	false		high
https://sync-dmp.mobtrakk.com/match/bidswitch?id=${user_id}&gdpr=&consent=&usp=1---&ssp=gumgum2&bsw=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d	false	Avira URL Cloud: safe	unknown
https://aorta.clickagy.com/pixel.gif?ch=185&cm=Hz32hLZHBFKxs3xrQUqrw0Qb&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent=	false		high
https://s0.2mdn.net/sadbundle/4207599684547219402/index.html?ev=01_250	false		high
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false		high
https://pixel.onaudience.com/?partner=214&mapped=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://pixel-sync.sitescout.com/dmp/pixelSync?nid=1	false		high
https://contextual.media.net/cksync.php?type=opx&ovsid=162ae2ad-8a3a-0601-0e07-9a67c3d39198	false		high
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=	false		high
https://oa.openxcdn.net/esp.js	false	Avira URL Cloud: safe	unknown
https://sync.smartadserver.com/getuid?gdpr=0&url=https://pixel.rubiconproject.com/tap.php?v=32128&nid=2915&put=[sas_uid]&cklb=1	false		high
https://usync.vrtcal.com/o?xs=1624&did=LQ2T1KDU-17-IBG6	false	Avira URL Cloud: safe	unknown
https://rtb.adentifi.com/CookieSyncAdX?google_gid=CAESEPWoaHe3-IKev4L_ULpuCwI&google_cver=1&google_push=AXcoOmSBWZ1C_Jl_lyBdwn_v5SZge5in93TnfSwvnsw13PAC1AbmhClvJThnpI-c3gstVaOmR-JykQu0gkeMgSX27QASstwcf1YP	false	Avira URL Cloud: safe	unknown
https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=9bfa3b33-914e-4ccc-b6f8-0f92df65339b	false		high
https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	false		high
https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3Dfbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553%26partner_url%3Dhttps%253A%252F%252Feb2.3lift.com%252Fxuid%253Fmid%253D3646%2526xuid%253Dfbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553%2526dongle%253D1fa5%2526gdpr%253D0%2526gdpr_consent%253D	false		high
https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm	false		high
https://bh.contextweb.com/bh/rtset?pid=560687&ev=1&rurl=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D390200%26nid%3D5120%26put%3D%25%25VGUID%25%25	false		high
https://x.bidswitch.net/sync?dsp_id=457&user_id=MzFlNmI4MzI0ZWQzZmEyNw&gdpr=&gdpr_consent=&us_privacy=1---&ssp=gumgum2&bsw_param=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d	false	Avira URL Cloud: safe	unknown
https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://ap.lijit.com/dsp/google/pixelmatch?google_gid=CAESEF13_8tZ8ShsNJtBPYvQBxM&google_cver=1&google_push=AXcoOmT1E_W7BkDWZ0GqWWcsM2Dvzz5AyIQ-kRPwoGESfgHKIahEoz8JUl1IrF9gK0GWIlZb_NfRjFFF_cOArg_EyARjYSUiNCym	false		high
https://contextual.media.net/cksync.php?cs=1&vsid=%7BMedia.net_User_id%7D&type=rbh&ovsid=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=medianet	false		high
https://contextual.media.net/cksync.php?cs=10&vsid=3454150986930039084V10&type=ayl&refUrl=&vid=24136334023454150986930039084V10&axid_e=&ovsid=be5f9bfbeb410d96562e728485fc57d9	false		high
https://match.adsrvr.org/track/cmf/casale?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA	false		high
https://sync.aniview.com/cookiesyncendpoint?biddername=5&auid=&key=LQ2T1KDU-17-IBG6	false		high
https://events-ssc.33across.com/match?liv=h&us_privacy=1---&bidder_id=70&external_user_id=a86d875c-ffb1-0c0e-017f-ebd97b68911b	false		high
https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=402a9937-9d5c-4b95-8106-4af28162991a	false	Avira URL Cloud: safe	unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEBbc3Ulb89MYktvFpUDZ7SE&google_cver=1&gdpr=0	false		high
https://t.adx.opera.com/pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent=	false		high
https://x.bidswitch.net/sync?dsp_id=452&ssp=themediagrid&user_id=	false	Avira URL Cloud: safe	unknown
https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=54&ckls=true&ci=1bcm0pMKiA&nc=false&trid=-1222597418	false	Avira URL Cloud: safe	unknown
https://onetag-sys.com/match/?int_id=4	false	Avira URL Cloud: safe	unknown
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://sync.colossusssp.com/ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D	false		high
https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID	false		high
https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=MjYzODc3OTA0ODcxNTg3ODM1Mw%3D%3D	false		high
https://x.bidswitch.net/sync?ssp=triplelift&user_id=3571062816453612499566&gdpr=0&gdpr_consent=${GDPR_CONSENT}	false	Avira URL Cloud: safe	unknown
https://s0.2mdn.net/sadbundle/4207599684547219402/images/bg.jpg	false		high
https://ap.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702	false		high
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}	false		high
https://u.openx.net/w/1.0/sd?id=540394477&val=2527372694113908282&gdpr=0&gdpr_consent=	false		high
https://exchange.mediavine.com/usersync.min.js?s2sVersion=production	false		high
https://cm.g.doubleclick.net/pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzU3MTA2MjgxNjQ1MzYxMjQ5OTU2Ng%3D%3D	false		high
https://us-u.openx.net/w/1.0/sd?id=537072971&val=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=de068b32-213a-3ce1-6d48-e409713c0344&gdpr=0&gdpr_consent=	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=y0wla96ADdG3uE5kNsV4ZQ	false		high
https://cdn.mathblog.com/wp-content/plugins/wp-review-pro/assets/js/jquery.knob.min.js	false		high
https://match.justpremium.com/match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://callmecavs.github.io/layzr.js/	chromecache_778.3.dr	false	Avira URL Cloud: safe	unknown
https://mathblog.com/reference/geometry/pyramid/	chromecache_682.3.dr, chromecache_533.3.dr	false		high
https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN	chromecache_612.3.dr, chromecache_712.3.dr, chromecache_528.3.dr	false		high
https://mathblog.com/reference/arithmetic/whole-numbers/	chromecache_682.3.dr, chromecache_533.3.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_461.3.dr	false		high
https://mathblog.com/reference/geometry/hexagon/	chromecache_682.3.dr, chromecache_533.3.dr	false		high
https://mathblog.com/author/timlexen/	chromecache_533.3.dr	false		high
https://07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com/icons/Ad-Choice-Ic	chromecache_420.3.dr, chromecache_634.3.dr	false		high
https://mathblog.com/reference/calculus/improper-integrals/	chromecache_682.3.dr, chromecache_533.3.dr	false		high
https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&re	chromecache_816.3.dr	false		high
https://scripts.mediavine.com/tags/math-blog.js	chromecache_682.3.dr, chromecache_533.3.dr	false		high
https://exchange.mediavine.com/usersync/redirect?partner=gumgum&uuid=6120f800-992e-11ee-8a65-3f15d91	chromecache_684.3.dr	false		high
https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#primaryimage	chromecache_682.3.dr	false		high
https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=0&gdpr_	chromecache_746.3.dr	false	Avira URL Cloud: safe	unknown
http://gmpg.org/xfn/11	chromecache_456.3.dr	false		high
https://www.cloudflare.com/5xx-error-landing	chromecache_586.3.dr	false		high
https://mathblog.com/reference/theorems/pythagorean-theorem/	chromecache_682.3.dr, chromecache_533.3.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_781.3.dr	false		high
https://secure.gravatar.com/avatar/2dba0e1f37c50ff66849dc68c4e4816a?s=160&d=identicon&r=g	chromecache_682.3.dr	false		high
https://mathblog.com/statistics/definitions/continuity-correction/calculator/	chromecache_533.3.dr	false		high
https://secure.gravatar.com/avatar/ea0e0b733362594417cccfb7e87d4799?s=160&d=identicon&r=g	chromecache_682.3.dr	false		high
https://mathblog.com/reference/arithmetic/percentages/	chromecache_682.3.dr, chromecache_533.3.dr	false		high
https://www.traviscj.com/	chromecache_682.3.dr	false	Avira URL Cloud: safe	unknown
https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_	chromecache_516.3.dr, chromecache_400.3.dr	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	chromecache_816.3.dr	false		high
https://token.rubiconproject.com/khaos.json?	chromecache_452.3.dr	false		high
https://mathblog.com/statistics/definitions/	chromecache_533.3.dr	false		high
https://mathblog.com/reference/algebra/hyperbolas/	chromecache_682.3.dr, chromecache_533.3.dr	false		high
https://mathblog.com/reference/algebra/	chromecache_682.3.dr, chromecache_533.3.dr	false		high
https://mathblog.com/#/schema/person/bce55487c4c704f59e50c0b4967d923f	chromecache_682.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.194.66.159	unknown	United States	15169	GOOGLEUS	false
104.18.24.173	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
34.199.141.155	bcp.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
34.120.155.137	api.rlcdn.com	United States	15169	GOOGLEUS	false
35.214.160.165	envoy-hl.envoy-csync1.core-b8mf.ov1o.com	United States	19527	GOOGLE-2US	false
216.22.16.5	ssbsync-use1.smartadserver.com	United States	30633	LEASEWEB-USA-WDCUS	false
52.20.2.200	um4.eqads.com	United States	14618	AMAZON-AESUS	false
18.214.147.224	na-ice.360yield.com	United States	14618	AMAZON-AESUS	false
35.236.220.17	um.simpli.fi	United States	15169	GOOGLEUS	false
3.93.99.238	sync.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
203.210.102.39	interactiveds.com.au	Australia	7496	WEBCENTRAL-ASWebCentralAU	false
64.74.236.255	unknown	United States	22075	AS-OUTBRAINUS	false
18.160.60.6	d1tcwf12y4kqv3.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
34.199.75.211	unknown	United States	14618	AMAZON-AESUS	false
159.89.246.130	cx.serverbid.com	United States	14061	DIGITALOCEAN-ASNUS	false
70.42.32.223	unknown	United States	22075	AS-OUTBRAINUS	false
142.250.189.132	www.google.com	United States	15169	GOOGLEUS	false
96.17.60.33	unknown	United States	16625	AKAMAI-ASUS	false
34.202.194.6	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
69.90.254.78	openx-ums.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
44.206.51.132	unknown	United States	14618	AMAZON-AESUS	false
35.211.118.13	pool-use-gce-sc.reims.iponweb.net	United States	19527	GOOGLE-2US	false
54.234.86.126	io.narrative.io	United States	14618	AMAZON-AESUS	false
52.86.218.58	match.prod.bidr.io	United States	14618	AMAZON-AESUS	false
3.233.79.191	unknown	United States	14618	AMAZON-AESUS	false
142.250.217.198	s0.2mdn.net	United States	15169	GOOGLEUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.22.5.155	exchange.mediavine.com	United States	14618	AMAZON-AESUS	false
18.173.219.12	unknown	United States	3	MIT-GATEWAYSUS	false
134.122.57.34	match.adsby.bidtheatre.com	United States	14061	DIGITALOCEAN-ASNUS	false
193.122.130.38	adserver.technoratimedia.com	United States	31898	ORACLE-BMC-31898US	false
141.95.98.64	id5-sync.com	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
54.163.159.203	cdn.w55c.net	United States	14618	AMAZON-AESUS	false
211.120.53.202	unknown	Japan	4694	IDCFIDCFrontierIncJP	false
18.173.132.84	d1wsawskf2klzj.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.235.170.236	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
18.173.219.5	sync.intentiq.com	United States	3	MIT-GATEWAYSUS	false
38.98.69.175	rbp.mxptint.net	United States	174	COGENT-174US	false
34.200.65.202	unknown	United States	14618	AMAZON-AESUS	false
52.70.100.39	elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States	15169	GOOGLEUS	false
37.18.24.16	dm-us.hybrid.ai	Netherlands	60557	RFNC-VNIIEFRU	false
192.184.69.201	global.px.quantserve.com	United States	27281	QUANTCASTUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
143.244.208.184	sid.storygize.net	United States	174	COGENT-174US	false
142.250.64.194	unknown	United States	15169	GOOGLEUS	false
54.200.95.152	visitor-us-west-2.omnitagjs.com	United States	16509	AMAZON-02US	false
141.94.171.215	pixel.onaudience.com	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
211.120.53.204	tg.dr.socdm.com	Japan	4694	IDCFIDCFrontierIncJP	false
152.199.5.184	cs1561.wpc.edgecastcdn.net	United States	15133	EDGECASTUS	false
3.230.74.156	unknown	United States	14618	AMAZON-AESUS	false
34.102.243.38	pandg.tapad.com	United States	15169	GOOGLEUS	false
52.207.45.55	usersync.gumgum.com	United States	14618	AMAZON-AESUS	false
35.207.24.140	dorpat.geo.iponweb.net	United States	19527	GOOGLE-2US	false
45.137.176.88	sync.adotmob.com	Spain	60350	VPFR	false
34.120.107.143	unknown	United States	15169	GOOGLEUS	false
3.163.87.30	d1jvc9b8z3vcjs.cloudfront.net	United States	16509	AMAZON-02US	false
68.67.160.184	unknown	United States	29990	ASN-APPNEXUS	false
68.67.160.186	unknown	United States	29990	ASN-APPNEXUS	false
104.36.115.113	pugm88000nfc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
44.207.23.148	ds-pr-bh.ybp.gysm.yahoodns.net	United States	14618	AMAZON-AESUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
54.154.2.209	unknown	United States	16509	AMAZON-02US	false
104.18.36.155	unknown	United States	13335	CLOUDFLARENETUS	false
104.36.115.111	gob-njr3.pubmnet.com	United States	62713	AS-PUBMATICUS	false
172.67.164.44	unknown	United States	13335	CLOUDFLARENETUS	false
34.120.135.53	oajs.openx.net	United States	15169	GOOGLEUS	false
44.195.133.130	unknown	United States	14618	AMAZON-AESUS	false
34.199.146.203	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
172.240.155.68	sync.colossusssp.com	United States	7979	SERVERS-COMUS	false
3.161.188.119	d20qwf0wrdtevy.cloudfront.net	United States	16509	AMAZON-02US	false
18.173.219.51	sync1.intentiq.com	United States	3	MIT-GATEWAYSUS	false
34.117.239.71	events-ssc.33across.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
52.70.186.203	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
192.178.50.78	clients.l.google.com	United States	15169	GOOGLEUS	false
108.157.162.121	s.ad.smaato.net	United States	16509	AMAZON-02US	false
192.178.50.77	accounts.google.com	United States	15169	GOOGLEUS	false
54.162.157.217	unknown	United States	14618	AMAZON-AESUS	false
68.67.161.208	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
172.64.151.101	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
18.238.49.99	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
195.5.165.20	core.iprom.net	Slovenia	44968	IPROM-ASSI	false
207.198.113.86	pixel-a.sitescout.com	Canada	13768	COGECO-PEER1CA	false
3.213.224.199	unknown	United States	14618	AMAZON-AESUS	false
67.202.105.32	hde.tynt.com	United States	32748	STEADFASTUS	false
67.202.105.31	de.tynt.com	United States	32748	STEADFASTUS	false
54.197.120.184	unknown	United States	14618	AMAZON-AESUS	false
35.208.249.213	trace.mediago.io	United States	19527	GOOGLE-2US	false
192.132.33.67	bttrack.com	United States	18568	BIDTELLECTUS	false
18.173.219.84	unknown	United States	3	MIT-GATEWAYSUS	false
34.96.105.8	tr.blismedia.com	United States	15169	GOOGLEUS	false
52.205.232.189	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
192.132.33.69	unknown	United States	18568	BIDTELLECTUS	false
162.248.18.34	spug-njrpb.pubmnet.com	United States	62713	AS-PUBMATICUS	false
107.178.240.89	fei.pro-market.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.255
127.0.0.1

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1360758
Start date and time:	2023-12-12 21:36:38 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	7
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Polynomial.xlsb
Detection:	MAL
Classification:	mal52.evad.winXLSB@135/500@895/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xlsb Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Browse link: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Browse: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog Browse link: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Browse: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog Browse link: http://www.interactiveds.com.au/ Browse: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#blog Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, vga.dll, WMIADAP.exe
Excluded IPs from analysis (whitelisted): 23.40.205.18, 23.40.205.8, 23.40.205.74, 23.40.205.19, 23.40.205.35, 23.40.205.75, 23.40.205.72, 23.40.205.73, 23.40.205.27, 142.250.64.195, 142.250.189.142, 34.104.35.123, 151.101.1.181, 151.101.65.181, 151.101.129.181, 151.101.193.181, 142.251.35.234, 142.250.64.200, 192.178.50.67, 192.178.50.74, 172.217.2.202, 172.217.15.202, 142.250.64.170, 142.250.189.138, 192.178.50.42, 142.250.64.202, 142.250.217.170, 142.250.217.202, 142.250.217.234, 142.251.35.238, 104.110.176.201, 23.34.207.164, 23.54.197.253, 185.167.164.39, 185.167.164.49, 8.43.72.97, 8.43.72.98, 50.116.194.21, 151.101.2.49, 151.101.66.49, 151.101.130.49, 151.101.194.49, 159.127.42.172, 142.250.189.130, 216.34.207.105, 13.107.42.14, 142.250.217.226, 104.18.35.167, 172.64.152.89, 199.38.167.130, 104.109.132.246, 142.250.64.234, 142.250.64.138, 172.217.3.74, 69.173.151.96, 8.43.72.43, 8.43.72.42, 8.43.72.114, 8.43.72.62, 69.173.151.98, 69.173.151.97, 8.43.72.115, 8.43.72.113, 8.43.72.41, 8.43.72.52, 8.43.72.
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, fp4.ads.stickyadstv.com.akadns.net, a267.g.akamai.net, uipglob.trafficmanager.net, usersync-geo-global.usersync-prod-sas.akadns.net, clientservices.googleapis.com, tps-geo.dvgtm.akadns.net, a767.dspw65.akamai.net, l-0005.l-msedge.net, e9126.x.akamaiedge.net, cdn.doubleverify.com.edgesuite.net, update.googleapis.com, rtb-csync-geo.usersync-prod-sas.akadns.net, www.gstatic.com, secure-adnxs.edgekey.net, www.google-analytics.com, fonts.googleapis.com, e8960.b.akamaiedge.net, content-autofill.googleapis.com, dual-a-0001.a-msedge.net, pixel-us-east.rubiconproject.net.akadns.net, pagead2.googlesyndication.com, cf2.rackcdn.com.edgekey.net, edgedl.me.gvt1.com, a-us-east.rfihub.com.akadns.net, c.bing.com, rtb.adgrx.com.tech.akadns.net, e6603.g.akamaiedge.net, eus.rubiconproject.com.edgekey.net, wildcard.media.net.edgekey.net, a1241.dsct.akamai.net, e7876.dscg.akamaiedge.net, wildcard.owneriq.net.edgekey.net, tps-wlb-useast.dvgtm.akadns.net, h2
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: Polynomial.xlsb

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
104.18.24.173	http://corrector.co	Get hash	malicious	Unknown	Browse
	SamFwFRPTool.exe	Get hash	malicious	Unknown	Browse
	http://url7816.acetaxi.com/ls/click?upn=k9eqZnPBEZmPVPka3LxS61O1ksdCJOgznvtiwccqzi2-2BneqvfCXEJ-2FQj-2BZo7snmCwDunBahf2LYhfs7qQp7-2F23xLStq-2BkxJ70xqVvyXzkWM-3D8Cie_z5TGfmB4A65PPE2hDgRdrx6OZsZ3AmrJLHJ0M9ePWeHP5QDTWsAVp117uXam9dNn-2BGSxHeP-2BInRF-2Bgy2v-2FXBPODjmLss6NRV2RYsUYD7um77hgLl0ET9pPGTHF-2BQ1m6-2Fw7-2B-2B9DJOpakZj874YLC8uUep0F7rZMDlM46gmHmQqqAeCV477M0h2b07T2IcXu0hzUcKftN0UG2jhPq8qo00cQl0gvOLl-2BjChyaOdLpENao-3D	Get hash	malicious	Unknown	Browse
	https://sports.zaly.online/57724/	Get hash	malicious	Unknown	Browse
	https://www.mediafire.com/download_repair.php?qkey=v6y1shsvt0m1lh6&dkey=vkvdhxewiw8&template=51&origin=click_button	Get hash	malicious	Unknown	Browse
	http://nerokolim.cam	Get hash	malicious	Unknown	Browse
	https://jpadscity.com/yTozqBN-rqp_fAumldEMt7eEwPBddyQc6_Du4euWaZs/?cid=2fb5612f478001b60480e498d3595bd0&sid=20204270	Get hash	malicious	Phisher	Browse
	http://outlook.reactivar.msw3icr3136.iceiy.com/login.live.com_login_verify_credentials_outlook.html?i=3	Get hash	malicious	Unknown	Browse
	http://outlook367.hstn.me/?i=3	Get hash	malicious	Unknown	Browse
	https://apkpure.com/globalprotect/com.paloaltonetworks.globalprotect/download/1521109-APK	Get hash	malicious	HTMLPhisher	Browse
	https://simpledialogue.net/captch/homesi/net/login.php	Get hash	malicious	Unknown	Browse
	http://moreaboutadvertising.com	Get hash	malicious	HTMLPhisher	Browse
	http://color-hex.org	Get hash	malicious	HTMLPhisher	Browse
	https://qrco.de/beXnxB	Get hash	malicious	HTMLPhisher	Browse
	https://brelif.net/acd/ab4/tac.php	Get hash	malicious	Unknown	Browse
	https://dariuscooks.tv/peach-cobbler-cream-cheese-pound-cake/	Get hash	malicious	Unknown	Browse
	https://vf229ak2.page.link/iDzQ	Get hash	malicious	HTMLPhisher	Browse
	http://3dkit.org	Get hash	malicious	Unknown	Browse
	https://uc-login-netflix.blogspot.com/	Get hash	malicious	HTMLPhisher	Browse
	https://drive.google.com/file/d/11qmYm6lCQxQsYSNvVMa92eUR4AcCAhCn/preview	Get hash	malicious	Unknown	Browse
34.199.141.155	SamFwFRPTool.exe	Get hash	malicious	Unknown	Browse
	http://url7816.acetaxi.com/ls/click?upn=k9eqZnPBEZmPVPka3LxS61O1ksdCJOgznvtiwccqzi2-2BneqvfCXEJ-2FQj-2BZo7snmCwDunBahf2LYhfs7qQp7-2F23xLStq-2BkxJ70xqVvyXzkWM-3D8Cie_z5TGfmB4A65PPE2hDgRdrx6OZsZ3AmrJLHJ0M9ePWeHP5QDTWsAVp117uXam9dNn-2BGSxHeP-2BInRF-2Bgy2v-2FXBPODjmLss6NRV2RYsUYD7um77hgLl0ET9pPGTHF-2BQ1m6-2Fw7-2B-2B9DJOpakZj874YLC8uUep0F7rZMDlM46gmHmQqqAeCV477M0h2b07T2IcXu0hzUcKftN0UG2jhPq8qo00cQl0gvOLl-2BjChyaOdLpENao-3D	Get hash	malicious	Unknown	Browse
	http://blix.sx	Get hash	malicious	Unknown	Browse
	http://nerokolim.cam	Get hash	malicious	Unknown	Browse
216.22.16.5	SamFwFRPTool.exe	Get hash	malicious	Unknown	Browse
	https://lazesoft.com/	Get hash	malicious	Unknown	Browse
	https://sethlui.com/	Get hash	malicious	HTMLPhisher	Browse
	https://austin.eater.com/users/GadgetKingsQLD	Get hash	malicious	HTMLPhisher	Browse
	http://iplogger.com	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
rtb-csync-use1.smartadserver.com	https://lucid.app/	Get hash	malicious	Unknown	Browse	23.105.12.137
	https://streamstv.org/soccer	Get hash	malicious	Unknown	Browse	23.105.12.173
	SamFwFRPTool.exe	Get hash	malicious	Unknown	Browse	216.22.16.57
	SamFwFRPTool.exe	Get hash	malicious	Unknown	Browse	216.22.16.56
	http://62.109.8.203	Get hash	malicious	Unknown	Browse	23.105.12.151
	https://conexaoufo.com/en/salyut-7-space-angels-sighted-by-russian-cosmonauts/?fbclid=IwAR0M6Prz4YudFXb6qx6hSSNhDH_aQ50t8dMsDeG9zxGInfhVplAejrcwSlg	Get hash	malicious	Unknown	Browse	23.105.14.105
	https://sports.zaly.online/57724/	Get hash	malicious	Unknown	Browse	216.22.16.41
	https://bsetsy.com/	Get hash	malicious	HTMLPhisher	Browse	216.22.16.40
	https://smbc-card.world/index/indexinfore.html	Get hash	malicious	Unknown	Browse	216.22.16.56
	http://nerokolim.cam	Get hash	malicious	Unknown	Browse	23.105.12.172
	https://jpadscity.com/yTozqBN-rqp_fAumldEMt7eEwPBddyQc6_Du4euWaZs/?cid=2fb5612f478001b60480e498d3595bd0&sid=20204270	Get hash	malicious	Phisher	Browse	23.105.12.173
	https://taget.com	Get hash	malicious	Unknown	Browse	23.105.14.106
	https://arthurrlemus.wixsite.com/micr/office	Get hash	malicious	Unknown	Browse	216.22.16.8
	https://www.ukotayc.online/login	Get hash	malicious	Unknown	Browse	23.105.12.172
	https://www.clauxtw.space/login	Get hash	malicious	Unknown	Browse	23.105.12.136
	https://www.ydjlseub.asia/login	Get hash	malicious	Unknown	Browse	23.105.12.173
	https://www.fwnubar.asia/login	Get hash	malicious	Unknown	Browse	23.105.12.136
	https://www.grvgvrcls.run/login	Get hash	malicious	Unknown	Browse	23.105.12.136
	https://www.flbalec.top/login	Get hash	malicious	Unknown	Browse	23.105.12.151
	https://www.awrgzru.cn/login	Get hash	malicious	Unknown	Browse	23.105.14.105
global.px.quantserve.com	http://corrector.co	Get hash	malicious	Unknown	Browse	192.184.68.166
	https://s3.amazonaws.com/ycarolynanne/roymail.html	Get hash	malicious	Unknown	Browse	192.184.68.166
	https://streamstv.org/soccer	Get hash	malicious	Unknown	Browse	192.184.68.254
	https://vanbebbers.com	Get hash	malicious	Unknown	Browse	192.184.68.166
	SamFwFRPTool.exe	Get hash	malicious	Unknown	Browse	192.184.68.254
	SamFwFRPTool.exe	Get hash	malicious	Unknown	Browse	192.184.68.149
	http://url7816.acetaxi.com/ls/click?upn=k9eqZnPBEZmPVPka3LxS61O1ksdCJOgznvtiwccqzi2-2BneqvfCXEJ-2FQj-2BZo7snmCwDunBahf2LYhfs7qQp7-2F23xLStq-2BkxJ70xqVvyXzkWM-3D8Cie_z5TGfmB4A65PPE2hDgRdrx6OZsZ3AmrJLHJ0M9ePWeHP5QDTWsAVp117uXam9dNn-2BGSxHeP-2BInRF-2Bgy2v-2FXBPODjmLss6NRV2RYsUYD7um77hgLl0ET9pPGTHF-2BQ1m6-2Fw7-2B-2B9DJOpakZj874YLC8uUep0F7rZMDlM46gmHmQqqAeCV477M0h2b07T2IcXu0hzUcKftN0UG2jhPq8qo00cQl0gvOLl-2BjChyaOdLpENao-3D	Get hash	malicious	Unknown	Browse	192.184.68.149
	https://conexaoufo.com/en/salyut-7-space-angels-sighted-by-russian-cosmonauts/?fbclid=IwAR0M6Prz4YudFXb6qx6hSSNhDH_aQ50t8dMsDeG9zxGInfhVplAejrcwSlg	Get hash	malicious	Unknown	Browse	192.184.68.215
	Alyssa M Juris Please Confirm Subscription.msg	Get hash	malicious	Unknown	Browse	192.184.68.166
	https://sports.zaly.online/57724/	Get hash	malicious	Unknown	Browse	192.184.68.254
	https://att-101126-100839.weeblysite.com/	Get hash	malicious	Unknown	Browse	192.184.68.254
	http://nerokolim.cam	Get hash	malicious	Unknown	Browse	192.184.68.166
	http://firstcar.co.uk/firstcar-practical-magazine	Get hash	malicious	Unknown	Browse	192.184.68.166
	http://operadarte.net/ikquojs	Get hash	malicious	Unknown	Browse	192.184.68.134
	https://xllt-103158.square.site/	Get hash	malicious	Unknown	Browse	192.184.68.149
	http://mypostofficelocation.com	Get hash	malicious	Unknown	Browse	192.184.68.149
	https://jpadscity.com/yTozqBN-rqp_fAumldEMt7eEwPBddyQc6_Du4euWaZs/?cid=2fb5612f478001b60480e498d3595bd0&sid=20204270	Get hash	malicious	Phisher	Browse	192.184.68.134
	Black Friday limited-time deals. Endless possibilities..msg	Get hash	malicious	Unknown	Browse	192.184.68.134
	http://outlook.reactivar.msw3icr3136.iceiy.com/login.live.com_login_verify_credentials_outlook.html?i=3	Get hash	malicious	Unknown	Browse	192.184.68.134
	https://lazesoft.com/	Get hash	malicious	Unknown	Browse	192.184.68.134

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-AESUS	https://brownfieldagnews.com/	Get hash	malicious	Unknown	Browse	3.227.58.45
	Product_images_1d2d9f3zz07d94f0749a.bat	Get hash	malicious	Unknown	Browse	52.45.175.185
	https://lookerstudio.google.com/s/k80ogyQ4R9o	Get hash	malicious	HTMLPhisher	Browse	54.88.173.37
	https://trk.klclick3.com/ls/click?upn=IwYH47Dp8WUMsbua4sOTh3e-2FaKNUk7RtA-2FqR4SJOG30xvYTafSmyCPUGrz8fZlQnp3csu6eWWzeSrE0tvTxaEpAmhg8VRqgbHwYD-2FKuzOgEU83vgeG02CgbG0Z5exKzFKBkZ_MMEqZLjJl-2Fqp-2FvyxaNrqv9Bx8RkLcOdYw-2FJWOTXYvPqkTYVLBE7IeRG8qJhrqW3n-2B1hYQLej5iH3TBWY-2BF7T5VrlFAt1MwWNvBbDDn-2FLOciOQpm199mkgT0G7ttebqP4JjBNPQ-2FW-2BUj2YP-2FYLAq7AE4Zf-2FUQ9lQ1n3n7iWJEec-2FG5LE-2FTbzL65NNApIs5PT9VT7JSIOx8-2BgdWlTtAigLAnLimQMR1X7wK9z2bp917YU7utxU0KuBpMZYDtxgiokT39B5TyEETX08JAk6pY-2BpHq2AVUvL6no7m8TyOly3Iqk89rZjv-2BNgALzaHfU0vHMC	Get hash	malicious	Unknown	Browse	34.193.113.164
	phish_alert_GA1.0.72-0 (31).eml	Get hash	malicious	HTMLPhisher	Browse	75.101.131.185
	https://trk.klclick3.com/ls/click?upn=IwYH47Dp8WUMsbua4sOTh3joHgLLFOO-2FeKJ1eCD9tjIRgcH78ke4cdrjyJCf8YGp5mJ43SJ-2FxFHx7ip3gNjJt8ZvAE7tGsbbLGCQmo8wAQ8-3Dogll_MMEqZLjJl-2Fqp-2FvyxaNrqv9Bx8RkLcOdYw-2FJWOTXYvPqkTYVLBE7IeRG8qJhrqW3n-2B1hYQLej5iH3TBWY-2BF7T5VrlFAt1MwWNvBbDDn-2FLOch5jasS8Jyq1v3oa79A7YJFwmZmOL3Bel-2BJ106p4DAeb0rciwyllDuAQXN3-2B9GsqTn-2BgE-2B76evLUFbKc6N7C8jEV9sc-2BSxUjFt7feWqbDGAcY9QyBJuYc-2BJrjomGsCzUMNse5CjyeFkgzjIychY1kfv8PcuucesXk74GEijCZxiWlhd7E4W6gLv-2BKoM7pIxqQqvDBzeFh6U9MZ-2FVNCj1upJ	Get hash	malicious	Unknown	Browse	54.197.182.169
	https://trk.klclick3.com/ls/click?upn=IwYH47Dp8WUMsbua4sOTh3e-2FaKNUk7RtA-2FqR4SJOG30xvYTafSmyCPUGrz8fZlQnp3csu6eWWzeSrE0tvTxaEpAmhg8VRqgbHwYD-2FKuzOgEU83vgeG02CgbG0Z5exKzFKBkZ_MMEqZLjJl-2Fqp-2FvyxaNrqv9Bx8RkLcOdYw-2FJWOTXYvPqkTYVLBE7IeRG8qJhrqW3n-2B1hYQLej5iH3TBWY-2BF7T5VrlFAt1MwWNvBbDDn-2FLOciOQpm199mkgT0G7ttebqP4JjBNPQ-2FW-2BUj2YP-2FYLAq7AE4Zf-2FUQ9lQ1n3n7iWJEec-2FG5LE-2FTbzL65NNApIs5PT9VT7JSIOx8-2BgdWlTtAigLAnLimQMR1X7wK9z2bp917YU7utxU0KuBpMZYDtxgiokT39B5TyEETX08JAk6pY-2BpHq2AVUvL6no7m8TyOly3Iqk89rZjv-2BNgALzaHfU0vHMC	Get hash	malicious	Unknown	Browse	3.211.247.27
	https://r20.rs6.net/tn.jsp?f=001-IK3luo-d7610-syZG3-K8QGGveASJNhn1poYniSoK_T06eF7UpX8D1C8ox7ucdxr7qMSOCK9N7ZMKUoYzdZgvuGa0Q0K1QWYdWrtlOtl0ynIOTMH3VzBgKGdapppwnG9yXKOsocjLM=&c=&ch=#dmVyb25pY2EuY2FsZGVyb25AZGV2cnkuZWR1	Get hash	malicious	Unknown	Browse	18.211.43.99
	https://discvillage.godaddysites.com/	Get hash	malicious	HTMLPhisher	Browse	3.229.246.161
	http://corrector.co	Get hash	malicious	Unknown	Browse	52.86.237.52
	Claim.index.html	Get hash	malicious	Unknown	Browse	44.217.161.11
	https://fluix.link/u66-HBtMog	Get hash	malicious	HTMLPhisher	Browse	18.234.2.72
	https://pub-84f582016419478b9a59f1e210d57b33.r2.dev/Alldomain-index.html#hf@hf.com	Get hash	malicious	HTMLPhisher	Browse	34.203.41.112
	Paid_Invoices.exe	Get hash	malicious	FormBook, GuLoader	Browse	52.20.84.62
	JOU23013126.exe	Get hash	malicious	FormBook, GuLoader	Browse	52.20.84.62
	https://lucid.app/	Get hash	malicious	Unknown	Browse	34.232.121.20
	arm7-20231212-1137.elf	Get hash	malicious	Mirai	Browse	44.215.244.114
	https://bmwag-rt-prod2-t.campaign.adobe.com/r/?id=h2ccc12b%2C8d23fb3%2C492093b&p1=//blackhole-sportswear.com%2Finfo%2Ftech%2Fqwertyshshdjdjdjdncnchdjdeieujdjdndncmvnvnbdsjksjhdheyjdndncmcncnc%2Fsjsksjdjdhdncnchdheyeudjdkdkdmcmcckdjgsgshdbdndjcndnjdjdjssbcnchdhsj/zxefbqzugpehfqojlzagmvobydyeuggpvhkscvdtyvtuscxizkhouwpxoncrlsbuyscoevzhnikfdsfkcedutiayeluhudnuvnik/a3Jpc3RvZmZlci5ub3JyZWx1bmRAbm9yZGlza2ZpbG0uY29t	Get hash	malicious	HTMLPhisher	Browse	3.218.223.42
	LiWS0F7fJI.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	52.203.233.59
	aYqG3Lpcx8.exe	Get hash	malicious	Glupteba, LummaC Stealer, Petite Virus, RedLine, SmokeLoader, zgRAT	Browse	54.175.31.86
CLOUDFLARENETUS	ixRSJ9BGtI.exe	Get hash	malicious	DCRat	Browse	172.67.166.50
	https://brownfieldagnews.com/	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://788119849.gopeerclick.com/15H5va?country=%7Bcountry%7D&site=%7Bsite%7D&site_id=%7Bsite_id%7D&external_id=%7Bs2s_token%7D	Get hash	malicious	Unknown	Browse	172.67.148.139
	ATT00001.htm	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://811b1c726ed82759.krtra.com/t/D2j6M4xAqnlF	Get hash	malicious	Fake Captcha, HTMLPhisher	Browse	104.21.65.215
	https://811b1c726ed82759.krtra.com/t/9A3wS1hQoMrK	Get hash	malicious	Fake Captcha, HTMLPhisher	Browse	104.21.65.215
	https://lookerstudio.google.com/s/k80ogyQ4R9o	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://trk.klclick3.com/ls/click?upn=IwYH47Dp8WUMsbua4sOTh3e-2FaKNUk7RtA-2FqR4SJOG30xvYTafSmyCPUGrz8fZlQnp3csu6eWWzeSrE0tvTxaEpAmhg8VRqgbHwYD-2FKuzOgEU83vgeG02CgbG0Z5exKzFKBkZ_MMEqZLjJl-2Fqp-2FvyxaNrqv9Bx8RkLcOdYw-2FJWOTXYvPqkTYVLBE7IeRG8qJhrqW3n-2B1hYQLej5iH3TBWY-2BF7T5VrlFAt1MwWNvBbDDn-2FLOciOQpm199mkgT0G7ttebqP4JjBNPQ-2FW-2BUj2YP-2FYLAq7AE4Zf-2FUQ9lQ1n3n7iWJEec-2FG5LE-2FTbzL65NNApIs5PT9VT7JSIOx8-2BgdWlTtAigLAnLimQMR1X7wK9z2bp917YU7utxU0KuBpMZYDtxgiokT39B5TyEETX08JAk6pY-2BpHq2AVUvL6no7m8TyOly3Iqk89rZjv-2BNgALzaHfU0vHMC	Get hash	malicious	Unknown	Browse	104.16.191.89
	Maersk MRKU8781602.exe	Get hash	malicious	Snake Keylogger, zgRAT	Browse	172.67.177.134
	Call-Recording Attached From 737________ On 12_12_23 for 45 sec.eml	Get hash	malicious	Unknown	Browse	104.17.24.14
	phish_alert_GA1.0.72-0 (31).eml	Get hash	malicious	HTMLPhisher	Browse	1.1.1.1
	https://811b1c726ed82759.krtra.com/t/5C0i7IFZ32Xc	Get hash	malicious	HTMLPhisher	Browse	104.21.65.215
	https://trk.klclick3.com/ls/click?upn=IwYH47Dp8WUMsbua4sOTh3joHgLLFOO-2FeKJ1eCD9tjIRgcH78ke4cdrjyJCf8YGp5mJ43SJ-2FxFHx7ip3gNjJt8ZvAE7tGsbbLGCQmo8wAQ8-3Dogll_MMEqZLjJl-2Fqp-2FvyxaNrqv9Bx8RkLcOdYw-2FJWOTXYvPqkTYVLBE7IeRG8qJhrqW3n-2B1hYQLej5iH3TBWY-2BF7T5VrlFAt1MwWNvBbDDn-2FLOch5jasS8Jyq1v3oa79A7YJFwmZmOL3Bel-2BJ106p4DAeb0rciwyllDuAQXN3-2B9GsqTn-2BgE-2B76evLUFbKc6N7C8jEV9sc-2BSxUjFt7feWqbDGAcY9QyBJuYc-2BJrjomGsCzUMNse5CjyeFkgzjIychY1kfv8PcuucesXk74GEijCZxiWlhd7E4W6gLv-2BKoM7pIxqQqvDBzeFh6U9MZ-2FVNCj1upJ	Get hash	malicious	Unknown	Browse	1.1.1.1
	http://le55.ca	Get hash	malicious	Unknown	Browse	172.67.72.223
	https://t.co/OY69C9RQl3	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://r20.rs6.net/tn.jsp?f=001MAdyYFwpLpOGT5rzo6GYUec2NMmDDbUBDgHtqpz1evGRiJX5tCB9tVmKxQPXfX9mnsOBqYxIoXwXaOXeaiMFMznnGCTaBxDEqusKhM9axNeWNj7WJk55ygUm2nR1d2X-ygr1qO_fxPZe5tim1-OafBD-VJi79-L8igSWYqEM2cQ=&c=&ch==&__=/roxanne.butler@magairports.com	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://811b1c726ed82759.krtra.com/t/5C0i7IFZ32Xc	Get hash	malicious	HTMLPhisher	Browse	104.21.65.215
	https://trk.klclick3.com/ls/click?upn=IwYH47Dp8WUMsbua4sOTh3e-2FaKNUk7RtA-2FqR4SJOG30xvYTafSmyCPUGrz8fZlQnp3csu6eWWzeSrE0tvTxaEpAmhg8VRqgbHwYD-2FKuzOgEU83vgeG02CgbG0Z5exKzFKBkZ_MMEqZLjJl-2Fqp-2FvyxaNrqv9Bx8RkLcOdYw-2FJWOTXYvPqkTYVLBE7IeRG8qJhrqW3n-2B1hYQLej5iH3TBWY-2BF7T5VrlFAt1MwWNvBbDDn-2FLOciOQpm199mkgT0G7ttebqP4JjBNPQ-2FW-2BUj2YP-2FYLAq7AE4Zf-2FUQ9lQ1n3n7iWJEec-2FG5LE-2FTbzL65NNApIs5PT9VT7JSIOx8-2BgdWlTtAigLAnLimQMR1X7wK9z2bp917YU7utxU0KuBpMZYDtxgiokT39B5TyEETX08JAk6pY-2BpHq2AVUvL6no7m8TyOly3Iqk89rZjv-2BNgALzaHfU0vHMC	Get hash	malicious	Unknown	Browse	104.18.41.124
	https://q742t.metdo2.com/597h/bToyMDgzL2Nwc2Vzczk2NzU2NTIyMDIvZnJvbnRlbmQvanVwaXRlci9maW06MjA4My9jcHNlc3M5Njc1NjUyMjAyL2Zyb250ZW5kL2p1cGl0ZXIvZmk	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://r20.rs6.net/tn.jsp?f=001-IK3luo-d7610-syZG3-K8QGGveASJNhn1poYniSoK_T06eF7UpX8D1C8ox7ucdxr7qMSOCK9N7ZMKUoYzdZgvuGa0Q0K1QWYdWrtlOtl0ynIOTMH3VzBgKGdapppwnG9yXKOsocjLM=&c=&ch=#dmVyb25pY2EuY2FsZGVyb25AZGV2cnkuZWR1	Get hash	malicious	Unknown	Browse	162.247.243.29

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 80 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1751
Entropy (8bit):	7.425223973373421
Encrypted:	false
SSDEEP:	24:HkFppVS0ArFCu8YqPPua/LWILMxenB5CkA5H0kzPokbtwmQ1RCFJi9jyItN7xXD:ChSTrGY03LWILMI7CpUIrDhJw7xz
MD5:	2D0440D4872CA2DB99E5D7C1FDD33F64
SHA1:	688D3DD1F21954DD63579F10F1D314F533831FAF
SHA-256:	3BBD4C1C357A064D4F21132699D94268B28C19203EAC6365F7E95D6647F04569
SHA-512:	3E98B27CA4D3C00A75DCA8EB2782CA61D4770E95A759FDCD8DF986F22EA66AA82FF1477BD5CB53945C79151E9CFA7CB2719E51298B631326CD754150B30280FC
Malicious:	false
Preview:	.PNG........IHDR...P...H.....VJ.i....sRGB.........gAMA......a....gPLTE.........................................................$$$...........................vvv{{{.........,,,..............kkk.........NNN............@@@...iii...RRR...QQQ......222......AAA......................???.....................[[[!!!.........LLL............999...\|\|\|...OOOEEE...ttt^^^.....---GGG...FFF...///...444......333}}}.........jjj<<<ZZZ......%%%...111...........................YYY***...TTT;;;>>>...###(((===.........................yyy.........XXX~~~888eee]]])))777JJJwwwfff...mmm```uuu............................CCCooo...555&&&...nnnUUU...rrr.........WWW000 ............VVV.....MMM...r......tRNS.............................................................................................................................................................................................................!.......pHYs..........+..... IDATXG.M.. ...\....'p......)..l...b.k.j._?3.o..B.........s@....

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\54A60F1D.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 49 x 62, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1401
Entropy (8bit):	7.286904195317455
Encrypted:	false
SSDEEP:	24:odSPcDUxWwSwBS3AsrRPMEKxte0DFj2kPp2BtfjnPZ4WL7Df:odecDUxWwSwBGAsZaVpak8tfjn64f
MD5:	A0D3381854EBDE2DEAF2036FCDEC817B
SHA1:	BA83CEC663F395DA9BFD3223834EC41CEBE7D80E
SHA-256:	957DCF9EFBC9E4DBCA82553DE8BEEF715EBC8CC2F707BCEFD6D2DE86EA10589A
SHA-512:	17C3B2DFFAC4664330B6B6DA1055753255A3DC0F7A465F4282E365A7A918D443895CF8EB9823D607757B2957274DFFC4C709A026E22A47EF85E29A0932A5DD2F
Malicious:	false
Preview:	.PNG........IHDR...1...>.............sRGB.........gAMA......a.....PLTE...............................................................\|\|\|.....(((...,,,~~~fff......tttLLLeee...............222SSS...KKK......&&&yyy...............```...ddd.............WWW......)));;;===DDDrrr......///...PPPooo...<<<uuu666.........MMM......XXXUUU......ssslll'''...999............hhh...................000......VVVFFF......OOO..........................111......RRRvvv............AAABBB@@@HHH888.........III......!!!$$$###""":::...........................bbbccc......}}}...www...\\\.........ggg...???...{{{.................nnn.....v....tRNS.............................................................................................................................................................................................pHYs..........+....."IDATHK.9.. ......1. Q....w.....8......05U/z.%..X.._~...{....)n.2(...W......w.Hj.K+ua.5.2.:*hY...P.K.....K.=.&.a;.A.....z!.......]C.N.V........X.m...V9hz..2

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\659C1F40.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 135 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1669
Entropy (8bit):	7.405705800328124
Encrypted:	false
SSDEEP:	24:zwJQbQa6Nt5JIhqe+Wnf5dS/dlxLWvlL5aLYAcmEqYmPqwVSCuD:xbQaC5F+r2Lqx68qRSwhuD
MD5:	C175C04A1865344E8632FDD93D09C69E
SHA1:	515E340933720C0858453D9113FFE68AC2BAC672
SHA-256:	7C44B9702E373050022F22C2509794FCB468798879BCF61660BB0D6A0F6C2515
SHA-512:	138505CA8212969F17A283118099FFEF39CA6F252194B4072E902D50735AEA59173B4511A96844CF32E5ADE01CFCBBC5AD002A380B88056AC6CD26415FDF5385
Malicious:	false
Preview:	.PNG........IHDR.......6......z.....sRGB.........gAMA......a....[PLTE..................@@@DDDGGG111}}}...yyybbb..............................RRR555???..............lll...*** ...tttUUU......ooo...^^^vvv...~~~...```......999.......rrr...NNN.........EEE......222QQQ......ccc......MMM...\|\|\|...777CCCHHH......aaa...ggg.........iiixxxTTT.....)))>>>............qqq.........XXX...ddd...333jjj___..................mmm...OOO...WWW...........PPP......<<<............eee.........VVV.........888...SSS///........+++,,,...---hhh............kkk...[[[IIIKKK%%%...ZZZFFF.........YYYwww666.......\\\...............sss.....fff.......###(((......===........................^......tRNS.........................................................................................................................................................................................................D......pHYs..........+......IDATXG.=r. ...S.w`8..R....4CO..>!cg.I...z./O..&...y.L...@.........2...?.O2F_n1N..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\6AA11641.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 227 x 59, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2457
Entropy (8bit):	7.577117918072568
Encrypted:	false
SSDEEP:	48:JynlxrE8Z8axUWqXsJAPQhJEny1mcrN0DTQJnYfsa:mfrjDUWqXseQhZ19N0inYfh
MD5:	ABBA021D272AF4936EF0093D88BE3620
SHA1:	80CE0E25DBA5F38B0B1E6585D95E8E091A1BC26D
SHA-256:	C6FB4D50C35DBA8F4AA5CF4B415AE6C4A3B4B201C8976A3A67A2624CD45AD225
SHA-512:	9D719AC9A2AE7C81908131CBF8FAAB5AB2B089BBB662C5047318A5C69610CFCAF9A47C699903B1ABA3F4E6F0E300F66011A9BC2F2D049E94057EC1C51AF92DE9
Malicious:	false
Preview:	.PNG........IHDR.......;......=.<....sRGB.........gAMA......a.....PLTE.................................................$$$...999???...HHH\\\***...@@@... ...........333...(((TTT...^^^.........~~~...iii.........QQQnnn............lllSSS555fff777}}}.........FFF....jjjzzz...KKK......\|\|\|......```LLLddd...222aaa......PPP...WWW--->>>)))..................hhh888NNN.................;;;.........MMMrrr...........GGGIII...///...........UUU+++...111.............!!!EEE........XXX...<<<........."""...'''...444.......................:::000...DDD.........ooo......JJJ...ZZZ###......bbbkkk...CCC..................YYY...OOO.......,,,uuu......ttt.....www%%%...qqq.........ppp......mmm...&&&.........===VVVeeeyyyggg.........sss...RRR...___...............666...AAA.........cccBBB.........T......tRNS.........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\6AAA91BF.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 668 x 88, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8735
Entropy (8bit):	7.859281423221873
Encrypted:	false
SSDEEP:	192:x6em+8JBvcMotMx6MBKKBUUp9DwirgnDsVJeGi:UH+60McWBFb9E2gnD05i
MD5:	4EB9A013992F0C5723B5C6F944E727A7
SHA1:	299C5F7F2587091EE6D13F6C60EF9C2D3694BD22
SHA-256:	9A768955ED78F08C659B4961C7C770783B749825A58368C742590E9EA5D3491B
SHA-512:	441AE276B0580FD4AF85858CF2E377BA8F6C53E686E79D793671B205EFA525A5979C7782E4AB6C2A16E2E9D0BC52E439E88C9603F85AC0B8E11BE53167B9941C
Malicious:	false
Preview:	.PNG........IHDR.......X.....os......sRGB.........gAMA......a.....PLTE................RRR...{{s.....!kZZ{Z....Z.JZ.JZ..Z....BR{Z.:::..........ZR..s.s..Zs..c..1.1..Z1k)RkZ1..Z.k)..Z..Z..ZR..R.R..ZR..ck.R.Z.k.....J..J.ZJ..J.......1J.J..J..J........{..{.Z{..{..{.1{..{..J..J.ZJ.J..)!):.R..R:c.{.c.B.....Z.JZ.JZ..Z....cR{Z....::J...BRBsksZcZ.c.......)........k.....).)..)................J...................Z.ZZ....Z..Z....11)......:....{......k...J..J.kJ..J.)..)...J).J)..)..).{..{.k{..{.){..{).{).....J...J..J.JJ..J........J..J........{..{.J{..{..{..{..{..)R.1.1..)1.s.s..)s.)........k.....).)..)......k....).)R.s.R...s.)......k....)..R.1.1...1.R.s..)R..........J.................J.......R.R.R...R........J............Z.{Z....)Z.)Z.::...R........kJ..:ZZJ.k{J{..JJ..J.J{..........:.){.Z...................I......tRNS......................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\787FCC33.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 135 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1669
Entropy (8bit):	7.405705800328124
Encrypted:	false
SSDEEP:	24:zwJQbQa6Nt5JIhqe+Wnf5dS/dlxLWvlL5aLYAcmEqYmPqwVSCuD:xbQaC5F+r2Lqx68qRSwhuD
MD5:	C175C04A1865344E8632FDD93D09C69E
SHA1:	515E340933720C0858453D9113FFE68AC2BAC672
SHA-256:	7C44B9702E373050022F22C2509794FCB468798879BCF61660BB0D6A0F6C2515
SHA-512:	138505CA8212969F17A283118099FFEF39CA6F252194B4072E902D50735AEA59173B4511A96844CF32E5ADE01CFCBBC5AD002A380B88056AC6CD26415FDF5385
Malicious:	false
Preview:	.PNG........IHDR.......6......z.....sRGB.........gAMA......a....[PLTE..................@@@DDDGGG111}}}...yyybbb..............................RRR555???..............lll...*** ...tttUUU......ooo...^^^vvv...~~~...```......999.......rrr...NNN.........EEE......222QQQ......ccc......MMM...\|\|\|...777CCCHHH......aaa...ggg.........iiixxxTTT.....)))>>>............qqq.........XXX...ddd...333jjj___..................mmm...OOO...WWW...........PPP......<<<............eee.........VVV.........888...SSS///........+++,,,...---hhh............kkk...[[[IIIKKK%%%...ZZZFFF.........YYYwww666.......\\\...............sss.....fff.......###(((......===........................^......tRNS.........................................................................................................................................................................................................D......pHYs..........+......IDATXG.=r. ...S.w`8..R....4CO..>!cg.I...z./O..&...y.L...@.........2...?.O2F_n1N..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9C6280B4.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 200 x 88, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3828
Entropy (8bit):	7.748564525270635
Encrypted:	false
SSDEEP:	48:daDIqLsFkKC/Ap3/A/6L5G9MOXUzYiT3jWVpiivrz+1ROnulCa3czeUrGaf4FlHN:i1Q9osoiciTcMiDzORUwvUrG9HHN
MD5:	FD591DEBDE0DDB9FC3F4A98CF0131782
SHA1:	A92127FCFEF0A8784ECBEF39501AD1393C1189B0
SHA-256:	37AC350A0D703851B936AC02B38038DD7399E80C42758AA4D836B8113E0E9ED9
SHA-512:	9F6ED303177E93B50E71D94128D921C03F53A4877720DCEF8F6396DDA664664201EE4A5F6EF9B72DB596AA23857557CC2036F6BDE7E3263BE6CE0FCFB2751DCB
Malicious:	false
Preview:	.PNG........IHDR.......X.......H.....sRGB.........gAMA......a.....PLTE....................................................ttt..............666ZZZWWWXXXQQQ\\\VVV[[[OOO]]]...oooPPP...+++...~~~%%%hhhgggcccjjjaaaiiifffdddppp...///...rrr___.............. ...???...>>>..................qqq###............................TTT111...CCCFFF...DDD..........RRR..................:::...&&&lll.........AAA..............333............xxxLLL,,,YYY...444...(((...............\|\|\|zzz...............999..............NNN..."""......000nnn<<<.........'''..............{{{...uuu...222...HHH......---...^^^......MMM............SSS...@@@!!!bbb...........;;;...)))...kkk}}}UUU...yyy===......888eee...```EEE.........JJJsss...777KKK...............................$$$***BBB....................................vvv...555...www...GGG...III.......................tRNS......................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\B501B37B.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 126 x 51, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1331
Entropy (8bit):	7.312588102352756
Encrypted:	false
SSDEEP:	24:i+unvaEMeiAhCDkZ0SA4vaLnB92d/NgCFZNbT:xunvaDeiAwDkRA4il92d/yCp
MD5:	4C978DC92D52D4793E9128FB05CF722E
SHA1:	5787117E12DE44547991BB52ABC7129A61868649
SHA-256:	F76B21AE1E0CE773C60FDFA3492A6BEF7E08DB8F66129CAD4C9C725E4C1D2E34
SHA-512:	41C206E8D51AE9D0C1649A2892FFD982843A2C56A526806728D09662553D70126FDAA84FF7897D7DC817B9EBBAC857C5DCB925ECF45768B86790612986F4AE9C
Malicious:	false
Preview:	.PNG........IHDR...~...3.....f;L.....sRGB.........gAMA......a.....PLTE...............&&&............\\\......}}}...222......^^^...bbb.....<<<mmm...\|\|\|...ttt......MMM......TTT...444nnn...YYY.........+++...VVV......[[[:::HHH......UUU......$$$......>>>...rrr333...KKK.......***...???........... ...........ddd......___@@@uuuiiihhh---vvv777...........SSS]]]LLLqqq.........pppFFF888......WWW...~~~999RRR...ccc666000...```.....................lllZZZ......)))III...............fff........"""...CCCGGG...EEE......;;;............555......JJJ..........Uu.....tRNS..................................................................................................................................................................EL.h....pHYs..........+.....(IDATXG.=.. ...\|.Zj..q.$..W.@.'^...h.fxoQh.#.(..6..z...B....hop.........1..8F;H...6.d...H..n.x..w[ ..M./...C9N..B..w..."..,d........y.....V.F...>pg..[H..:..``......%4@.....Y...S..5~...."~..-M]......W.O.NV_..S..}.....P......O-]...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C1DC4125.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 80 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1751
Entropy (8bit):	7.425223973373421
Encrypted:	false
SSDEEP:	24:HkFppVS0ArFCu8YqPPua/LWILMxenB5CkA5H0kzPokbtwmQ1RCFJi9jyItN7xXD:ChSTrGY03LWILMI7CpUIrDhJw7xz
MD5:	2D0440D4872CA2DB99E5D7C1FDD33F64
SHA1:	688D3DD1F21954DD63579F10F1D314F533831FAF
SHA-256:	3BBD4C1C357A064D4F21132699D94268B28C19203EAC6365F7E95D6647F04569
SHA-512:	3E98B27CA4D3C00A75DCA8EB2782CA61D4770E95A759FDCD8DF986F22EA66AA82FF1477BD5CB53945C79151E9CFA7CB2719E51298B631326CD754150B30280FC
Malicious:	false
Preview:	.PNG........IHDR...P...H.....VJ.i....sRGB.........gAMA......a....gPLTE.........................................................$$$...........................vvv{{{.........,,,..............kkk.........NNN............@@@...iii...RRR...QQQ......222......AAA......................???.....................[[[!!!.........LLL............999...\|\|\|...OOOEEE...ttt^^^.....---GGG...FFF...///...444......333}}}.........jjj<<<ZZZ......%%%...111...........................YYY***...TTT;;;>>>...###(((===.........................yyy.........XXX~~~888eee]]])))777JJJwwwfff...mmm```uuu............................CCCooo...555&&&...nnnUUU...rrr.........WWW000 ............VVV.....MMM...r......tRNS.............................................................................................................................................................................................................!.......pHYs..........+..... IDATXG.M.. ...\....'p......)..l...b.k.j._?3.o..B.........s@....

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C565074E.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 668 x 88, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8735
Entropy (8bit):	7.859281423221873
Encrypted:	false
SSDEEP:	192:x6em+8JBvcMotMx6MBKKBUUp9DwirgnDsVJeGi:UH+60McWBFb9E2gnD05i
MD5:	4EB9A013992F0C5723B5C6F944E727A7
SHA1:	299C5F7F2587091EE6D13F6C60EF9C2D3694BD22
SHA-256:	9A768955ED78F08C659B4961C7C770783B749825A58368C742590E9EA5D3491B
SHA-512:	441AE276B0580FD4AF85858CF2E377BA8F6C53E686E79D793671B205EFA525A5979C7782E4AB6C2A16E2E9D0BC52E439E88C9603F85AC0B8E11BE53167B9941C
Malicious:	false
Preview:	.PNG........IHDR.......X.....os......sRGB.........gAMA......a.....PLTE................RRR...{{s.....!kZZ{Z....Z.JZ.JZ..Z....BR{Z.:::..........ZR..s.s..Zs..c..1.1..Z1k)RkZ1..Z.k)..Z..Z..ZR..R.R..ZR..ck.R.Z.k.....J..J.ZJ..J.......1J.J..J..J........{..{.Z{..{..{.1{..{..J..J.ZJ.J..)!):.R..R:c.{.c.B.....Z.JZ.JZ..Z....cR{Z....::J...BRBsksZcZ.c.......)........k.....).)..)................J...................Z.ZZ....Z..Z....11)......:....{......k...J..J.kJ..J.)..)...J).J)..)..).{..{.k{..{.){..{).{).....J...J..J.JJ..J........J..J........{..{.J{..{..{..{..{..)R.1.1..)1.s.s..)s.)........k.....).)..)......k....).)R.s.R...s.)......k....)..R.1.1...1.R.s..)R..........J.................J.......R.R.R...R........J............Z.{Z....)Z.)Z.::...R........kJ..:ZZJ.k{J{..JJ..J.J{..........:.){.Z...................I......tRNS......................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F049527A.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 126 x 51, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1331
Entropy (8bit):	7.312588102352756
Encrypted:	false
SSDEEP:	24:i+unvaEMeiAhCDkZ0SA4vaLnB92d/NgCFZNbT:xunvaDeiAwDkRA4il92d/yCp
MD5:	4C978DC92D52D4793E9128FB05CF722E
SHA1:	5787117E12DE44547991BB52ABC7129A61868649
SHA-256:	F76B21AE1E0CE773C60FDFA3492A6BEF7E08DB8F66129CAD4C9C725E4C1D2E34
SHA-512:	41C206E8D51AE9D0C1649A2892FFD982843A2C56A526806728D09662553D70126FDAA84FF7897D7DC817B9EBBAC857C5DCB925ECF45768B86790612986F4AE9C
Malicious:	false
Preview:	.PNG........IHDR...~...3.....f;L.....sRGB.........gAMA......a.....PLTE...............&&&............\\\......}}}...222......^^^...bbb.....<<<mmm...\|\|\|...ttt......MMM......TTT...444nnn...YYY.........+++...VVV......[[[:::HHH......UUU......$$$......>>>...rrr333...KKK.......***...???........... ...........ddd......___@@@uuuiiihhh---vvv777...........SSS]]]LLLqqq.........pppFFF888......WWW...~~~999RRR...ccc666000...```.....................lllZZZ......)))III...............fff........"""...CCCGGG...EEE......;;;............555......JJJ..........Uu.....tRNS..................................................................................................................................................................EL.h....pHYs..........+.....(IDATXG.=.. ...\|.Zj..q.$..W.@.'^...h.fxoQh.#.(..6..z...B....hop.........1..8F;H...6.d...H..n.x..w[ ..M./...C9N..B..w..."..,d........y.....V.F...>pg..[H..:..``......%4@.....Y...S..5~...."~..-M]......W.O.NV_..S..}.....P......O-]...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F6C10CE2.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 49 x 62, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1401
Entropy (8bit):	7.286904195317455
Encrypted:	false
SSDEEP:	24:odSPcDUxWwSwBS3AsrRPMEKxte0DFj2kPp2BtfjnPZ4WL7Df:odecDUxWwSwBGAsZaVpak8tfjn64f
MD5:	A0D3381854EBDE2DEAF2036FCDEC817B
SHA1:	BA83CEC663F395DA9BFD3223834EC41CEBE7D80E
SHA-256:	957DCF9EFBC9E4DBCA82553DE8BEEF715EBC8CC2F707BCEFD6D2DE86EA10589A
SHA-512:	17C3B2DFFAC4664330B6B6DA1055753255A3DC0F7A465F4282E365A7A918D443895CF8EB9823D607757B2957274DFFC4C709A026E22A47EF85E29A0932A5DD2F
Malicious:	false
Preview:	.PNG........IHDR...1...>.............sRGB.........gAMA......a.....PLTE...............................................................\|\|\|.....(((...,,,~~~fff......tttLLLeee...............222SSS...KKK......&&&yyy...............```...ddd.............WWW......)));;;===DDDrrr......///...PPPooo...<<<uuu666.........MMM......XXXUUU......ssslll'''...999............hhh...................000......VVVFFF......OOO..........................111......RRRvvv............AAABBB@@@HHH888.........III......!!!$$$###""":::...........................bbbccc......}}}...www...\\\.........ggg...???...{{{.................nnn.....v....tRNS.............................................................................................................................................................................................pHYs..........+....."IDATHK.9.. ......1. Q....w.....8......05U/z.%..X.._~...{....)n.2(...W......w.Hj.K+ua.5.2.:*hY...P.K.....K.=.&.a;.A.....z!.......]C.N.V........X.m...V9hz..2

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\FAD4B098.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 227 x 59, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2457
Entropy (8bit):	7.577117918072568
Encrypted:	false
SSDEEP:	48:JynlxrE8Z8axUWqXsJAPQhJEny1mcrN0DTQJnYfsa:mfrjDUWqXseQhZ19N0inYfh
MD5:	ABBA021D272AF4936EF0093D88BE3620
SHA1:	80CE0E25DBA5F38B0B1E6585D95E8E091A1BC26D
SHA-256:	C6FB4D50C35DBA8F4AA5CF4B415AE6C4A3B4B201C8976A3A67A2624CD45AD225
SHA-512:	9D719AC9A2AE7C81908131CBF8FAAB5AB2B089BBB662C5047318A5C69610CFCAF9A47C699903B1ABA3F4E6F0E300F66011A9BC2F2D049E94057EC1C51AF92DE9
Malicious:	false
Preview:	.PNG........IHDR.......;......=.<....sRGB.........gAMA......a.....PLTE.................................................$$$...999???...HHH\\\***...@@@... ...........333...(((TTT...^^^.........~~~...iii.........QQQnnn............lllSSS555fff777}}}.........FFF....jjjzzz...KKK......\|\|\|......```LLLddd...222aaa......PPP...WWW--->>>)))..................hhh888NNN.................;;;.........MMMrrr...........GGGIII...///...........UUU+++...111.............!!!EEE........XXX...<<<........."""...'''...444.......................:::000...DDD.........ooo......JJJ...ZZZ###......bbbkkk...CCC..................YYY...OOO.......,,,uuu......ttt.....www%%%...qqq.........ppp......mmm...&&&.........===VVVeeeyyyggg.........sss...RRR...___...............666...AAA.........cccBBB.........T......tRNS.........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\FDA872F7.png

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	PNG image data, 200 x 88, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3828
Entropy (8bit):	7.748564525270635
Encrypted:	false
SSDEEP:	48:daDIqLsFkKC/Ap3/A/6L5G9MOXUzYiT3jWVpiivrz+1ROnulCa3czeUrGaf4FlHN:i1Q9osoiciTcMiDzORUwvUrG9HHN
MD5:	FD591DEBDE0DDB9FC3F4A98CF0131782
SHA1:	A92127FCFEF0A8784ECBEF39501AD1393C1189B0
SHA-256:	37AC350A0D703851B936AC02B38038DD7399E80C42758AA4D836B8113E0E9ED9
SHA-512:	9F6ED303177E93B50E71D94128D921C03F53A4877720DCEF8F6396DDA664664201EE4A5F6EF9B72DB596AA23857557CC2036F6BDE7E3263BE6CE0FCFB2751DCB
Malicious:	false
Preview:	.PNG........IHDR.......X.......H.....sRGB.........gAMA......a.....PLTE....................................................ttt..............666ZZZWWWXXXQQQ\\\VVV[[[OOO]]]...oooPPP...+++...~~~%%%hhhgggcccjjjaaaiiifffdddppp...///...rrr___.............. ...???...>>>..................qqq###............................TTT111...CCCFFF...DDD..........RRR..................:::...&&&lll.........AAA..............333............xxxLLL,,,YYY...444...(((...............\|\|\|zzz...............999..............NNN..."""......000nnn<<<.........'''..............{{{...uuu...222...HHH......---...^^^......MMM............SSS...@@@!!!bbb...........;;;...)))...kkk}}}UUU...yyy===......888eee...```EEE.........JJJsss...777KKK...............................$$$***BBB....................................vvv...555...www...GGG...III.......................tRNS......................................................................................................................................................

C:\Users\user\AppData\Local\Temp\2971.tmp

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	1536
Entropy (8bit):	1.1464700112623651
Encrypted:	false
SSDEEP:	3:YmsalTlLPltl2N81HRQjlORGt7RQ//W1XR9//3R9//3R9//:rl912N0xs+CFQXCB9Xh9Xh9X
MD5:	72F5C05B7EA8DD6059BF59F50B22DF33
SHA1:	D5AF52E129E15E3A34772806F6C5FBF132E7408E
SHA-256:	1DC0C8D7304C177AD0E74D3D2F1002EB773F4B180685A7DF6BBE75CCC24B0164
SHA-512:	6FF1E2E6B99BD0A4ED7CA8A9E943551BCD73A0BEFCACE6F1B1106E88595C0846C9BB76CA99A33266FFEC2440CF6A440090F803ABBF28B208A6C7BC6310BEB39E
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF4D20A7F70007D9D2.TMP

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	344064
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E265B60A4AF7915C7064C2B7AEC8E1D2
SHA1:	5F2F9AB2D2C5B3FA09D05CB71A936FAA64630BB6
SHA-256:	0CC5F11E4D6807ACFFD5F9167D709D2BF1E91700460CDC33161486CE3CCC22D9
SHA-512:	30EECE5519E9B53D40AB66318367E94F3AC669184B6BC6084EF684014224AAB17EF5ED41542F020DE879C4EBD36E5DBC34DCC2F864C168FB4D6217BD94D55A61
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFE893A05C734ADDCC.TMP

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	360448
Entropy (8bit):	3.4826924311930467
Encrypted:	false
SSDEEP:	3072:4kcDMKWqv4tBhmUfrjb7MYobMpMN9odE4s8OPGnAh1uovgn+8YCfW/1uucZBT97B:z/npYCfAcVWxUE8aboAbAhfn
MD5:	79E461426ABDE960C6E631BF81D7151A
SHA1:	C067BCB2F13F49A24CD2A5686FBEF62A148D42E5
SHA-256:	4775C33438E2CF271E60232C3DB69EFF368CA9FBD73766D981EFEB16D556E784
SHA-512:	4F3C32186C308E39B8B52BA7F3CA4BAD8DA06320FD17865FA1D356CC24DD3DB9EEDC7271061663E8D83C7BDC431F1DC7BD5D33E26B822A031CCD64F1245BE066
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Polynomial.LNK

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Fri Aug 11 15:42:07 2023, mtime=Fri Aug 11 15:42:07 2023, atime=Tue Dec 12 19:37:26 2023, length=207186, window=hide
Category:	dropped
Size (bytes):	1019
Entropy (8bit):	4.526469407950999
Encrypted:	false
SSDEEP:	12:8Bqls80gXg/XAlCPCHaX2BZB/BGFX+WaoeooNByVjuicvbOdnX8FyVNDtZ3YilMa:8B+k/XTmDbkwoeoEANeqdsGNDv3q/k7N
MD5:	C025FF960A7ED7C60C6F6E36115FC3B3
SHA1:	2079B11156815236802BBB4525DEFD54E1101D82
SHA-256:	65158B61439967351DCFA6E8A091EB181C20BE07F27C56B16CC3FC0C9E9D772B
SHA-512:	D5E19833F5D4F7253CF843BA2B93ED7749CFC095CD88772D0A9ACB987D23A0AEAEF6B46706C600E3D4DAEF30B4F5DAEFA85CF571C84C805449F3C78322EB8590
Malicious:	false
Preview:	L..................F.... .......r.......r....(q.;-..R)...........................P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......WE...user.8......QK.X.WE....&=....U...............A.l.b.u.s.....z.1......WE...Desktop.d......QK.X.WE...._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.....h.2.R)...W.. .POLYNO~1.XLS..L.......WD..WD..........................P.o.l.y.n.o.m.i.a.l...x.l.s.b.......y...............-...8...[............?J......C:\Users\..#...................\\405464\Users.user\Desktop\Polynomial.xlsb.&.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.P.o.l.y.n.o.m.i.a.l...x.l.s.b.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0.1.9.4.0.5.6.3.7.-.3.6.7.3.3.6.4.7.7.-.1.0.0.6.............`.......X.......405464..........D_....3N...W...9.W.e8...8.....[D_....3N...W...9.

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Generic INItialization configuration [folders]
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.422649605284649
Encrypted:	false
SSDEEP:	3:H+SeMESm44oMESv:Hm3
MD5:	45FC45C58259CA459406BE44A81B5A37
SHA1:	6ADEBD3004001D83CDC6018D5A5F139163A3D5D2
SHA-256:	8DF66E7D9C59ABE5C9CE8090B66F01FFBFD378378FA5F1FFFBCB57718C6FEFCC
SHA-512:	399EAB625942F0D1704556AA8982FA8C49CDD12B838382C44C18F5A4C38D95CEE5DE37ECD692F76D42D0F5C5FE8C6508F43EBA4B9AAA12DF7D34597FEDF4DE5A
Malicious:	false
Preview:	[misc]..Polynomial.LNK=0..[folders]..Polynomial.LNK=0..

C:\Users\user\Desktop\~$Polynomial.xlsb

Download File

Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	165
Entropy (8bit):	1.4377382811115937
Encrypted:	false
SSDEEP:	3:vZ/FFDJw2fV:vBFFGS
MD5:	797869BB881CFBCDAC2064F92B26E46F
SHA1:	61C1B8FBF505956A77E9A79CE74EF5E281B01F4B
SHA-256:	D4E4008DD7DFB936F22D9EF3CC569C6F88804715EAB8101045BA1CD0B081F185
SHA-512:	1B8350E1500F969107754045EB84EA9F72B53498B1DC05911D6C7E771316C632EA750FBCE8AD3A82D664E3C65CC5251D0E4A21F750911AE5DC2FC3653E49F58D
Malicious:	false
Preview:	.user ..A.l.b.u.s. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2308), with no line terminators
Category:	downloaded
Size (bytes):	2308
Entropy (8bit):	5.614834476564783
Encrypted:	false
SSDEEP:	48:CcijmoauRmUusyu0u53dVjN2mAeSsifTdpGBlMJOBOq:C5aoa8/fFJd5N2xx3lq
MD5:	2AF631D8EC5FAC8DC7D4A4878469230F
SHA1:	9A7ECEA5FEEDAD368F144A795BE07F3D7AD09322
SHA-256:	558CE098F25A78D6681E200964E4DF1B9A2A27E42380F816D8B6143A0A71A98E
SHA-512:	6230DCA86E504C195A136D6E40D5927A1F3DDC88BB8698D40D565AE2444727A30EAE242D0F2C20B1D2B220FAA00FD6783295306D94F48CA3473F37D71F0DF111
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=4884872&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.loadAsyncIframePixel('htt

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2372
Entropy (8bit):	7.852410997517776
Encrypted:	false
SSDEEP:	48:10kRc8U2Jh319+fQsn11JNozORASFbirO/Gf6oZ:11c32J3Ap7ozUASFbieE
MD5:	A8EADB418043310D39EC513E28745936
SHA1:	E207EE20C74D8BE5FC72F7AFD7C1F4CCC7ADCF69
SHA-256:	E5A684C395330E6CC8C64457E1BA945012E94E095352E41ADCB88BBDBE263EBB
SHA-512:	AC83728CF80E74FD73C49AF428629392C51CD9DE99CF0C385BFB9B7351967888EBD033B100501CBE49CCC74883506A7D5CC4744D4428C3A114AAEE7CF1FED123
Malicious:	false
URL:	https://tpc.googlesyndication.com/simgad/17822024181240698237/14763004658117789537?w=100&h=100&tw=1&q=75
Preview:	.PNG........IHDR...d...d.....p.T....IDATx..{..U....~..b" ....M%.P@....S`RF..0.^XXL.j...3G.AS..n.h.DH4]..)-...2...C7i...v..x..{..~.^...y~3..<....9.s.y...a..a..a..a..a..a..a..a..a..a..a..a..a...?!.^+..B.#...Nu.........hA4{..D..s.uHS...1.DC..}h.....{.v.wG.W...t.....Usy...}......v.o.........^\ZsWm.......R...Vv...:WMZ.da..#.7/.^w.$...$o\|mI....T.k.....z(.m..U... ....\...8.\|#.o...s`.....>Z?.zk.Y..s./3....@.<..uGw...T...[.K.....5....+.....h(.....&..$.......aS...y./gJ/f....<A....n.K.D.[.K.n.u.0.\|V..C:#.......\|Fe.......E`..6........&..`...x....{..8...*...\|00..8..X.<...i.........\|.......<.P...2p....-.R<...)T@TS..@u.E95....~.yIh............7.].#.c^.{............4.\.Wz.\. ...Zf...E..-.m@.O...W`4.......^...Vh;.>..3.:.4.V.....k.b`1.1..nn...LU..8+..(W./.p.p..."/.xd........=.>T.h..(.V.....%^.o.. sY.t.L..\.r.e=...>..qH.8&./.}D:.b.z{iwk..oj.....T`....K0j.G....R.E..........".....y..T..<.\|....y....k.:/o......j.....>..32....Py..\|...lsK..J.[...E..m5_Yz.^Q4{...KE..

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	125571
Entropy (8bit):	5.98924640384652
Encrypted:	false
SSDEEP:	3072:uwDX82AIAFAdArbAi1qJ1qD4Vmtp6jrbpUxVuljqTq+48vTuSV:flk/
MD5:	DAB959C4E8FDB4254C9312329BA34120
SHA1:	849AD229E114EFCACF599FEF596A7114E286BBB1
SHA-256:	3857E6A2B0ED6C7812215F1752302367EFA09C6B6677EF9622F00D34708BBADD
SHA-512:	924DE3893EC9BB7994366D0CCAD4CC484D6DBD5AAABF467DC51347675800246BA9043F8593B9769393C8AA6A4240D19789E60D6832A239F7A1DABD9F8A5B5FD9
Malicious:	false
Preview:	{"/1030006/mathblog/sticky_sidebar":["html",0,0,null,1,600,300,0,1,null,null,null,1,null,[88032331476],[69942876],[29955756],[299148516],[99284],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CNv0s_fgioMDFWXc4wcdtpMCpg",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-sin

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.090163392719035
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/VO4Jikg1p:6v/lhPfA/k4Jibp
MD5:	73031B554FD75A3DF2B54C9FC5D2D654
SHA1:	447A248347BF2E003DF3DD1750403068575EE019
SHA-256:	01FC92B7704C3E3BAAEFD2CE87CE17E2EA266A1BB4244F032DA25931E9C6FB92
SHA-512:	106E94EDD40EE3D5B99AE6456BB928EA790347045DD8B198A407FF1F88F8BCEB5BCEF5C0811EBD12C8A09BD73911B8DB2EC3F1E958875866DF3D59ECA7A17CD7
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/themes/mts_schema/images/nobg.png
Preview:	.PNG........IHDR.....................IDAT..c``......OH......IEND.B`.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
URL:	https://sync.srv.stackadapt.com/sync?nid=114&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4775), with no line terminators
Category:	downloaded
Size (bytes):	4775
Entropy (8bit):	5.343236783888382
Encrypted:	false
SSDEEP:	96:5RJdD29bO8fsjxYZYfUP2fOpqA6FJ9kTrPxGIhGRG2b3OFK7vtSJ9:nJBKbO8f4xYZYk2fOYsTrPxGQGRG2be7
MD5:	058956FBFFD5881E1CD6C2716BEFE29B
SHA1:	84F62CAA8287BA2130BAB0D4D87BA9ACDD212371
SHA-256:	A8AA08510A254CB35A09A32C0C5471C27BC1245288FD118E4E6871CE2290C2DE
SHA-512:	5F492A3F58C3A9A3219D77EAB0DC603CEF54C08771DF37D965B9BA85F90E21559BFD4000C70D9082942F6B556B2D71CB266838197D26EF6C515293C4D5E7B314
Malicious:	false
URL:	https://scripts.mediavine.com/tags/5728/da066c6cb9e161a9eb1d.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[5728,2723],{3190:(t,e,i)=>{i.d(e,{O:()=>s});class s{constructor(t){this.slot=t}meetsIBVCriteria(){return this.slot.meetsOutstreamCriteria()}ibvSizes(){return this.slot.sizes}}},4548:(t,e,i)=>{i.d(e,{b:()=>d});var s=i(6469),r=i(6039),a=Object.getPrototypeOf,n=Reflect.get;function d(t,e){return class e extends t{validate(){return super.validate()}adunits(){return t=this,i=null,s=function*(){var t;const i=[];if(null==(t=this.ibvConfig)?void 0:t.meetsIBVCriteria()){const t=this.getIBVAdunit();t&&i.push(t)}var s,r,d;return i.push(...yield(s=e.prototype,r=this,d="adunits",n(a(s),d,r)).call(this)),i},new Promise(((e,r)=>{var a=t=>{try{d(s.next(t))}catch(t){r(t)}},n=t=>{try{d(s.throw(t))}catch(t){r(t)}},d=t=>t.done?e(t.value):Promise.resolve(t.value).then(a,n);d((s=s.apply(t,i)).next())}));var t,i,s}getIBVAdunit(){var t;let e,i;r.A.isMobileOrTablet?(e=`${this.slotName}_ibv_mobile`,i=`${this.id}_ibv_mobile`):(e=`${this.slotName}_

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	87467
Entropy (8bit):	5.344970637965969
Encrypted:	false
SSDEEP:	1536:rmtXs51i9KpJ0zXF1GlfKhZpvlL4rtCFhWGgyMZ/eV:+Xs51i9KpJ0zXIyVItoWX7c
MD5:	945741CC35497DC1AA022D08880018F3
SHA1:	F8F85647711E3F18A14F3BF7A20A0BD3A3ACE212
SHA-256:	49292E05A8D64D3258E868449CD32EA9BB2ED9A956402EF40F9D808AF021B1AD
SHA-512:	000F0568DFB05133538B84FDE2FEB5AA1ABD54B092B45F8684320F5D9F15383DD60B0788C0E485402BCFFB2CF2A7DEDCEF3DCBF19F4F95C2777BF2681CAD0C66
Malicious:	false
URL:	https://scripts.mediavine.com/tags/afterScroll/8e90aeddcdfeed5ce4b1.min.js
Preview:	(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[2208,9110],{8078:e=>{e.exports=function(){!function(e,t,i,n,o,s,r){function a(i,n){t[e]._Q.push([i,n])}t[e]\|\|(t[e]={init:function(){a("i",arguments)},fetchBids:function(){a("f",arguments)},setDisplayBids:function(){},_Q:[]},(s=i.createElement(n)).async=!0,s.src="//c.amazon-adsystem.com/aax2/apstag.js",(r=i.getElementsByTagName(n)[0]).parentNode.insertBefore(s,r))}("apstag",window,document,"script")}},6710:(e,t,i)=>{"use strict";i.r(t),i.d(t,{load:()=>Kt});var n=i(8129),o=i(7475),s=i(5077),r=i(2845);function a(e){return!(!e.native\|\|!e.native.video\|\|!e.native.video.vastUrl&&!e.native.video.vastXml)}var l=i(2321),d=i(6497);let c;var h;(e=>{let t;e.load=i=>{return n=void 0,o=null,s=function*(){var n,o;const s=null!=(o=null==(n=i.offering)?void 0:n.offering_code)?o:"No_Offering_here";c=`https://errors.${s}.com/record`,t=yield d.Z.fetchJson(`${i.launcherUrl}/creativeBlocks`),l.Z.on(l.Z.events.outstreamAdError,(i=>{i.bidResponse.creativeId&

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 43 x 36, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	791
Entropy (8bit):	6.9660914893509345
Encrypted:	false
SSDEEP:	12:6v/7BaOqa8lYeaqUq10c+54wEDJxeF4zT1Ry0IWNNsD0dnlBSH2Bo1+qkyc:QakVFy+PmLfNdNNsD0dlBFu/c
MD5:	D057503F43C87876F0304338BCD73A81
SHA1:	1DA076D924477C75320C4210159C8539B8F6D180
SHA-256:	DEE2273D2EFFA78AC26D52FCC0AB2E8F1B86D4C6DD4DD9AD4D132A4AA9A33C55
SHA-512:	A9F70620E101B08DB16F473CFA86CB294D86823A52971BC9E7C306E997C591D23A5C018978F8F984BFC53E01CAF1B1F41C2B1DB06F9A34E5D951D33D7B454AFD
Malicious:	false
URL:	https://interactiveds.com.au/IDSau/wp-content/themes/twentyeleven/images/comment-bubble.png
Preview:	.PNG........IHDR...+...$.....'.3'....PLTE............................................................................................................$$$222@@@KKKWWWjjjqqqxxx....................................................................................................................................................n...\tRNS.............................. "$%&)+.035:=@BEJQTWY\^afsu}..................................w@.u...SIDATx^..[S.@..aW....x(.\......,..K..<.....F....t.{.3.....2.......]EmO..T....]@..bc.`..lX...!\..m.4...[...Y...X......U...}M{..6...s~@K<.....z...c.....:.,.:......b1.d.)b...........{.0YO...............6..4.w6R.T.,Z..A<.J..e.5..J..'.X..0.>..o....I...o.;.u_.W..w'..\|.d.p<~.\6G.{.Z'.w27....N.w....O..;.M}.%{..JM...%_0qr7d..^B...j..5...4Z.....IEND.B`.

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1190
Entropy (8bit):	7.73183223248929
Encrypted:	false
SSDEEP:	12:6v/7p0LltIs05XLwZhv8/u76hsmwy0GPJq868lf2I45em3p5Kjo4xdqdJSp0SBxK:e0L7aRReCvjUQR45eSak4X8y0458wkV1
MD5:	DB24A5E9B9031771E337852DC286C2F7
SHA1:	9B37B3CC9566A0E675F3B1CDEEF7ABC07BDCA791
SHA-256:	329F0B52FB49ABC33B1BF9D31D2846C5C16731D8F172DD36531E883BFF3BE9E3
SHA-512:	EF3C246B3CC642478F2D8FA64C9B33E010A65F199E66E49EC815E1F104348C9B8D78E6B613F164CB0C9952FC5B1676A6C7686F6ACF975D89A9540359C5BD8F4D
Malicious:	false
URL:	https://secure.gravatar.com/avatar/3d15937d91acdbeec260742f36ecaf22?s=80&d=identicon&r=g
Preview:	.PNG........IHDR...P...P............pHYs..........+.....XIDATx...N.A......rX4.......G/...y......g.y.L\|..!$.....l..bB.agi...0LOWw...,.;.v...g{.j.j.].^Y@...=.Ow.q..7.s..'.{8..G...D7.<....(.JZ....D.6..@ J4.'....D.YL...@ J.......Q.M.`...^..y....t.P.>j..X`.c.3...O.E.._..e.z}$..iL........%.<.h.,`\|q.t,%...+.......j....t...JL.u.2&\.i.q..}.i\|%...H....7W W..UbQ\...y.7.J..P%R.H..G.{M..<.M.K\.DIy..W...1I.[$..yEq.@..4Y...y_.Ly.G....<Q.......^.'.hu[u7v...=nM).$....o%......x.H..(.I..$.dBJgq..q..o......$..{I.o..Z..L.@&Q .(.I...F..^{/Zc.K.0BG..R.dk..#]c.....a..d...""Y.....Kn:..........'I'.t..z..cj...S.I...j..".............M.]g.m{...E..3.HbQ..x.(Y...N...FZ...:.5.k6F..t.#+O....S....i+.^Y@sjb..i..).<.a/\|[..t..:%.F].O^.9.3..}.^.Q...Hy.Dt@.m.5.n:..P..L...3.U.(.H.I.WM.d.^..,uBe#)...Q..&..(&..D4"........a...<..D....HI.^.]...o..L:.c.....mx..m5."./._.&8....Q...H.8..4^...vJ...c...M..=.(.....2..,...-....U_.!......K.E...@..1$y@@............C...(..)1Ty....!-,Ty.q....t.C....x..

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.807324007837037
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4DCVeBSyfNh:8WiIUemo/H1fCYKbY4DCVeSMX
MD5:	CC5C23B445ABF8BA4E3DE22FB76B522B
SHA1:	1466DD00502360513DD71B22C1043859312BE0F9
SHA-256:	9C26D98737A773D4E29C2B539E05CCE37EB8AA92B6026B8A1E6D1DB6062FF10F
SHA-512:	4450A85C64BB0E4C58E8E7D021E1BFC86D0785CE283B4606333B621FD379FF10A9540968EE3167A2BC37B70A7AEBDE3E7B12AB605B181FA958AE0A8F476ECD5B
Malicious:	false
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=jURFnvrSHaGY9&cb=0&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg","cb":"0"})

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	193731
Entropy (8bit):	5.844288948709597
Encrypted:	false
SSDEEP:	3072:cdrCj2nSJ50sO4DpIzP7/Rv4ayl1L6T9fbl1LrF2+mCQ3+Na1o3gwf:cdrCKnSJ5c4tIzT/Rv4aD9mCG+qo3Zf
MD5:	290D0F0D8066878ECFBD882445774F8A
SHA1:	62EB061F320D5923D66E9AA96C01C704D6D4A3C2
SHA-256:	C38B7CDF16952C4C8885310E5C859AE3B932E1FE09FEE14553C9D3855F7D56E6
SHA-512:	E4F47F47DAAB968B26FEA6AA1D0FBC61F2A8C85B527338CD89F8915639E1BC52A73D6B19DDD00FEE851E94823D33FDCBB046DDFE3276C457EF8B7B17DDC022BA
Malicious:	false
Preview:	{"/1030006/mathblog/interstitial":["html",0,0,null,0,913,1263,0,1,null,null,1,1,null,[138326953274],[5581006250],[29955756],[299148516],null,null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CNDunPfgioMDFTz94wcdeX0D2Q",null,null,null,null,null,null,null,null,null,null,null,null,null,[null,null,null,null,"ca-pub-1601477034266482",8,null,null,null,null,1263,913,[["i-fvs","true"],["stop_word","ad choices;adchoices;advertise;cart;checkout;conditions;contact;copyright;desktop;disclaimer;faq;help;log in;log off;log on;log out;login;logoff;logon;logout;member;menu;policy;privacy;register;registration;setting;sign in;sign out;sign up;signin;signout;signup;site map;terms;top;install"],["qid","CNDunPfgioMDFTz94wcdeX0D2Q"],["numMessages","3"]],60,[1,2]],"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html ><head><link href='//fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap' rel='stylesheet' type='text/css'><style>*

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 730x699, components 3
Category:	dropped
Size (bytes):	20951
Entropy (8bit):	6.875231573696079
Encrypted:	false
SSDEEP:	384:FspgbxIMQB0Dt7nS+o/C0kbE7gytTy8AQH+Wqo0rwTM7Il74fqzBL:FsSVIMQBqBS+bgcy1y8V2o4uM058qdL
MD5:	AC0A6C799C28DAC627FA62F9B171E465
SHA1:	1B7E0665557C4AF381BA5F83B4C4C470B5EA6501
SHA-256:	8B0103D5131047A6907BA6B56609DE98A26E3D5C5835133A93CAA19B1071B4FB
SHA-512:	638188A54138BD4BD85AF5EF5BE22EFA1BBDEFDD9B5FD8997776459A3F42634A4BCA2FA5581C9ED7366DFD34CFC1ACFA57402EDD28FDB79CAA58837EBE453819
Malicious:	false
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777....................................................Z........................!1..AQ."2aq.......#BR.....Vbcr.....$%3EFST..5CDUd.....6....&4st................................4........................!1.."2AQR.....3Sa#Bbcq................?... ..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	574
Entropy (8bit):	7.40620234406171
Encrypted:	false
SSDEEP:	12:6v/77eUXpSV8BktM/1hn8E2176owqmVYdsgwZOM9:dUXUqSSdhnP2175K4sgwgM9
MD5:	FC14B666887D1EDCB67BEB9AEB36667B
SHA1:	7285646C7E8A39425AD20BA7B8F7ED81D7D4523B
SHA-256:	C46984040948CD91A49D685F4D79D48398A3B44B92D4FCD1ADB7A20547B62CA1
SHA-512:	FACC7AA515ED483796E28C320BF0D173C834D09F4044717F1652C83E84391E670A6522492D64C64B16E2FC4B271EBAC07B7128755984B9C4EA55BDEBA95CA8E3
Malicious:	false
URL:	https://07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com/icons/Ad-Choice-Icon-19x15.png
Preview:	.PNG........IHDR..............D.,....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDAT8.c....f...t..M.........\K.V...[b.cB....?+...........{.r....d..... ...m...q=~..0C...4...;..Ir.}...x{.Y.8..o.H....\|.>.C....`.N1.?#...m.....%h....&}.^.&..x..YG."...o.....k.m..{.3Ej..a."5...4......S$.0.ug}./<Rc```x...k..Gjv...2000p.0.NQ...S....O...._x......o......../....n.##./.\....C.....\|uW.**r...ba.....V....3M..a3...a.........s.=.y.....<....}a^a```...<.T.".......[..._.."......IEND.B`.

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (499)
Category:	downloaded
Size (bytes):	567
Entropy (8bit):	5.375704540768256
Encrypted:	false
SSDEEP:	12:2ebxBEA8cmD5OwZZbgwuYdMQsldOQFZZPbX+ZHoQL:2eXEtBtXZZ8mMxuQnZDX+Zj
MD5:	44138A8E3E83B5EF106A32EA9A17DAF1
SHA1:	A267ED503230082B5DE7B33EF7DD2B1532F12D21
SHA-256:	C9C26D53C3B87D7B2342171915A393DBE7B69533C69AB587B73528579922DB84
SHA-512:	94783553350D354BF5E12AAB75594D4EA8471004AB2875331379C17B4866C66DF97DE983CB5FEEC5AD960A82E69F7CFF56BE57EC742BF3E14883CB19C9A055EB
Malicious:	false
URL:	https://google-bidout-d.openx.net/w/1.0/pd?plm=5
Preview:	<html>.<head><title>Pixels</title></head>.<body>..<img src="https://vop.sundaysky.com/sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D"><img src="https://ads.stickyadstv.com/user-registering?dataProviderId=641&userId=a29a2e2d-5af0-0811-3bf6-e705c15d2422&redirectId=2257"><img src="https://dmp.brand-display.com/cm/api/openx"><img src="https://match.justpremium.com/match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e"><img src="https://ssbsync.smartadserver.com/api/sync?callerId=81&gdpr=0">..</body>.</html>.

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	5.233913935506896
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsLEwK4LzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4L994xYqJmWeV4IQL
MD5:	66D1BB3159B83CB2BE9ED066165E4C38
SHA1:	FF0D58E13E55067882F7BFFED31A1D8970FD6401
SHA-256:	3FDF2EE487005F6505D00CC9D7A3757A1942D56BCAEA69929CBD5BA110494390
SHA-512:	F55E4F9C1CEA37771D93B79F5B50295C0D25B93E7E41DBCECAD0795A96673793723A2A08DCFE5023972C5EF047FBB5FC11F4F3AB88F1018C14990590DF187B31
Malicious:	false
URL:	https://eus.rubiconproject.com/usync.html?p=17404&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright the Rubicon Project 2020 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	9069
Entropy (8bit):	5.1821928729597655
Encrypted:	false
SSDEEP:	192:90hY0hQro18B1v52Ntgq/ILBYce7nalVMaFnYI2mkkNztmHW:90hY0hQro16R2Fc3f4W
MD5:	59508D69BB1F2FC2376AC0DEEC1AE7DF
SHA1:	2FF647ABF7500504C459DF09048FFA190B1A3784
SHA-256:	383DA032D68FACFF68E8F685FC0D54CA4F760FD7A35AB775D636F90CF4D98391
SHA-512:	952200E26BACB5534A4FE73173871459DE27558032DE553C82BA96C371D09865616A8B7A543BFE7CB7B1DEB89A898B0491431A76F65D9012CEDB75E02359F4CF
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/3291718278215255336/index.html?ev=01_250
Preview:	<!DOCTYPE html>. ..NOTES:..1. All tokens are represented by '$' sign in the template...2. You can write your code only wherever mentioned...3. All occurrences of existing tokens will be replaced by their appropriate values...4. Blank lines will be removed automatically...5. Remove unnecessary comments before creating your template..-->.<html>.<head>.<meta charset="UTF-8">.<meta name="authoring-tool" content="Adobe_Animate_CC">.<link rel="stylesheet" href="https://07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com/fonts/toyotatype.css">.<meta name="ad.size" content="width=728,height=90">.<script type="text/javascript">.var clickTag = "http://www.google.com"; </script>.<title>index</title>.<style>..#adchoice {....position: relative;....width: 728px;....height: 90px;...}...#adchoice img {....position: absolute;....z-index: 10;....top: 1px;....right: 1px;...}..</style>. write your code here -->.<script src="https://code.createjs.com/1.0.0/createjs.min.js"></sc

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1200
Entropy (8bit):	7.722270643484805
Encrypted:	false
SSDEEP:	24:At/v6byIOUigka0BP7puvkOqvK3i6b+wbIwats47ldceSbySesh3:At/v6byRgkH7KHjytwats2dhSN5
MD5:	D729C468DA955D0B09F0B3643498B0BC
SHA1:	6DB80E85D1136746479782A44FB9AEB04D9F9DA3
SHA-256:	68019E3F0049F29699AF7BF105541D3FD937C7C8AF71737C632B35B7517278A9
SHA-512:	5171B56CC84177E1F8C812D5CDDFA338F503D4DAEA1FB770D512B37CB2736EF19D60EFB4A0F4AAE27345837F4F6E85D5DDD0F29C4C7DA1A3429664DC9418B699
Malicious:	false
Preview:	.PNG........IHDR...P...P............pHYs..........+.....bIDATx..N.A...l?...DJ.(.k.(..(2Rj...AJD. ...:RP^..."...2@...A:d?..S-.........3.........;.4.A...4...{.X[.t77Q.q..gR....)u.=...Iu...O...........F.....H.".`..)IBd.,"<%).5.....N..;.x.$.lss.......L.........4..<..Dk.e...h....\!........M.q....n..v.5i...3.@j.Q.L.... 5l....0..K.XFxJ......OI..L&.....]c.....R.j.&Q3..vS...y...F.jU.?...^..M.'.+.r.Sr.X.....qe<..<..(....&V...g."..i.q..8..4..d^6r...jk..N..p..i....\|..@....DQ.^..VIx.k...0..+.4X.!z.h.d....'D..(.a..t.=....C..9Q.....Q.1..U.i....K..H......4x.g..U.3Y.."G..0........s.< }..w8....O....Oi...C.........k@.O)-..l..$.p5.]T.........{i.-].I.F........q%..6.Z...u.Ij.K(.9...).m.5....Wa.D.\|I......>0kq..c...8.F.wx.....IZ).7P.V...e1.m....0../.M<.8f.........H..M...a.<.........JwV..G.N.k=0..c.. ...."..0.7...d8..wx........A...Sv...'.T.D....S..ax"......s@.D.'BU.D....S...P.D..<...O....O$x"I.O.......Y.{.oL..N.M.A.....TG}.N......-..E..jW..p.....0..,;D.x@b.^V.....L.&....

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=ZmVjNjJlZjZjY2Q2M2E5ZWRkODY0MzQzYzIxODljZDM0YjA1NmRlOQ&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (518)
Category:	downloaded
Size (bytes):	537
Entropy (8bit):	5.2694959592165125
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT79+THoXWobvbUf6JRcL5Y2PqcRMZ/xT9fCYKO+kFl+M:WDlf8EgoX3bT81baRKO+kFlb
MD5:	0621723A6E7F25F14DBC4D2650D173B6
SHA1:	81DFD8AF28FADE14548BB39595FBE42E126836D4
SHA-256:	77C2DCB2934016A537814C633865EF48AEE47255C2CC501616F15578DA1DE6D5
SHA-512:	4258515A65EA9194037EA2591A0B5890CC2ABF9E449BB677922279EDE1CCB5ECFBEE150452D0C1DF6F6B1B16BB9ACFBADE3A2E2889A26B0231454A48A85A0D11
Malicious:	false
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=OGvIOOwZEX0AX&cb=1&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22sd%22%3A%22sidebar_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%2C%7B%22sd%22%3A%22content_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JJuNb5f4HQkkf6qojJVOHcAAAAGMX8JrqgEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICC6o7_H","size":"300x250","crid":"503415726","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"content_btf","amznp":"1uktatc","mediaType":"d","amznbid":"104jv28"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"1"})

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	25314
Entropy (8bit):	7.948909983908925
Encrypted:	false
SSDEEP:	384:KZ0DVqwv2vO50Jv+zHtNDFRID7ODELWBLgo1nSW1t9Wftb0n63X2HPFSXsJ2POEN:KZevSYHXs7dLCc0a4n6bXYoO6r
MD5:	4A3FAB82B301CC45BF9796FF81BC49CA
SHA1:	D921BED1FB67ADDE58C29C9D650DF21A4C41080C
SHA-256:	986243A1C58598AC4978696B967CA261B9F9F39F69180D801D10BA7FA0246FF3
SHA-512:	5CBDEC23F1BE401EF9BBFCBDF72B244C9628BD521D35B59DD8BB710C4253AB57107300272902AD119FA2127D4146729AF49B84E6B93C2A535215B45A441EC3DD
Malicious:	false
Preview:	.PNG........IHDR...X............;....PLTE...........................................................................................6>.... !...9CGENRNWZ......X_c>LVCOV...ry.#'814:...'=`,7@556......q\|....555-?]KP....{}.JJJ4Fw.....$]q.##(3Jj/Gi.;..BASVZ....:Y .".........^m.......Ig....................... .....................,,...455-/0. #..122',..%"#$''&888...,4]"" .#A$+M)1W"'D..&..0;<</8b"%((.R. <)-/Q^. (J..5...5?m>??$'DO.IV.LX.@L.7BrN\.;Fx...GS.Tb.wwwBBBXe.Z[Zfs.>I}WWV_^^\j.RRREEE0:h`n.rrqKKKHHH......mmlOONm\|.jv....6H....4<fbba3C}eefBO.0>uiih?K....!+T...FU....\|}}...v....".]\g.z..Q].*9o9L.&4er....N\.CU.<Er...}..Wb.<P.....#7bn......._v...r..Od.gv....CY...QJ_....n~......Wg..........{..JU.EOx...]p....\a....{..Wk.i......=......ims38QINg<B[fk.SXu...uz....hf^.{.~u....s....>'K)..h]i\|?v...StRNS......&-.5DN..<X.az..j....r.............`D.6m......^....x............o5....}..l......iTXtXML:com.adobe.xmp.....<?xpacket begin="."?><r:RDF xmlns:r="http://www.w3.org/1999/02/22-rdf

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3138
Entropy (8bit):	5.000483872549629
Encrypted:	false
SSDEEP:	96:6wVLr5dcYqVLSpIVL0mqVLw82VLgMSVLUK:6QLb2kI/2tKR+z
MD5:	F48C0950D62316FC8F101F8E6BCD9743
SHA1:	6E66E1E6D9DF39ED6AB03E34D8B990D7DB19302D
SHA-256:	DB2A887D72C63529CBB7538DED278F1A07CCB9C5819FB3E29CC260414FF38E94
SHA-512:	74D9B89B5663DE29DD7A6048072566E1A6D490D4E8B0BA0C9B702DAC24503B5C6C370DE0DB5DCB5DD872B3965883097BA71AEE402375E46EB5D33EAFE7A335A1
Malicious:	false
URL:	https://07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com/fonts/toyotatype.css
Preview:	@font-face {. font-family: 'Toyota Type';. src: url('ToyotaType-Regular.eot'); /* IE9 Compat Modes /. src: url('ToyotaType-Regular.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('ToyotaType-Regular.woff2') format('woff2'), / Super Modern Browsers /. url('ToyotaType-Regular.woff') format('woff'), / Pretty Modern Browsers /. url('ToyotaType-Regular.ttf') format('truetype'), / Safari, Android, iOS /. url('ToyotaType-Regular.svg#svgFontName') format('svg'); / Legacy iOS /.}..@font-face {. font-family: 'Toyota Type Black';. src: url('ToyotaType-Black.eot'); / IE9 Compat Modes /. src: url('ToyotaType-Black.eot?#iefix') format('embedded-opentype'), / IE6-IE8 /. url('ToyotaType-Black.woff2') format('woff2'), / Super Modern Browsers /. url('ToyotaType-Black.woff') format('woff'), / Pretty Modern Browsers /. url('ToyotaType-Black.ttf') format('truetype'), / Safari, Android, iOS */. url('ToyotaType-Black.svg#s

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
URL:	https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&src=esp&ver=1.2.0&us_privacy=1---
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=r1&google_push=AXcoOmQMrhqggjKOJtdybiG92OMegW-1z2y2Qb55hvd3etfOKmu4SbRSEAtoJK7a9rSRle3AWJp6OzlV0nv7ZBkRPbrVGTJNJ1s&google_hm=BdyKTmYygkD3qFfBdk3YpDs
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 500, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	27175
Entropy (8bit):	7.9867326276261705
Encrypted:	false
SSDEEP:	384:vPICw74+aC/2mpwVREyqqtBzlmF/KZl46k/4zjNcJvjjd6CzMZkv/bNYe:4Cw8GisQjlmFyZl43/4z5c5j0CzMOv/X
MD5:	771D40B3AFAF8D70E7068D1BB1AAC2C9
SHA1:	CB10EDBA3689407DEA5DDEB70B9D0E4D5B45892A
SHA-256:	9421F3014E1EDE1C6D4A9A5EDB4BA638AB3CE0C8A05404FA478771C2FE7EC9E6
SHA-512:	3C6A75C8F31ED3FA4E485E7E24056D1A1B9AEC3193F746C95EDB27EC9295F6A5A479B79CAE656823FEA00E19DD239ECCC54ABEFD8B324727F6CE1EB617D1DA30
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/4207599684547219402/images/glow.png
Preview:	.PNG........IHDR...X..........~N.....PLTE...............~......tRNS.\$..I:.S....iTXtXML:com.adobe.xmp.....<?xpacket begin="."?><r:RDF xmlns:r="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><r:Description xmlns:x="http://ns.adobe.com/xap/1.0/"><x:CreateDate>2020-09-19T14:19:05-00:00</x:CreateDate></r:Description></r:RDF><?xpacket end="r"?>..X...h.IDATx..\.u.0....&.6.s6p...l..H.I.m{n.....(.B$....Cj..~..!..E..U.>.L...A........'2_.A?.....v./........v.....,.#.j`G.I......;Xv.+ ...../.P..Y..)......@....m.O..........P...w.S.Q.4".,.G....?.K.BD/..y.>.h..&...Q.q.........a..C.U.!...6.N....V.L....J.\.z...,......c.#.V....W`!....`.....8.1.Z .o5...J.]...l#..C....j.w5.j..dO.g.R_l..E...5..T.7{...>...)..%...T.&)R..B..3...C..Bq.<P..I./+V....)u.%.D\|& ..Z..ca.0.YW.Z....@.ud/.v.4.........WRd...R..U.^....g...n...b.I..F.......I..C._....x!/...C..,...lx$T=.&.<.g..8...(Z....;..$jN.....,.f...k....."..J..l.N=....\L.....V...`1.Q.xe..e.#.y...$e...1+.;=.Y).K....M.).=..4....TeW..nj.....,

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2717
Entropy (8bit):	4.655090215032061
Encrypted:	false
SSDEEP:	48:+kaUW6DyMqsqRJJLSVKaQMQKR4QE6TjnEHBFJuQM7iMWVkq69k6pMz+VjKkeIS:qbAyLRfJYKaQaf0XOxq69o+VjKkjS
MD5:	0B04CB7B853664DE647C1CC6B50BE1C2
SHA1:	99028BEC954E6A5754713431A169FDDE1A07DCF4
SHA-256:	E993B496105D66491F33D4C5FD66C0048CE5964FACCF3F3C8E385F5DFEBD685F
SHA-512:	EFC42C2AE7F46A88BF83CC12F685B99D63308BF821D9B2C74A2FC1BF7E3E7ED2BF34D1DB25D559836D6E7DA7C43F0323B6DCDC022C7E8AE09FD28A864A5A0854
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/plugins/wp-review-pro/assets/js/jquery.appear.js
Preview:	/. jQuery appear plugin. . Copyright (c) 2012 Andrey Sidorov. * licensed under MIT license.. . https://github.com/morr/jquery.appear/. . Version: 0.3.6. */.(function($) {. var selectors = [];.. var check_binded = false;. var check_lock = false;. var defaults = {. interval: 250,. force_process: false. };. var $window = $(window);.. var $prior_appeared = [];.. function process() {. check_lock = false;. for (var index = 0, selectorsLength = selectors.length; index < selectorsLength; index++) {. var $appeared = $(selectors[index]).filter(function() {. return $(this).is(':appeared');. });.. $appeared.trigger('wpr_appear', [$appeared]);.. if ($prior_appeared[index]) {. var $disappeared = $prior_appeared[index].not($appeared);. $disappeared.trigger('wpr_disappear', [$disappeared]);. }. $prior_appeared[index] = $appeared;. }. };.. function add_selector(selector) {. selectors.push(selector);. $prior_ap

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3385)
Category:	downloaded
Size (bytes):	207619
Entropy (8bit):	5.397051669376175
Encrypted:	false
SSDEEP:	3072:ud2WE3C2h7KK0EtUQ5rirsr0brzM5D75fPNX1ipEvy8OAOzb:u2H/7Kd4w60jM5D/X1ipEvy8OAg
MD5:	6BB62E86FD8F7207A1F102F134795564
SHA1:	6303E4D6A7B86FFD91AF163C2B75BA534F9F1470
SHA-256:	9129C3CB5B3B6D486D719614EF0E64508258A9D15DE6C8BFAB167E3DA9DD87F3
SHA-512:	53AB7CF1214C3A249076F61276A9473698153CF25CF2F06F100C3FC4FE242CA72A1424B4B2C4CEB6A01D8C3BF2916FA816A847C8522B8544C1E35F34DA2EB928
Malicious:	false
URL:	https://www.googletagservices.com/activeview/js/current/ufs_web_display.js?cache=r20110914
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Ng=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Ng};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
URL:	https://tags.bluekai.com/site/2964?id=ViN9mkBO1Rd9xZ5
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2575), with no line terminators
Category:	downloaded
Size (bytes):	2575
Entropy (8bit):	5.623285305240887
Encrypted:	false
SSDEEP:	48:CfOlaiUedCKAHVTg77+ysGJdNa0BlsC8t5nC5lTjIq:Cf4aindCb47FsyyC78te2q
MD5:	A77BFEBB8E70C20811D274162D1B144C
SHA1:	31266E096981ED22D072AD75E6C3C0169B78C3F8
SHA-256:	23FEC4B74C2BD8C7070D772362BD5876FB64298F22E6BF18B855FC71379EE393
SHA-512:	851F7BDAFE53DC059AA7E3050A806D5701538D39DC9B5648594D32BB072C329C76B805182FD31CB1161E38EA04E74EB95DDB38E2E9554B27D31604270EF3709C
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=2289741&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D');PubMatic.loadAsyncIframePixel('https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=htt

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6456), with no line terminators
Category:	downloaded
Size (bytes):	6456
Entropy (8bit):	5.405141795925855
Encrypted:	false
SSDEEP:	192:JVLQHOUc1O744HSJunGz50aTG1+OHFi7A2BdBOIi+fFjOrK:jUns4GV0aeFi5BdBOIi+9jOrK
MD5:	B1F88EDBFC65DF5D8098D9F5ABE76437
SHA1:	889312A2F677B610ACC119F7AA2FFC6D4AF1EA90
SHA-256:	43CDBB1985231AFAB309DE0BE719EF8FE3A81228BE641DE8B454D1127209F6A7
SHA-512:	953165A4E0176DCB0944D50BD61E119999A3A6283BE09089B0DE4C0802B6C5D7EA8DB13CFE296D157CA7DE9B9BAEB9D0397A06FD4FD368A15F7883D92163BD79
Malicious:	false
URL:	https://scripts.mediavine.com/tags/3322/dc47ee0bbce5ba61d4c4.min.js
Preview:	(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[3322,9110],{8078:t=>{t.exports=function(){!function(t,e,s,a,i,n,o){function r(s,a){e[t]._Q.push([s,a])}e[t]\|\|(e[t]={init:function(){r("i",arguments)},fetchBids:function(){r("f",arguments)},setDisplayBids:function(){},_Q:[]},(n=s.createElement(a)).async=!0,n.src="//c.amazon-adsystem.com/aax2/apstag.js",(o=s.getElementsByTagName(a)[0]).parentNode.insertBefore(n,o))}("apstag",window,document,"script")}},6921:(t,e,s)=>{"use strict";s.d(e,{HW:()=>d,Yg:()=>u,qb:()=>o});var a=s(4441),i=s(6643),n=s(5595),o=(t=>(t.yes="Y",t.no="N",t.notApplicable="-",t))(o\|\|{});var r,d=((r=d\|\|{})[r.NOT_APPLICABLE="1---"]="NOT_APPLICABLE",r[r.APPLIES="1NNY"]="APPLIES",r[r.NOTIFIED="1YNY"]="NOTIFIED",r[r.OPTED_OUT="1YYY"]="OPTED_OUT",r);const c=(0,n.DY)("test","ccpa"),p=class{static init({cpa:t},e){this.gpp=e,p.cpaStatus="1"===t?"1":"0",window.__uspapi=p.__uspapi,window.addEventListener("message",p.handlePostMessage);const s=p.cookie.value,a=s&&s[0]===p.VERSION

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
URL:	https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1---&b=1&g=wO%2BZMA%2FYawPipMinqc8CXvDYcoUq3KBxFo%2FbBkaLyP0%3D
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.807324007837037
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4DCVeBSyfnM:8WiIUemo/H1fCYKbY4DCVeSMnM
MD5:	3E71A9D0B955B889DF866722E420100B
SHA1:	0F352762CD043DB883E5C4F503BFF40B5D39F789
SHA-256:	5E922F7175050613517B8944534BA4DD68837AA690E9FB12E6513D8465E84CC4
SHA-512:	EFABD94A713A9B533F56FD49EE1629B041F754EC4DFCD5DF81283308783EB744BC987AB3D394B89DD35E38C59BF2C87444581068B6736A2C0D8EA3B560EDE063
Malicious:	false
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=jURFnvrSHaGY9&cb=1&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22sd%22%3A%22sidebar_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%2C%7B%22sd%22%3A%22content_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg","cb":"1"})

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 782x442, components 3
Category:	dropped
Size (bytes):	14395
Entropy (8bit):	7.8170002791605935
Encrypted:	false
SSDEEP:	192:yfMUOlwNQS38NktCNyj+J6fkxaxixPY9FhC35Hi97s8nU0HYz1O5guIZenWYKSML:+oGHsCtjjgMmIFU5ipHBhKSTpOi5O3z
MD5:	73B85473A13FCF73F7767AFB4D29FECA
SHA1:	85A86B84F8A50559DCD35E6F62E0540291DC1671
SHA-256:	6F918E479D2FA725AE3B5B278363AD28E31C811573C4D7744F7628FBEC56D51B
SHA-512:	2584E326A28ADF4A267B0D5FEA000A140DB7844A693321691E7E81671390DA40FB7C52694A1154AF703EC395C5CD1B9DC201B2B4D0E28114A44FFEFD27C6FC7C
Malicious:	false
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777..........."........................................J.......................!1..A."2q..3Qa...#...BRr.$%4b...5cst..&6CSd...................................."......................1.A.!Q."Ra............?..0.$ .B.!........`.`X%.C..b.<.@C..B.`.......G....L.&.H..X"@...B.0...H.H...'.......-./f.o...V~..x.....wY.$."Y<Oi...TA..L.!.....T..\...\..aUL.d..+......aT..z.T.Q",SP.d....-.j-...SZ..iG,..<.M.h....O.c...W...5..r.......,./.-..)......4z8l.G....3..K..cV...\|...2...k@"......A."....J....:..W..P_}.4u.e.(hbC.....@...d$L....1\L..h.E..(.......A....`...`.Q.`.4......!..x..@0. K..H.5....L...`.... ....X....X..A .,...A.H.".......,..X......`....,..Z.........,..G.......3....".6 ..Lbe.e2,.......(....l.dY6...k+....1......{..........&.Z...c.....[C....-.7.d....R.r....Z.U.k.C....5....9'......p..TU.....k$...#.. .8.......

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.399225630228546
Encrypted:	false
SSDEEP:	24:4HksuFq5/Jz2pRNrBZJuvu8goqc0ioNhc+k4+mI:21z2bNrVENtmN+s+j
MD5:	3EA74D08AD3E1D4CF576778CF3CB5B5D
SHA1:	41CFB9F88C801BA0F5DE1C9487D6936AE6489B7F
SHA-256:	5DF5B783FDD9E8B2086E99CD192CD1285DD3A3CA13B38524BC4BF3AAE708D3A5
SHA-512:	4F0B5A91380B68BEA37BDA50246FA4A3081FCFB66EF98E59616A9DE3E486D46D09A424E4A8706BA1961D4D96EC54A1C9E375121E8C25F73B404F09B107A1ECB1
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="8Ndgm31M1y19QAjhSv8uYQ">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1702413615313');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60835), with no line terminators
Category:	downloaded
Size (bytes):	60835
Entropy (8bit):	5.519949356111581
Encrypted:	false
SSDEEP:	1536:y8bu3MuF2wXePR2T/HbREm93lhbozxXBB0l+1H9RpkFmI6fnu0MIBG+CwmzpRlWF:y8KB3lhcz7kFmI6fniIBGrwmzpRlW9lZ
MD5:	3AC36B93E230C09ABEA8266587E3313B
SHA1:	CA2C6609B8BD1711D55DC94B5A98987E68545224
SHA-256:	E7DC2D96E7B17036114E965BC4FD20227F0285F0E0A7530015FB57E6EE3A959C
SHA-512:	4C00C4E494C7FD15F662D256885381CE7DA3B48223D78A75A7E5B789CD9CC32D6D7FE3C6E5F440A9DC67ED244E4E44D30A09F1AEB42AACDA93EEF0B1AE4C36B8
Malicious:	false
URL:	https://scripts.mediavine.com/tags/6381/7b1b5bc2bf50b7f1fd3d.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[6381],{8473:(e,t,s)=>{s.d(t,{W4:()=>Ae,Dc:()=>a,HR:()=>_,n1:()=>se,An:()=>Ee,E:()=>re});class n{gppVersion;cmpStatus;cmpDisplayStatus;signalStatus;supportedAPIs;cmpId;sectionList;applicableSections;gppString;parsedSections;constructor(e){this.gppVersion=e.gppVersion,this.cmpStatus=e.cmpStatus,this.cmpDisplayStatus=e.cmpDisplayStatus,this.signalStatus=e.signalStatus,this.supportedAPIs=e.supportedAPIs,this.cmpId=e.cmpId,this.sectionList=e.gppModel.getSectionIds(),this.applicableSections=e.applicableSections,this.gppString=e.gppModel.encode(),this.parsedSections=e.gppModel.toObject()}}class i{callback;parameter;success=!0;cmpApiContext;constructor(e,t,s){this.cmpApiContext=e,Object.assign(this,{callback:t,parameter:s})}execute(){try{return this.respond()}catch(e){return this.invokeCallback(null),null}}invokeCallback(e){const t=null!==e;this.callback&&this.callback(e,t)}}class r extends i{respond(){let e=new n(this.cmpApiCon

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1200
Entropy (8bit):	7.722270643484805
Encrypted:	false
SSDEEP:	24:At/v6byIOUigka0BP7puvkOqvK3i6b+wbIwats47ldceSbySesh3:At/v6byRgkH7KHjytwats2dhSN5
MD5:	D729C468DA955D0B09F0B3643498B0BC
SHA1:	6DB80E85D1136746479782A44FB9AEB04D9F9DA3
SHA-256:	68019E3F0049F29699AF7BF105541D3FD937C7C8AF71737C632B35B7517278A9
SHA-512:	5171B56CC84177E1F8C812D5CDDFA338F503D4DAEA1FB770D512B37CB2736EF19D60EFB4A0F4AAE27345837F4F6E85D5DDD0F29C4C7DA1A3429664DC9418B699
Malicious:	false
URL:	https://secure.gravatar.com/avatar/ba51f84bcae9a5f5db84699198452d64?s=80&d=identicon&r=g
Preview:	.PNG........IHDR...P...P............pHYs..........+.....bIDATx..N.A...l?...DJ.(.k.(..(2Rj...AJD. ...:RP^..."...2@...A:d?..S-.........3.........;.4.A...4...{.X[.t77Q.q..gR....)u.=...Iu...O...........F.....H.".`..)IBd.,"<%).5.....N..;.x.$.lss.......L.........4..<..Dk.e...h....\!........M.q....n..v.5i...3.@j.Q.L.... 5l....0..K.XFxJ......OI..L&.....]c.....R.j.&Q3..vS...y...F.jU.?...^..M.'.+.r.Sr.X.....qe<..<..(....&V...g."..i.q..8..4..d^6r...jk..N..p..i....\|..@....DQ.^..VIx.k...0..+.4X.!z.h.d....'D..(.a..t.=....C..9Q.....Q.1..U.i....K..H......4x.g..U.3Y.."G..0........s.< }..w8....O....Oi...C.........k@.O)-..l..$.p5.]T.........{i.-].I.F........q%..6.Z...u.Ij.K(.9...).m.5....Wa.D.\|I......>0kq..c...8.F.wx.....IZ).7P.V...e1.m....0../.M<.8f.........H..M...a.<.........JwV..G.N.k=0..c.. ...."..0.7...d8..wx........A...Sv...'.T.D....S..ax"......s@.D.'BU.D....S...P.D..<...O....O$x"I.O.......Y.{.oL..N.M.A.....TG}.N......-..E..jW..p.....0..,;D.x@b.^V.....L.&....

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 238, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	23383
Entropy (8bit):	7.9687985369445355
Encrypted:	false
SSDEEP:	384:8RamXAdpDtXmOd7mGae1Z67GWrX1mHMKMB+DeP0AnacGJqqqgfX62mHtJna:rgsvWOdyZe1YyWj1EtqPlCqU62CLa
MD5:	9FDA4BCA54D2D78D32DF54AFA99982B3
SHA1:	EA65A6D9FECF79E465F207EC59EC2F7CBE048507
SHA-256:	4EF93C353D5EF892EF9008651E0ED578759C0C309AF07A282FA5576BC273317A
SHA-512:	78F1B7483D2D2CECB986A0A8AB5C660907B820343ECA9652B47CEA7B18B8E19240655FC732351BDCF9FC4BD2B4FC1782C95388E4CDB6E28C8A5EEF8F074EEC3D
Malicious:	false
Preview:	.PNG........IHDR.............'u.....tEXtSoftware.Adobe ImageReadyq.e<....PLTE467lno......i......&%&............t...n........um.........DFG[ekO40...iG8.u......gWtPE.XI......UVX..l3-.....n#.<BD...........................gx.) ....T[aLRV...tk...I%..qW...rdX.2(P..FLP9;=...TC@.F=...d../02............../((........YSD++-....\|`........]N...E;<...0,/......d^^610.....~.....z... !...#..[_].........OMPMNK@?7............'-*..............................4w....YmIDATx.}.C.G..n..jP.,.;...........&b......"..[..W..s.......}.D......\fvG./.......9.....7....e_4/../.<...&....v..n.._vZm...l.'.......7$....W.M'.....Z..^G.u...AgO..O.v.z..N...d...3......A.......M.e.-..7.G...E.~....`.v.....h.O-....o.s.o.lB.v......./..Av.h..sA{.}.C.v..-a....Y."^...5...m@..s.....E.x.~.p.. J.n....!.N..T...#.o...._t..xC`/.._..w..@.4-.i........5......W. ].T.X."Q...[....N..o.v.,4-.....D...lw...../...[VO...._..$..8...r<..{u!.k.&..7.o...-..j.....R7.Vo....m.....V.X7$.&...V.....9.t.

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.97020783365077
Encrypted:	false
SSDEEP:	3:CUzRtrllHh/:dJ/
MD5:	7312A5205389CCAE2576D800255B1DF8
SHA1:	897C14EBB5D7842B621F310E4E90680050FD1C1F
SHA-256:	22816A00DFE9FCDC30063D22717AB9CBAB3AEB2A8E9844E9D774D256DC48B7C8
SHA-512:	110B55A7D8475D18BE9C9786C3A59106D3944E5D4574D3D4C924E0D96A08393D8BE8AA32188F9ADE88EB0718D37FD8E6EB458D903A303B6FECCEAEAE5882C436
Malicious:	false
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
URL:	https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=540245193&val=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 618x349, components 3
Category:	dropped
Size (bytes):	16591
Entropy (8bit):	7.848571616137034
Encrypted:	false
SSDEEP:	192:d1bv+SP5rQBeMGMcoqgpnZ4qAzdJeDfSitkr/ravhjjQDfIXyjZlIp/qqFah:dFUBe8qgpnOqSdJUfSpavhoFZOpLO
MD5:	9EED191CC0FCC8A9470BA7D4C537A66F
SHA1:	F57FDFB6D0BBEA7A3BF073DD7C00D5CF5F2FD1E0
SHA-256:	1142424D8711F5B1E8F9183013D6DEEA278BEABD3966E3FE472676CE7926F537
SHA-512:	0BBB2DF8E0C312852B672F5C3740426C04E5EC2BED9AA941613A8AC23694931949FF7C45BE08C399F9562DBA8BD425751D224AB82498A295662740C25A5856D8
Malicious:	false
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......].j.."........................................L..........................!1A."Qaq2......#..BRbr.$3C...5S...%cds..4t....................................(........................!1A"2Q.3Baq#.R............?...................H.I,...l.......[.wiG...4:...[.MJk...)./...w.U.J...I.R....9._....6.o...v.Q..age.Z.......m......agCL...~o...~-.o...;E.$..6._..Z...Wm.......).....y..S.z.....v)..0.5.-..e.J....Tp......\.+..k%..-f.o%Ue..H......\.T.9s(...eF.s.....q.\..E..nt.......t.....t.....,\\N.....c...x%....0..1\...4m.V}....-3.U+_.f.B.U.;..4.Ex.........i(.o....:4!F.Q.W4..P.e....K.+.g.&.....F...C.a9r...e.D[.......1%,a.4.....z...,v.].u^(.Em?W.^oX.}4:..C~....q...zp1.kB.iP..t..B){..V....,.G?yg*.w[x\|b.H.^..~'..,z.\t..q.G.41."...FL..........H..M..N..W.YR..nK.I.:.SN.T..a].s3.o%...y!.r.......i.6...t..=0Z%.....g).

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
URL:	https://cs.lkqd.net/cs?partnerId=59&partnerUserId=CAESEFOC-Nu9982-BvvVQwo00yw&gdpr=0&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24711)
Category:	downloaded
Size (bytes):	46648
Entropy (8bit):	5.398675334265592
Encrypted:	false
SSDEEP:	768:cfK/z/+l/s/sHs1Rfo0h2gwXLbUYKriG+LEcbnXcf+Y2qisXtQp:cfuL+l1s00agrqLEcbXcmuXtu
MD5:	892B49CEAE1F1EC6706C3FE1EDBE25B1
SHA1:	88B7959546E728AACB5CE6410BEAD6A449B28DF5
SHA-256:	0FCC7CC8324E3C158CB95E1F040FCD05A1C1B7B4DAC8336A8908259242EB1E01
SHA-512:	C778F9144DAB1CEE9A109D6DDD055B7E89A2F8F317381F5ACB2477D8ADA7BCAB9EA28F1E4C926A20DF22F14833E5A5F14D29594A859BDC6E011E99D40BCCDAB4
Malicious:	false
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2023-12-12 07:53:47 PST';.var rtb_sync = {"consent_rate":100,"reset_rate":40,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1"

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	104
Entropy (8bit):	4.807324007837037
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4DCVeBSyfnM:8WiIUemo/H1fCYKbY4DCVeSMnM
MD5:	3E71A9D0B955B889DF866722E420100B
SHA1:	0F352762CD043DB883E5C4F503BFF40B5D39F789
SHA-256:	5E922F7175050613517B8944534BA4DD68837AA690E9FB12E6513D8465E84CC4
SHA-512:	EFABD94A713A9B533F56FD49EE1629B041F754EC4DFCD5DF81283308783EB744BC987AB3D394B89DD35E38C59BF2C87444581068B6736A2C0D8EA3B560EDE063
Malicious:	false
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg","cb":"1"})

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537073059&val=Q7557000061611676171
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
URL:	https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1563), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	7700
Entropy (8bit):	5.14694639451861
Encrypted:	false
SSDEEP:	192:neWqNkJE/D3l+81Z/OpQnd2A3soXQueTL+vv1F:iLl+Y/OpS0osaNO+X1F
MD5:	86C0E37A41EF8B7E6C6BA0E41810A882
SHA1:	CAFA908A6E0EAC06D99330E3F901B0D4F84FDFB2
SHA-256:	8B4D3102D386B430C3DBFD27FE42CB511F949666B887BBE48F1085C61F8B876D
SHA-512:	85FF01DD0F09F485280F8014642D79D55D4A294BC15784BEDB781938B076F84D07C15AABD0A583BBF27FE8D5EE0056EAD01CE988867351CB13C35883F65AEFD8
Malicious:	false
URL:	https://interactiveds.com.au/IDSau/
Preview:	<!DOCTYPE html>. [if IE 6]>.<html id="ie6" lang="en-US">.<![endif]-->. [if IE 7]>.<html id="ie7" lang="en-US">.<![endif]-->. [if IE 8]>.<html id="ie8" lang="en-US">.<![endif]-->. [if !(IE 6) \| !(IE 7) \| !(IE 8) ]> >.<html lang="en-US">. <![endif]-->.<head>.<meta charset="UTF-8" />.<meta name="viewport" content="width=device-width" />.<title>Interactive Design Services \| Analysis, Design & Verification</title>.<link rel="profile" href="http://gmpg.org/xfn/11" />.<link rel="stylesheet" type="text/css" media="all" href="https://interactiveds.com.au/IDSau/wp-content/themes/twentyeleven/style.css" />.<link rel="pingback" href="http://interactiveds.com.au/IDSau/xmlrpc.php" />. [if lt IE 9]>.<script src="https://interactiveds.com.au/IDSau/wp-content/themes/twentyeleven/js/html5.js" type="text/javascript"></script>.<![endif]-->.<link rel="alternate" type="application/rss+xml" title="Interactive Design Services » Feed" href="https://interactiveds.com.au/IDSau/?fe

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	20067
Entropy (8bit):	7.934808477345554
Encrypted:	false
SSDEEP:	384:aYUMqmB7tHNQdRg8KzJFftWQ6MLStwJdh2bup92vTvLu+1LS5:C+NQdR0VWQFvHEKpoLd1Lm
MD5:	31709343B72E76DED4DD7BBD16876D75
SHA1:	AD5F47D70F5ADAB726D6AFB7C624C66744E35063
SHA-256:	F396F37E70D5689893A9D1EFA342F12C74638A8584B00ED09402C108B7CEA1E3
SHA-512:	D0244DCADE88CBACBF116582A8F2AB999B03BD0E3EBF5027402E4CCC6956F4F6E392759B1C2292ECBAE6F6E19B770920A27B1ECC62E6755654093D21425984EE
Malicious:	false
Preview:	.PNG........IHDR...X............;....PLTE.................................xyy...................................................................................................}..nrs.....................LMM..................w}.......vwwwxx......!"!...............................?@?...,-,...~..DDDbdc...XYXEFE........MNM......(((!!!......................[\\...~..IKJ>?=............................................................................&&%..........""".........***.............................................ddd221...`aa......................fgg...........555{\|\|.........qqq......]^]......sttnoo}.~vwv.....Z[Z...hii899BBB...EEE...jkk...........lml...<<<...LLL...HIH.....WXWOOO.................???...QRRTUT.........................ZoPE.sk^2$.jN...{.c[.aG...J3.....UE9.......ptRNS................/.#.7.(.J. ..@....v]S.nf.............O6........xm"#;...n4..V......r....X.................<\A..J.IDATx......................................................

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24578)
Category:	downloaded
Size (bytes):	33942
Entropy (8bit):	5.444140864984185
Encrypted:	false
SSDEEP:	768:e9/6q9jvML3YMtCGsOU2Rfz4wDQjZvy/DQWwY4RXrqt:ex6qNvGtCGY29DQjZK/DQWwY4RXrU
MD5:	E9D56BDF8A5EF0E8E9EF956561E237EC
SHA1:	387A4717257B550F012B5ACCF9AE947A0EACBB1A
SHA-256:	9735C985CBC8255FBEAD197E171E45346E6B556C31D2599E7EBF73A8A46C3CAC
SHA-512:	7827CEAA14BEF1925B163277FCC232F02CB988377D13331B1094607CA71019AE6BD58C33E8F7C2C9A8FC40234BCB02A3BE77AFB8BD6FD2DBFFB93121F6E2909D
Malicious:	false
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=6&cv=31&https=1&cid=8CU5E5U43&prvid=2034%2C2033%2C193%2C2031%2C2030%2C273%2C154%2C2029%2C2028%2C2027%2C159%2C2026%2C2025%2C117%2C238%2C359%2C97%2C99%2C56%2C59%2C3012%2C3010%2C3008%2C201%2C2038%2C246%2C4%2C126%2C203%2C9%2C208%2C251%2C175%2C132%2C2009%2C178%2C3018%2C257%2C3017%2C214%2C3015%2C336%2C3014%2C337%2C338%2C459%2C339%2C77%2C182%2C184%2C261%2C141%2C262%2C186%2C461%2C188%2C222%2C2017%2C147%2C225%2C226%2C10000%2C80%2C108%2C229%2C508&itype=EBDA&purpose1=1&gdprconsent=1&gdpr=0&usp_status=0&usp_consent=1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":138,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":"e","coc":"NA"},"cs":"6","lookup":{"con":{"name":"con","time":364,"cookie":"data-co","urls":[{"type":"img","url":"https:\/\/medianet-match.dotomi.com\/match\/bounce\/current?version=1&networkId=57734&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D6%26vsid%3D%3Cvsid%3E%26type%3Dcon%26refUrl%3D%3CrefUrl%3E%26vid%3D%3Cvid%3E%26axid_e%3D<axid_e>%26ovsid%3D%24UID","eu_url":null}],"pvid":42,"isBl":0,"g":1,"cocs":0},"g":{"name":"g","time":14,"cookie":"data-g","urls":[{"type":"img","url":"https:\/\/cm.g.doubleclick.net\/pixel?cs=6&google_nid=media&google_cm=1&google_hm=<encb64vsid>&google_sc=1","eu_url":null}],"pvid":77,"isBl":0,"g":1,"cocs":0},"dxu":{"name":"dxu","time":364,"cookie":"data-xu","urls":[{"type":"im

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
URL:	https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21428, version 1.0
Category:	downloaded
Size (bytes):	21428
Entropy (8bit):	7.98902982301693
Encrypted:	false
SSDEEP:	384:Ga2PJr/Lbhbzz4UzqkvYtAXFsBry2xzz1kdta3OX01k+M5o2Fw4eMeQokBl1ypzv:Ga2Br/L1DVzq6XFozz18teOX01/pYtN+
MD5:	965BBFEA8A5DB5AEA3A63DA8C5B3D570
SHA1:	CE645F4ADF18C4FF26251610878969C9562DE69F
SHA-256:	92A7F8224A1BA2CCFA92D3E1FC55EE5AA7AE20A0FCD80D3331BD660878A090F5
SHA-512:	17BDB764F190F97907462B8D0526474E0BA903A07A3FA3E71968115CC5E2D9E1629979398C6B6E664580B8F294D62F855F8BBF5F3FCCCF3A40D90521E15B186E
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8IacM9Wef3EJPWRrHjgE4B6CnlZxHVBg3etBD7TA.woff2
Preview:	wOF2......S...........SO.............................b..@.`..~..v..u.....X........6.$.... .....X....p.5.=,...x.^?.#..A.~..8....D...g....R....!...)..R.II......U.?.gZ.\..Z&.J...+V..M,!..-KUj;.....A...J<~Fj.o.D.EN....Q$.p.wGO..s....<An26............7]......D........s.s.....)......DU.....?..../...f..c..........J.......Q \|.bT!b'~?F..>...y[.Z...]8\|-^1.K.`7.......S5. .v.....?a&.$............t....&...h...Z..L.4.7!......M. 6...r6.. ..:../. .8E.T..#......\ .S..).t.:L....s.7g..lI.e..A;....rWR8T=..]K...XZ....y.zf.o{9.E:sO...d.}b9qQ.k.A$.CTQ..........(G.qD.."..........u.p..}..W.......V........W..z....L..O...U.....S.B."....?..g.....4g.M..O.j..>..B.C&.....,.#.h^#S...A......_{.......a......Hm.6...7...R.w...y.r.P2.).....I.......].....,o.w..3.:@..1..9.rC.b.l.e.r.W.KS_..;.......P......2..`!(:.l.Y.c..\..G.....U.f'.Z..~.(^....'...F./uJ.*j.+..........ev....4.X...V7...k.BZ(.`..Vm..h6&{.D...p........\....5....../.,..-9...C"d....7...._.o...E......r..B.LJ.k)^. ."..

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmTRp2Qg41CFQgMvCldw0tahTVzpz1Zt6r664qm2RGkEQ9DN4nAS9c7VlV7k2e5TuybDeug2yMNnAtJAmsHSrq_4q9t6Y38&google_hm=UjM1Q0E5XzEwRDk3RjhFM183QTU2MDlCRQ%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	3.7011434673082864
Encrypted:	false
SSDEEP:	3:3FFiAK/kWNuR48FuuKQLvaSdNY:3FFi3bNuRmuXaQY
MD5:	192066050DD01ED3BA2379B66F080742
SHA1:	665DA634DF3A66E4613B90967D27FBCEEBAD4723
SHA-256:	CACF3FCB6F8F5B8C455CC8BF4E75152371740FAEADA4CC8AE491BD2ECCE231DC
SHA-512:	4F83AA692C41DCE3619F44F1125474FA2CD4DE22324A98176A5A32D414693E08185D7B4223AC121970BDD597D81AA8E61376021C20A0D4227B20C732803FD27C
Malicious:	false
URL:	https://scripts.mediavine.com/flooring/countryLookup
Preview:	{.. "geo": {.. "state": "FL",.. "country_code": "US".. }.. }

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41069)
Category:	downloaded
Size (bytes):	41185
Entropy (8bit):	5.258655407348006
Encrypted:	false
SSDEEP:	768:lnMWFZFzBNz1xN2fVhYvsCmgrwwfMD2In1SKJuS+vRt8IpTWdJS4F5IyKnkl5pr8:ln13gflhCvRtxpu/IyKmxq+R2buP1j9M
MD5:	7D0828A8368C2B35939F21FD0B0695D1
SHA1:	22B0AB6E3C50F31301AA816F4FC6C987AFB79731
SHA-256:	18EBC36644E10F87E20812C15E329C1B25848C62CD6CDFE74427CDF8995BC3A9
SHA-512:	B4D60ADE5C3C0E17725A8970D8BA610AE95B2ED2E281665FF5D8B3C1F73C5236FB436A022ACA8C198A99D6AAB0C16E101736EE20DE79E49BD637547918A454E8
Malicious:	false
URL:	https://cdn.ampproject.org/rtv/012310301456000/v0/amp-form-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-form",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function e(){return i\|\|(i=Promise.resolve(void 0))}var s=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}};function n(t){return new Promise((i=>{i(t())}))}function r(t){return t?Array.prototype.slice.call(t):[]}var{isArray:o}=Array,{hasOwnProperty:c,toString:u}=Object.prototype;function a(t){return"[object Object]"===u.call(t)}function h(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function l(t,i){return c.call(t,i)}function f(t,i,e,s,n,r,o,c,u,a,h){return t}var d="amp:dom-update",m="amp:form-value-change",p="name";function _(t){return(t.ownerDocument\|\|t).defaultView}function b(t){return CSS.escape(t)}function A(t){f(/^[\w-]+$/.test(t))}function P(t,i){return A(i),i=i.toUpperCase(),function(t,e){const s=[];for(let e=t.parentElement;e;e=e.parentElement)e.tagName==i&&s.push(e);return s}(t)}function v(t){var i;null===(i=t.paren

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	3.066054462414549
Encrypted:	false
SSDEEP:	3:M3SLlHh/:f/
MD5:	729C3007A8ED0597531B0C76D54A94BB
SHA1:	90FE9B8A8142548FDFAB29F59CB0A164A0EAEF81
SHA-256:	6A842EA462DACA2A0B5A0F5F25BCFC8E0059AC811CA6C6A1BC54E4D9119621C3
SHA-512:	AC44DA7F455BFAE52B883639964276026FB259320902AA813D0333E021C356A7B3E3537B297F9A2158E588C302987CE0854866C039D1BB0FFB27F67560739DB2
Malicious:	false
Preview:	GIF87a........jl...,...........D..;

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12201
Entropy (8bit):	7.965556772521496
Encrypted:	false
SSDEEP:	192:Z4bWQrYnenzRoLMubVfPao5FXjEg69eUq6oFd+fIOpeENYqNVSLGVTfruD/mVE7J:en2RLB99Mg69eUqtd+Zf/+KTY/mA
MD5:	B136D4CAFF264AED34969E2BB588E9F4
SHA1:	720CC098048F8060FB5AD5F55CCAD07411580615
SHA-256:	5A40324782F84F6D41939C95FA035DFF093F014CE40E8523E41ADD857CEDD12B
SHA-512:	7535F0F5E502426DEB5E076F59F3AFD2AE8E3FF77B9366F2F222EF78C10CF8EE50E9347E294AA79D846A168D578BA4933D5A33A0CEEA786EC6F1F33BA9BA1839
Malicious:	false
URL:	https://secure.gravatar.com/avatar/8aa3206ec1e859b32f90e17f138f0450?s=80&d=identicon&r=g
Preview:	.PNG........IHDR...P...P............pHYs..........+.... .IDATx.]..eYr.......;..........&[..A......Y6......~...g......$C. @0...$7[..........k..?.....,$...s.Y;V....E.....nf...'..J......m.G6.5.....+..=..x(...:..X0..9w....1.............._...L7.D...>.>........kD...?...E.._y...N.<x\|....J.y...e.......!....'......+~....fu......O>..o\|...'......!.R .a...(U...9O.4....u.9g.jU....Jz...`.........v.F..q.......f..........]...&..q....R.7n.........F@U(E.....HDD@..B......L..H{.....8..K`.^...KB.LU+",...zB... .-.*........;.$bH.....}...I,.f..`..TV.5..GL.......c8...U$.B;...].......?$?....C.11..U....!`".....B....@..Z..H..b..J.X........./H).a..!.U..H..a... .R...R.....lT.v.C[D..".(.. .....<..t)A..p~~.7o. ....]..E..B.9..R+!$...."......&..G.E!.e.J.aR.. @.FD.&. .a$D.-.U.V0.T..~.v.o...)Uk.u.-.B..@.."L...yBBdu.f%B..."......._..?@A..T...)%.....B.w<....a.....#.H...~.t)...Z1.~.$.R....."V...~8Pbd..[.7<}yC...77.y..#..f.Fk..o.A..HJB.j....X.....#W.Y$..5<U.Rp.9bf..kJ)d+...X0S..............

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_hm=d3kxMEhFcnE0U28
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32043)
Category:	downloaded
Size (bytes):	242057
Entropy (8bit):	5.386392436569304
Encrypted:	false
SSDEEP:	3072:URDNWAw1kQMqBNmpOHNxBjEYpf+hD5IJ3ui30V:6WAukHOHlEuf+hD5y3ui3y
MD5:	C71464532C0FC2020D8E8667ECFD9A3F
SHA1:	45F5CBAA3881797FD241F040838D495EE8170655
SHA-256:	E439BEBF8DE2DF0582273906D2C1DCEFF2387C661EFB2152EF1C28420CE4E7E5
SHA-512:	0D4A413DA493FE9D97D2533F896577652B3EE88927FD244E374AFDC46C669C287DF210A5C6E6E0C826CF74553C293966BB18285EED8DD98EDA4ACC504BC0D1B0
Malicious:	false
URL:	https://code.createjs.com/1.0.0/createjs.min.js
Preview:	/!. @license createjs.* Visit http://createjs.com/ for documentation, updates and examples... Copyright (c) 2011-2015 gskinner.com, inc... Distributed under the terms of the MIT license..* http://www.opensource.org/licenses/mit-license.html.. This notice shall be included in all copies or substantial portions of the Software..*/.this.createjs=this.createjs\|\|{},createjs.extend=function(a,b){"use strict";function c(){this.constructor=a}return c.prototype=b.prototype,a.prototype=new c},this.createjs=this.createjs\|\|{},createjs.promote=function(a,b){"use strict";var c=a.prototype,d=Object.getPrototypeOf&&Object.getPrototypeOf(c)\|\|c.__proto__;if(d){c[(b+="_")+"constructor"]=d.constructor;for(var e in d)c.hasOwnProperty(e)&&"function"==typeof d[e]&&(c[b+e]=d[e])}return a},this.createjs=this.createjs\|\|{},createjs.indexOf=function(a,b){"use strict";for(var c=0,d=a.length;d>c;c++)if(b===a[c])return c;return-1},this.createjs=this.createjs\|\|{},function(){"use strict";function a(){throw"UID

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
URL:	https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2196)
Category:	downloaded
Size (bytes):	2423
Entropy (8bit):	5.385642120546801
Encrypted:	false
SSDEEP:	48:sZy6P9LJTORsmpUaw5mS9uNoM86c6QOYmCeOEm2OwsmdjO8mf:t6P9LJTwsma57hM86c6QVmCeTm2wmxzc
MD5:	22FCCC286931F71B2E7964DD41A6348F
SHA1:	6A4143FC046C1D920763D438C9100CBD8AC8EE43
SHA-256:	0DA26D66A0F05E259C448A69BF9005AFC1442A50810EBE598725B33DB4790CF8
SHA-512:	903F250E918F03699093E4F0B674C498EA580136DB06ADDDE9CD9516EB2B8DFC7FDCA7F9EB1711ED52F9605D7050CBD4EE32B3C23E615E25669D61717FB7C786
Malicious:	false
URL:	https://exchange.mediavine.com/usersync/sync?origin=https://mathblog.com&src=//exchange.mediavine.com&s2sVersion=production&mv_uuid=6120f800-992e-11ee-8a65-3f15d911ca60&version=invalidate-verizon-pushes&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22centro%22%3Atrue%2C%22emx_digital%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%7D
Preview:	<script>. window.parent.postMessage({. message: 'syncUrls',. tokens: {"mv_uuid":"6120f800-992e-11ee-8a65-3f15d911ca60","version":"invalidate-verizon-pushes"},. syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID"},{"url":"https://ap.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702","type":"script"},{"url":"https://acdn.adnxs.com/dmp/async_usersync.html","type":"iframe"},{"type":"iframe","url":"https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId="},{"url":"https://secu

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=blismobile&google_push=AXcoOmQoKMCsQ0Q88Xqm78Kl0k16pNHGxxkiw38KR-OXsK38t47j4TM1b3ibOhmwvIIhr2KljAeNoLfbCADgINTwy9jvouOPjwQ&google_hm=hmV4xSxLxAMUJDzf2w&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D6578C52C4BC40314243CDFDBBLIS
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	1174
Entropy (8bit):	5.74166936214599
Encrypted:	false
SSDEEP:	24:hY6t2eJJBewfHDdUg8EcvjHODQMJXeK+C6uS/MLmeK+C6uSGymWAuDSXeMzCUtVv:9V4goLHODS1CTXT1CTVyPyCM6Nu
MD5:	2FE2B1F17888E326B010A8CDA72D48D3
SHA1:	59CBBEEDE4C472024C482BAE8529144119BBBD27
SHA-256:	9A9B7FB32E01FD70747F32EFDBD0472FD681C85EEBB0C42D10C7A514820A0062
SHA-512:	30BE2E73020EB97A67709E47DED40E999D352DA9B94EDD946D1315BDA65AD616AAA3CDFCFA675D061E4ED4AE1BAE3F0D245908D44411B2425C49B4345D2F6607
Malicious:	false
URL:	https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>. <script type="text/javascript">(function(){var f=null,g=null;function l(a){var b="";n(a,function(a){b+=String.fromCharCode(a)});return b}function n(a,b){function c(b){for(;e<a.length;){var c=a.charAt(e++),d=g[c];if(null!=d)return d;if(!/^[\s\xa0]*$/.test(c))throw Error("Unknown base64 encoding at char: "+c);}return b}p();for(var e=0;;){var d=c(-1),m=c(0),h=c(64),k=c(64);if(64===k&&-1===d)break;b(d<<2\|m>>4);64!=h&&(b(m<<4&240\|h>>2),64!=k&&b(h<<6&192\|k))}}.function p(){if(!f){f={};g={};for(var a=0;65>a;a++)f[a]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(a),g[f[a]]=a,62<=a&&(g["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_.".charAt(a)]=a)}};function q(){for(var a=window.location.hash.substring(1).split(","),b=0;b<a.length;b++){var c=l(a[b]),e=window;e.google_image_requests\|\|(e.google_image_requests=[]);var d=e.document.createElement("img");d.src=c;e.google_image_requests.push(d)}}var r=!1;

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.215346826699106
Encrypted:	false
SSDEEP:	3:RFrXJFhXA8wq0FPIvn:jrX1A8FIIvn
MD5:	F6AB5FF81934FB35354C4C81A02D4843
SHA1:	A5DAFFB05D48FAEDD64A523AD5FABF80570D5A5E
SHA-256:	FCA34E38DDF5C8D31B91B369935B3CE6E1D2BF935CE3A595E2470DBD9A820FC1
SHA-512:	ED2E53B7F9BE4FF2445082E9B724A0E93FA751C3520CB9699E660C7E41ABA8BA2AA315C77E805E38B0559753E8EF04B3590AC7E1B3D229CE544B8605C7CA6065
Malicious:	false
URL:	https://mathblog.com/2WOFDurG0lJJ.js?ts=26386
Preview:	// this beacon is used by Presslabs for metric computations on mathblog.com.

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lijit_dbm&google_hm=SHozMmhMWkhCRkt4czN4clFVcXJ3MFFi&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmSVy_-gC5Y-omFJt7Lk5ODKvIrl3EqlOku4-wsVnKjTVj98VkJJs5N9r_MR-Hz2uL1fG9PM1u1qXzfAbyrmE6s-V91GDfnv&google_hm=eS1qckREUDVaRTJwRTF3OVhVZXFNQjlOMUZLQ0k2R2kuUX5B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (511), with no line terminators
Category:	downloaded
Size (bytes):	511
Entropy (8bit):	5.0326352486635075
Encrypted:	false
SSDEEP:	12:kxP4L8BM4ZpbqWGZc+L8BM4ZeDWGQL8BM0bpbqWGpkIZcSAXWQ:kDB/GZqBtGVBpGpeSvQ
MD5:	760C7DBB27F781FE2FFFA4946BE9332B
SHA1:	2D3CA244440AB4DC840E564B03E08BF003A5A25A
SHA-256:	B9C77B52464985C96557E8D7C3030B01E75CA95174764105A9251401F74E08D6
SHA-512:	42103606C8792ED53F07DA6941F4953160131400D3BF6BD9464E479A7E40EEB97DE8CB49463895A82677F41742F00196280FF39D9B57CE4A049B57880858B2FA
Malicious:	false
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CMnoyAIQ2OLLAhi0qdfbATAB&v=APEucNVU2zbgXCKVTfZnPV-idvr4Rvu3dzHDbouPrSXHZJpB_grWN0OnHTfY15xfJGKckJg6fimrdE2kSFzN2xfGxsG_MAuWA-5QQuO2TehiFkuScxIkDxA
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://token.rubiconproject.com/token?pid=2249&pt=n&gdpr=0" style="display:none;"/></body></html>

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=media&google_hm=MzQ1NDE1MDk4NjkzMDAzOTA4NFYxMA%3d%3d&mn_hm=MzQ1NDE1MDk4NjkzMDAzOTA4NFYxMA%3d%3d&google_sc=1&google_push=AXcoOmSEOjzqBLsFQxnOP7xUrG2cF5BaguQvqtr9-KDgYXuNjgpQTFGXGylpIKzpBeiGZkhUYxX4P-9KHOpt41KuoeejsR5BLJnE&gdpr=&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
URL:	https://a.tribalfusion.com/i.match?p=b6&u=CAESEHCCewI25ZU6x_gSD7iZ3Og&google_cver=1&google_push=AXcoOmS8U-mCw4GwijVyuN3KkrhhTJLkufULnCgFPEKiy10x4o2QDq1c4gk6dLWBJB_2Va8eYLsISoBbOQtab6dUFFJjbZbRfCm-&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmS8U-mCw4GwijVyuN3KkrhhTJLkufULnCgFPEKiy10x4o2QDq1c4gk6dLWBJB_2Va8eYLsISoBbOQtab6dUFFJjbZbRfCm-%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1190
Entropy (8bit):	7.73183223248929
Encrypted:	false
SSDEEP:	12:6v/7p0LltIs05XLwZhv8/u76hsmwy0GPJq868lf2I45em3p5Kjo4xdqdJSp0SBxK:e0L7aRReCvjUQR45eSak4X8y0458wkV1
MD5:	DB24A5E9B9031771E337852DC286C2F7
SHA1:	9B37B3CC9566A0E675F3B1CDEEF7ABC07BDCA791
SHA-256:	329F0B52FB49ABC33B1BF9D31D2846C5C16731D8F172DD36531E883BFF3BE9E3
SHA-512:	EF3C246B3CC642478F2D8FA64C9B33E010A65F199E66E49EC815E1F104348C9B8D78E6B613F164CB0C9952FC5B1676A6C7686F6ACF975D89A9540359C5BD8F4D
Malicious:	false
Preview:	.PNG........IHDR...P...P............pHYs..........+.....XIDATx...N.A......rX4.......G/...y......g.y.L\|..!$.....l..bB.agi...0LOWw...,.;.v...g{.j.j.].^Y@...=.Ow.q..7.s..'.{8..G...D7.<....(.JZ....D.6..@ J4.'....D.YL...@ J.......Q.M.`...^..y....t.P.>j..X`.c.3...O.E.._..e.z}$..iL........%.<.h.,`\|q.t,%...+.......j....t...JL.u.2&\.i.q..}.i\|%...H....7W W..UbQ\...y.7.J..P%R.H..G.{M..<.M.K\.DIy..W...1I.[$..yEq.@..4Y...y_.Ly.G....<Q.......^.'.hu[u7v...=nM).$....o%......x.H..(.I..$.dBJgq..q..o......$..{I.o..Z..L.@&Q .(.I...F..^{/Zc.K.0BG..R.dk..#]c.....a..d...""Y.....Kn:..........'I'.t..z..cj...S.I...j..".............M.]g.m{...E..3.HbQ..x.(Y...N...FZ...:.5.k6F..t.#+O....S....i+.^Y@sjb..i..).<.a/\|[..t..:%.F].O^.9.3..}.^.Q...Hy.Dt@.m.5.n:..P..L...3.U.(.H.I.WM.d.^..,uBe#)...Q..&..(&..D4"........a...<..D....HI.^.]...o..L:.c.....mx..m5."./._.&8....Q...H.8..4^...vJ...c...M..=.(.....2..,...-....U_.!......K.E...@..1$y@@............C...(..)1Ty....!-,Ty.q....t.C....x..

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Category:	downloaded
Size (bytes):	73447
Entropy (8bit):	5.315425597976914
Encrypted:	false
SSDEEP:	1536:NNDF5DvyAoNTQaRX7tbMNC1fNZz4zKTGkvOsZ0CJ/h:Nn5D0kgxD/h
MD5:	841DABCE0B477A93D9CF7379B9EB1368
SHA1:	F1AFDA122D766036A7C3418D785C17168106A391
SHA-256:	1616C8CD083E6B17F6A75AB0695BD4A4573B31AE8398FFB43758288028F6A773
SHA-512:	F8B298EFFAB6828E6386061FBC87CF6924EB9DBCAF82C559F76F6A8D924A752D97B6FD750BEB90CAC7D32B995903A7A075A17D18060B632DA416444B81943406
Malicious:	false
URL:	https://warp.media.net/rtb/resources/release-20231121-135-adperformance.js
Preview:	!function(){"use strict";var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e,t,n){return e(n={path:t,exports:{},require:function(e,t){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==t&&n.path)}},n.exports),n.exports}var n,r,i=function(e){return e&&e.Math===Math&&e},o=i("object"==typeof globalThis&&globalThis)\|\|i("object"==typeof window&&window)\|\|i("object"==typeof self&&self)\|\|i("object"==typeof e&&e)\|\|i("object"==typeof e&&e)\|\|function(){return this}()\|\|Function("return this")(),a=Object.defineProperty,u=function(e,t){try{a(o,e,{value:t,configurable:!0,writable:!0})}catch(n){o[e]=t}return t},c=o["__core-js_shared__"]\|\|u("__core-js_shared__",{}),s=t((function(e){(e.exports=function(e,t){return c[e]\|\|(c[e]=void 0!==t?t:{})})("versions",[]).push({version:"3.33.3",mode:"global",copyright:". 2014-2023 Denis Pushka

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	56985
Entropy (8bit):	5.970717218066386
Encrypted:	false
SSDEEP:	768:7Wp9UreQNucaNpO69gKRMttMt5074wMtvN+kJ:7Ccn1bE04P9J
MD5:	C9C21A81640807767D4140EB94D930D7
SHA1:	0DB18992F0926A847038D9D73F9AA510DB30746C
SHA-256:	0103A215D873A8B310F0EE0FFBA950384B06836042BE055D2E5A26D3E1A59750
SHA-512:	8D1BBFFAD41E04898C4F03D40F6177F34E8A26FEEED99AA59EDDC741443C1499619D727C14F6AA63E0AA2752F6CF019BCB6942C6AFFC10C47FAD12154DADEE8A
Malicious:	false
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2014244732259650&correlator=4135624563291138&eid=31077976%2C31080122%2C31080115&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&us_privacy=1---&iu_parts=1030006%3A1037824%2Cmathblog%2Cadhesion&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90%7C970x90%7C468x60%7C320x100&ifi=1&sfv=1-0-40&fsbs=1&eri=5&sc=1&cookie=ID%3D70f210562803e33e%3AT%3D1702413502%3ART%3D1702413502%3AS%3DALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ&cdm=mathblog.com&gpic=UID%3D00000da8e52e5ed8%3AT%3D1702413502%3ART%3D1702413502%3AS%3DALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A&abxe=1&dt=1702413605610&adxs=-12245933&adys=-12245933&biw=1263&bih=913&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=4&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMC4xLjAiLCJ4ODYiLCIiLCIxMDkuMC41NDE0LjEyMCIsbnVsbCwwLG51bGwsIjY0IixbWyJOb3RfQSBCcmFuZCIsIjk5LjAuMC4wIl0sWyJHb29nbGUgQ2hyb21lIiwiMTA5LjAuNTQxNC4xMjAiXSxbIkNocm9taXVtIiwiMTA5LjAuNTQxNC4xMjAiXV0sMF0.&url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&loc=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&vis=1&psz=728x-1&msz=0x-1&fws=640&ohw=0&ga_vid=1980800170.1702413486&ga_sid=1702413606&ga_hid=1969482089&ga_fc=true&a3p=EhgKCXlhaG9vLmNvbRjQtYj-xTFIAFICCGQSFwoIcnRiaG91c2UY0LWI_sUxSABSAghkEhQKBW9wZW54GNC1iP7FMUgAUgIIZBIbCgwzM2Fjcm9zcy5jb20Y0LWI_sUxSABSAghkEh0KDmVzcC5jcml0ZW8uY29tGNC1iP7FMUgAUgIIZA..&dlt=1702413595236&idt=7356&ppid=6111c3f0e29bb55dcd4030d89a5b2298b74b6ad4e27ce0bbfc93f4e34f6fe609&prev_scp=hb_bidder%3Drubicon%26hb_adid%3D20ab3a639dd7956%26hb_pb%3D0.23%26hb_sdef_set%3D0.961024%26hb_bid%3D0.23%26hb_bsbid%3D0.22862115%26hb_safeframe%3D1%26hb_liv%3D4%26hb_ub%3D0.23%26hb_size%3D728x90%26hb_pb_rubicon%3D0.22%26sales_cat%3D596%252C597%252C631%252C599%252C602%26sales_safety%3DGGT0%26sales_kw%3Dpolynomial%2520root-finding%252Calgorithm%252Cpolynomial%2520root%252Cvalue%252Cequation%252Csolution%252Cinterval%252Cstage%252Cproblem%252Cfunction%252Cfield%252Ccase%252Copposite%2520sign%252Ctechnique%252Canalytical%2520method%26partnerLift%3DconversantE0M2%26slot_id%3Dadhesion_desktop%26hb_count%3D1%26hb_pool%3D0%26hb_pmp%3D0%26UR%3D23%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dadhesion_desktop%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.12%26ccpa%3D1---%26timeout%3Dadhesion_atf_d_2801%26gid%3D0%26inview%3D0%26grow_state%3D1%263pc%3D1%26illr%3D0%26gpp%3D0-0-0%26pps%3D687&cust_params=site%3Dmath-blog%26path%3D%252Fpolynomial-root-finding-with-the-jenkin%26secure%3D1%26sessiondepth%3D3%26optout%3D%26categories%3Deducation%26generator%3Dweb%26bucket%3D23%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D2%26day%3D12%26month%3D12%26hour%3D20%26wrapper_group%3D2.94.20-tooDense-beta-control%26wswy%3D0%26sessionId%3D1980800170%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26s2sVersion%3Dproduction&adks=1224474337&frm=20
Preview:	{"/1030006/mathblog/adhesion":["html",0,0,null,0,90,970,0,1,null,null,null,1,null,[107212704516],[179384556],[29955756],[299148516],[98686],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CNSysvLgioMDFe7zlAkdUgUNGg",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-singledo

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 730x699, components 3
Category:	downloaded
Size (bytes):	20951
Entropy (8bit):	6.875231573696079
Encrypted:	false
SSDEEP:	384:FspgbxIMQB0Dt7nS+o/C0kbE7gytTy8AQH+Wqo0rwTM7Il74fqzBL:FsSVIMQBqBS+bgcy1y8V2o4uM058qdL
MD5:	AC0A6C799C28DAC627FA62F9B171E465
SHA1:	1B7E0665557C4AF381BA5F83B4C4C470B5EA6501
SHA-256:	8B0103D5131047A6907BA6B56609DE98A26E3D5C5835133A93CAA19B1071B4FB
SHA-512:	638188A54138BD4BD85AF5EF5BE22EFA1BBDEFDD9B5FD8997776459A3F42634A4BCA2FA5581C9ED7366DFD34CFC1ACFA57402EDD28FDB79CAA58837EBE453819
Malicious:	false
URL:	https://encrypted-tbn1.gstatic.com/shopping?q=tbn:ANd9GcTpjxL4vqIoat9Qi0clOxhB2cLrLnE4vb6Tw-tFQQhRndIl82t2Sy9PDxom5kM&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777....................................................Z........................!1..AQ."2aq.......#BR.....Vbcr.....$%3EFST..5CDUd.....6....&4st................................4........................!1.."2AQR.....3Sa#Bbcq................?... ..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (812)
Category:	downloaded
Size (bytes):	54966
Entropy (8bit):	5.151027877167424
Encrypted:	false
SSDEEP:	1536:AV6T4k4bMxgMMyXIp1LtDHSeYFS9icXaeECSmMYl4YVUba/nAumbh9KZ1K:RdIKyLnq
MD5:	56E85BFD45EEF5332298A44D0CD962BE
SHA1:	B880E9F7C7F50034FDAA1F3DE827C64623E8A8C6
SHA-256:	1FC311F69F47BFCCE26FAA61A46BB48016E8B0F08A3FBA10009D4C4A4B0E705A
SHA-512:	70CDA8A8F5E2E4C256AB8D9F3F034707B20A12F6350CEC3D4E8BA930C5CECA948E18A924D23B35BFDFB12402224F90C5F14C9E13E90E8DA086391DB70002D32D
Malicious:	false
URL:	https://interactiveds.com.au/IDSau/wp-content/themes/twentyeleven/style.css
Preview:	/*.Theme Name: Twenty Eleven.Theme URI: http://wordpress.org/extend/themes/twentyeleven.Author: the WordPress team.Author URI: http://wordpress.org/.Description: The 2011 theme for WordPress is sophisticated, lightweight, and adaptable. Make it yours with a custom menu, header image, and background -- then go further with available theme options for light or dark color scheme, custom link colors, and three layout choices. Twenty Eleven comes equipped with a Showcase page template that transforms your front page into a showcase to show off your best content, widget support galore (sidebar, three footer areas, and a Showcase page widget area), and a custom "Ephemera" widget to display your Aside, Link, Quote, or Status posts. Included are styles for print and for the admin editor, support for featured images (as custom header images on posts and pages and as large images on featured "sticky" posts), and special styles for six different post formats..Version: 1.5.License: GNU General Publ

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (1845)
Category:	downloaded
Size (bytes):	37581
Entropy (8bit):	5.519760585838295
Encrypted:	false
SSDEEP:	768:wW7CzstgUsTkHyLCJqnwGYnqWloxOXUkkC8B0cMS0Uf7swi1m4ECl4T8vIyBEqCB:cDtLCtq1kxWIfvSN+m
MD5:	F9D9B65DBD646119CE96BAD0F484D579
SHA1:	1ACDAC5985C5F3B3F1D7AD929AC2EBD6E0B4AC65
SHA-256:	457852000F1B85C1D570224FE5AAACC709625FC3BFF458AD4E8A35420D21843D
SHA-512:	4A7F5A1A0A32B3E776631690B00B30A2545BFB559FCC28211308A178961DA425E2457057E44EB89D9AB23E9EA5E2665280B4D9C1E643813AA2133F98F7682987
Malicious:	false
URL:	https://www.gstatic.com/mysidia/f9d9b65dbd646119ce96bad0f484d579.js?tag=mysidia_one_click_handler_one_afma_2019
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b};function ba(a){a=a.o;const b=encodeURIComponent;let c="";a.platform&&(c+="&uap="+b(a.platform));a.platformVersion&&(c+="&uapv="+b(a.platformVersion));a.uaFullVersion&&(c+="&uafv="+b(a.uaFullVersion));a.architecture&&(c+="&uaa="+b(a.architecture));a.model&&(c+="&uam="+b(a.model));a.bitness&&(c+="&uab="+b(a.bitness));a.fullVersionList&&(c+="&uafvl="+b(a.fullVersionList.map(d=>b(d.brand)+";"+b(d.version)).join("\|")));"undefined"!==typeof a.wow64&&(c+="&uaw="+Number(a.wow64));return c}.function ca(a,b){return a.g?a.l.slice(0,a.g.index)+b+a.l.slice(a.g.index):a.l+b}function da(a){let b="&act=1&ri=1";a.h&&a.o&&(b+=ba(a));return ca(a,b)}function ea(a,b){return a.h&&a.i\|\|a.m?1==b?a.h?a.i:ca(a,"&dct=1"):2==b?ca(a,"&ri=2"):ca(a,"&ri=16"):a.l

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (735)
Category:	downloaded
Size (bytes):	803
Entropy (8bit):	5.423492952648772
Encrypted:	false
SSDEEP:	12:2ebxn2bG+J+I2bG+h/g/MISWmkvEioEXlmvSw2pIGAmBp8fWHoQL:2eNvq+IvU/gRSxEEikvSxiG9BmfWj
MD5:	86CC3CA736B2E9D904C1D0A9C0F3848A
SHA1:	D2812DC16024573BE93FC56636077722E454AF81
SHA-256:	9F50060E3AF93ABE54B9CF21DC6D7CA726AE44B91AAA1F2827D04213651F08EF
SHA-512:	BC6796CC996808D5F622431E6745D92A5A7CB1757A12180A2389C83E69824563A3601CEB904FE7EAB09EC9788542EC5FF435DE88AC222175F723473CCEC67C19
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=
Preview:	<html>.<head><title>Pixels</title></head>.<body>..<img src="https://ce.lijit.com/merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16&gdpr=0&gdpr_consent="><img src="https://ssbsync.smartadserver.com/api/sync?callerId=81&gdpr=0"><img src="https://ce.lijit.com/merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16"><img src="https://creativecdn.com/cm-notify?pi=openx&gdpr=0"><img src="https://openx-ums.acuityplatform.com/tum?tpid=22&uid=a0e6c68f-8dbd-0afb-3786-0e94c1983b43&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537123500%26val%3D___AUID___"><img src="https://openx.adhaven.com/bid-engine/cs/377c7998bb9f42e5aea0416c9dac091f/v1?rd=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537146931%26val%3D%24UID"><img src="https://tr.blismedia.com/v1/api/sync/openx">..</body>.</html>.

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 399x209, components 3
Category:	dropped
Size (bytes):	12957
Entropy (8bit):	7.958492929175523
Encrypted:	false
SSDEEP:	384:RhcI4qmQPxqbDqhatDjYbrV7Csd/QBwK/IMmUnW:8JSxqChah0b4sdKwK/IMtnW
MD5:	718F483DB5CC3E0820CC6DBB9341A145
SHA1:	625C63DD4C80F6B71E26FB67BA2D7F6762C79DF3
SHA-256:	B8A809F8E79D033F89CA49EAD080D23760A2FD98CF547535AF0FC47342C95338
SHA-512:	D7ECB1CF90532FF64E7D4CE9240B4012E3EFBF0AD7D09E7721E2A994FFB4F48B1BFE4E2077DD948ACB5576B9DEF0EA5A700852826063E035754A433FC934F878
Malicious:	false
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........( ..&&&'''&''&&&('&&'&&'&'&'&&&-&.&''/&'(&&&&('&&'..........."........................................Q........................!1.AQ.."aq2....BR....#3r..$4bs.....Sct....CD...%5T....................................9.......................!1..AQ."aq....2...BRr...3b..#..$............?...U...O6)JP.^.j/..:{.}.+...?.T/..i@)J..}..@k.I.r.p.(.g%s.?V....[z...d.Lr}F.a.m.C....G.=....H ..H..1[.x.e..Q.......l..,l>.5.G+...U..{..._......wJ...s....?P..&..u'..k..U.61..O.wC./-G.:.m.I.wN.[..... ...._/..BJ./O.d$..)[..G...(^3h.c.7.U.`hg..+J.5e..A)%.u.....V.j.0J.b...b....>..oU.D..o.2.o....=.~N.....OP...mT.o.D.....X.o.Z.P...FE.HE..]V..+JR..+z......P...j%}...kc...@J....._....B....YI...j`R..EG>"......M..zf...R.A........\|zP....V. ....mT..D...w.$./..?u3[../.X.G..%...&.$j(...ag...R.%.........Y._.r...R.....-l.@/.Q...y.....Z....y...._..aY.Q\|.....4...lu93.....lp..F.V{...../........)`e

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454)
Category:	downloaded
Size (bytes):	305297
Entropy (8bit):	5.343262081256999
Encrypted:	false
SSDEEP:	3072:exJgYIEcQnsYzLwxwri5Ss/sz3jecW260gLkcWnbRAhQj4cPrXKnn9Hb2K88tRMY:exO+3jecRp/cSRAhQj4cj6nn97Dt4i
MD5:	B23A0C978918755462F8916665EBDCC1
SHA1:	010A54E846981BAF47D3ACD2B211A23384A46BAB
SHA-256:	CEB06F5C3A86C02D99D562A4DE2236494872D601F32DD73531CDDFDE648679FA
SHA-512:	DFA7552BB814EC7C9E7388009090C9E82516B7E8960B8193A72F1B0B0A1E0229F15BC09E0B964C8C59AA6ABBDD84AD043951DFD33D30CC6F54F60AEDFF8A24E9
Malicious:	false
URL:	https://scripts.mediavine.com/tags/9214/ee5859a3a6ddede832f4.min.js
Preview:	/! For license information please see ee5859a3a6ddede832f4.min.js.LICENSE.txt /.(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[9214],{471:(e,t,n)=>{"use strict";n.d(t,{b6:()=>f,kX:()=>u,m1:()=>l,sM:()=>d});var r=n(4942),i=n(885),o=n(2982),a=n(9823);function c(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function s(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?c(Object(n),!0).forEach((function(t){(0,r.Z)(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):c(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var d=0,u=1,l=2;function f(e){var t=e.apiName,n=e.apiVersion,c=e.apiArgs,f=void 0===c?["command","callback","parameter","version"]:c,p=e.callbackArgs,g=void 0===p

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.86469832616696
Encrypted:	false
SSDEEP:	3:YBAvZNQaY:YwZNQaY
MD5:	2D7D30EA1C6F925302D2C3ABED382951
SHA1:	5BA6BBC5670C4AF1125CF9AC0AA1CA2811E744D1
SHA-256:	83C09BA9A8DAEDB136F90B17A294CAA90AD471A016E430DF6E229ACB5A81E100
SHA-512:	BCC7AAA8A6A27ADCBD1B3E0FCA73FC1BD727FECEAB34734E99863503D1D50936A8830C0A12D75D187614F318F46B1E67F046E89F5EB6CE727D8433A722E2C525
Malicious:	false
Preview:	{"detail":"Method Not Allowed"}

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	440
Entropy (8bit):	5.890318938704006
Encrypted:	false
SSDEEP:	12:6v/7MKQkiUOs0s1b/qgvZAzTIuZsosxVh/M:fVsVh/qgvyzThsoQ8
MD5:	34CB7EA0E3FE637A33E31E8B74A0850E
SHA1:	29176B9ABBA5DF1189C1A6E6A695F3152DD48D32
SHA-256:	C99DE94CB887E8C3236DD934C1A675EBD453FC8872A7291639D81D07E331FE48
SHA-512:	2597E629F60613FDD220AF44E52EA94AC3F62C6C1EEC2709BEC10DC9A9196833F668F9762C466C9999BA905E4ABDB469FD32365C854C39C5F9C2667D970A498A
Malicious:	false
Preview:	.PNG........IHDR..............W.?....PLTE..................................................................................................................................................................F.m%...6tRNS.................. "#$&(,.0239:<ABEFHIKLPPQTWY[\\]^_`a........IDAT......BP...#D...(.h0....d...C.....o."!..D.r ......z...Lt...JZ.9..wT..CpxEe..B.Y...nQ..Ci..F..xr.u...5a.."..-..........C.$Sr....7...Nz..9....IEND.B`.

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14520), with no line terminators
Category:	downloaded
Size (bytes):	14520
Entropy (8bit):	5.924684694515036
Encrypted:	false
SSDEEP:	384:a6afy0+u7RHwfLH6KcZPyyr7dnvcvqaRRt4oU5ygySP5ajDWiu3:a6afy0+u7RHw76K+6WvcSfoXPSP5ZiQ
MD5:	A39F179588CDF48999260237802E5297
SHA1:	F1AF5A90C1C86A984391F27015747B26094162AE
SHA-256:	FF11743597E85BB59336B8A4D4B1A02C0939186CB6CEF0DEA4F98CF93B45FC72
SHA-512:	5CE0701C48860B5D786DDBD0815F8AF42605860765958CF2F27F0F319C448CEC8F815993D8832AE1A762772EF6509ABA6DFCCB17809B4BD2A162BBECA4D09FDC
Malicious:	false
URL:	https://scripts.mediavine.com/tags/2726/f4f86af237400a499729.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[2726],{5182:(t,e,i)=>{i.d(e,{Dn:()=>g});var g=(t=>(t["3gpp"]="video/3gpp",t["3gpp2"]="video/3gpp2",t.flash="application/x-shockwave-flash",t.flv="video/x-flv",t.javascript="application/javascript",t.m4v="video/x-m4v",t.mp4="video/mp4",t.mpeg="video/mpeg",t.ogg="video/ogg",t.quicktime="video/quicktime",t.webm="video/webm",t.wmv="video/x-ms-wmv",t))(g\|\|{})},2415:(t,e,i)=>{i.d(e,{q:()=>u});var g=i(6039),s=i(2946),I=i(5182),n=i(5595),o=i(1507),a=Object.getPrototypeOf,l=Reflect.get,r=(t,e,i)=>new Promise(((g,s)=>{var I=t=>{try{o(i.next(t))}catch(t){s(t)}},n=t=>{try{o(i.throw(t))}catch(t){s(t)}},o=t=>t.done?g(t.value):Promise.resolve(t.value).then(I,n);o((i=i.apply(t,e)).next())}));const d="debug"===(0,n.Ph)("loglevel",window.location.search)?"https://imasdk.googleapis.com/js/sdkloader/ima3_debug.js":"https://imasdk.googleapis.com/js/sdkloader/ima3.js";function u(t,e){return class e extends t{validate(){return super.validate()

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1103x624, components 3
Category:	downloaded
Size (bytes):	26238
Entropy (8bit):	7.772667599172267
Encrypted:	false
SSDEEP:	384:VAGg/TQT4UoFJYDeEG23ksO3pJv72ZXYTEYJx1gwNnxEf/8M9HTclQ5EIIRI6HwM:CGPT4P+kLP7MMznEf/59HT7R6HbN
MD5:	6C3882807793D45FD85FD1CEAB3100C6
SHA1:	1118408149B7D032FB8E64BD747602C6395E6924
SHA-256:	A1AC69D0EDE070D54E191670EE255268BF2D56F00B1E5668C43D3B488C1F8D89
SHA-512:	81F4FB33B583AB544C970D1372923650F76B9B71F07103E115DE900E6CF409E27AE1340CCCA3F49B81C72A5057E2183EF404C8A647D10BBFBB127B40DF6A8B3E
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcQS5gIcDGG1TX0-XFp2ktdmESFKShpnrxZfLUeqvMe57O92x2YgFVIAm4elQg&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......p.O..".......................................H.......................!1A..Q"2aq..3...#45BR....br...$.C..DS...%cs.................................$.....................1.!A.2Q.Baq".............?......C....@...`$1!.........4..C..............~7..G.n...j".e..A!.0..........`....@.....!.!...........C....h..]a...OD....../.K.B7p_}..{i{....~<w.....qR.T_EE...V.rw...1....q...]R.}z..+w..sa..w..Jm..N]jNY..[...8..6...T...5Y.<...Z.p.[.^.>G[..\G.....Z..N..J+.....=.O....x.5.X.....E>.(._.....W.....q{:._EG..E.../..MA$.f;.]?O.y...J.I.....{....PY......y..1.s....%.cN.s.&n'KY.J$6.L%...t:..%.t..u..^G.8<.YJ.tg. ..^(.....z...^.%sE.I...RSY)'.......Xz.W].E.v]..q..z..R..I....^.])..e...iE.....}5#..Uy.....uR........z8Z...+~O...........G.\|..p...j..3...+...ko{.jF.js.R[..zey...^%..&Rf.M:cP.4r&Z.v.;..K..H..L.........)..Zf.E&Ej;..0

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1127)
Category:	downloaded
Size (bytes):	1207
Entropy (8bit):	5.1347458642275905
Encrypted:	false
SSDEEP:	24:Ce47ZUH2ogoUAz4F7ky8v7Wp7/HAdivgF7d7RLQ7RGR5bPQkfcwa8fA4v75Q2XG9:CeU2HbNZzaleCpjgF5mQPQkfla8oMPX8
MD5:	28B94933298B865851D240A14002A291
SHA1:	ABEC66274C23F76A2B9C66D8987F4FABBAD451F8
SHA-256:	B04A268FBD6AC543DCD653B1C529871767A5B78CB2A2F40E54BCB0BFE2DAA154
SHA-512:	0A07DBD7642EF0ABA4C353A4E309652547CFB6635841FB5CA3EA97196111F3041E081471C2BB0BC7ADA785CE6FADB9FB8F51B5B1E1846C2EE4F88E6771D5EC13
Malicious:	false
URL:	https://invstatic101.creativecdn.com/encrypted-signals/encrypted-tag-g.js
Preview:	/*. ESP - RTBHouse. * @version v1.2.4. * @link https://www.rtbhouse.com/. */.!function(){async function e(){var e=window.localStorage.getItem("rtbhouse-esp"),n=window.localStorage.getItem("rtbhouse-segments"),t=pbjs.getUserIds()?.pubcid;return signal_decrypted={domain:encodeURIComponent(window.location.href)},e&&(signal_decrypted["rtbhouse-esp"]=e),t&&(signal_decrypted.EID=t),"browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics")&&(e=await document.browsingTopics(),signal_decrypted.topics=JSON.stringify(e)),n&&(signal_decrypted.segments=n),document.referrer&&(signal_decrypted.referrer=encodeURIComponent(document.referrer)),async function(e){return(await(await fetch("https://esp.rtbhouse.com/encrypt",{method:"POST",body:JSON.stringify({publisher_id:"rtbhouse",signal:e}),headers:{"Content-Type":"text/plain"}})).json()).message}(signal_decrypted).then(e=>e)}new class{constructor(e){Object.assign(this,e)}send_signal(){window.googletag.encryptedSignalProvide

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyYi0xZmQzZWQzYTIzN2I=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
URL:	https://ads.yieldmo.com/sync?pn_id=rc&id=LQ2T1KDU-17-IBG6
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (625), with no line terminators
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	5.469943017692108
Encrypted:	false
SSDEEP:	12:C3HE4PVhH3pMG0R1jMBeVhH3hyIwCpThs13ZFChI1PkDp:C049xaRiaxNtC1JMyKp
MD5:	B855BA73A6C92FCBD5DBE8362391F631
SHA1:	0DDA4652B067B62B90FCEFEFC37398F92F87A2F3
SHA-256:	2DCE9784FBA3E77AFF2A5DA438111BAA68B489EDAC38C7895D318323B8200654
SHA-512:	E5B1B6C3DBF0B93C8A5B17D2F7D386CB74A5F33AA615F5770688C8012C44AB940E65ADB8DEF9015FCCB320FCE3FF32708911BE7B547F096FCA943B80C72C4847
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=40129352&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (520)
Category:	downloaded
Size (bytes):	539
Entropy (8bit):	5.267895997223974
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT79+THQCxj+5bvbU/C45Y2PbKOHTRMZ/xTu5fCYKO+kFl+X:WDlf8EgfFobTgCWuoeUKO+kFlw
MD5:	67F40913DBF20E2B38AF93DBF4098DF2
SHA1:	99E6B80BC6E23A4208996D9299B41D0AE0378256
SHA-256:	7246589C2EBC4D23DD58C4204954ACB7C635FC9EC432A6C8394E6E4CB0AB39E7
SHA-512:	B29B91D247D3A680D799DBE3E09977E0BBF995317DDD9ABB2F0F2AD39611D62F813FD1375F0E834F477B7F7349861606D77A37E79167EE8AB741225C2D761844
Malicious:	false
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=OGvIOOwZEX0AX&cb=0&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JLWPLqi2LuLq0su5vXI5cmkAAAGMX8JjtwEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICBM7P5N","size":"728x90","crid":"503416126","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"728x90","slotID":"adhesion_desktop","amznp":"1uktatc","mediaType":"d","amznbid":"8dogsg"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"0"})

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViem/YM:8WiIUemQM
MD5:	A825E31D18F2FF5845D245FED741E9F1
SHA1:	6E196F0B42376389AE1CC16E8F2D0C886940FAD7
SHA-256:	5D7C7D25A0DA74C0DD466120C3C09BD94CB982FC66EBC4A78675339F37323BF5
SHA-512:	3899089984B75089171A7A7DF174C75FED1E09CDB58C61BC0C4573B4716F5AE0274D0A63FAD5077E782BA4BF3EDF786102EE18EE4E4BD8DA93A0E12D85C7DA88
Malicious:	false
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23google_vignette&pid=jURFnvrSHaGY9&cb=2&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D
Preview:	apstag.punt({"cb":"2"})

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87482
Entropy (8bit):	5.262231833248159
Encrypted:	false
SSDEEP:	1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKk:/u1zNwcv9qBy1HOg8SMpQ47GKk
MD5:	FF04DD1EF5C67998D8652330C0441689
SHA1:	5E6FF5BD5240181A8BDEA983837F39AC231DAC4D
SHA-256:	5C93F77799D122FB5255EE24DA285F9F228CC118CBA11E6CEB2B6BDA8CDF4164
SHA-512:	15B29B5A106EBAD320AA419675E1D7415B56276FF8EC04B8DCAC845630FDCAF3EE7CA7B9D614EA415D3FACF065C2608ED62359D3CCAE510F5527B2965C8D7B06
Malicious:	false
URL:	https://cdn.mathblog.com/wp-includes/js/jquery/jquery.min.js
Preview:	/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65514)
Category:	downloaded
Size (bytes):	433393
Entropy (8bit):	5.357953363514034
Encrypted:	false
SSDEEP:	6144:BGLfbLuLqp43WHcF6KZlRelADP7gA2NsSVWfOlcTN1c+gnRga84mOgNzBdCS:0fPuk0jbReaHsbRfTgNf
MD5:	F1E8CD45DAF1A25FFE2D89EF5092477D
SHA1:	1D58D575FCB0C67B2319BF0B1CAC2E5A96A99DC2
SHA-256:	5BA664C72916C1601B2E25CD99BA0A13F3479B34E5666F7F25967C187A7C8C27
SHA-512:	AA135618857C28E8B1743762B441E15B7CD48CF82E9104937A172DF91739343A45F01F9D89427B09572DFCF810DF49DAF738F5808B33BC13E3D58492685D9766
Malicious:	false
URL:	https://cdn.doubleverify.com/dv-measurements5125.js
Preview:	/! v5125 6d78012f /.var __dv_global_script_start_time__="undefined"!=typeof performance&&"function"==typeof performance.now?performance.now():void 0,__webpack_modules__={2328:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.DATA_NODE_KEY=t.MONITORING_TAG_ON_TOP_LEVEL_KEY=t.TRACKING_RATE_KEY=t.TRACKING_EVENT_CATEGORY=t.TRACKING_BASE_URL=t.MAX_WINDOW_DEPTH=void 0,t.MAX_WINDOW_DEPTH=20,t.TRACKING_BASE_URL="https://vtrk.doubleverify.com",t.TRACKING_EVENT_CATEGORY="data-transparency",t.TRACKING_RATE_KEY="dv-data-transparency-tracking-rate",t.MONITORING_TAG_ON_TOP_LEVEL_KEY="dv-data-transparency-top-level-monitoring",t.DATA_NODE_KEY="dv-data-transparency-data-node"},9522:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Container=void 0;var i=function(){function e(){this.container={}}return Object.defineProperty(e.prototype,"size",{get:function(){return Object.keys(this.container).length},enumerable:!1,configurable:!0}),e.prototype.i

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1884), with no line terminators
Category:	downloaded
Size (bytes):	1884
Entropy (8bit):	5.599178820845917
Encrypted:	false
SSDEEP:	48:CcijmoauRmUusyu0u53dVjN2mAeSsifTFq:C5aoa8/fFJd5N2xHq
MD5:	C1A454314A3D1C67F5C7777A88F1DD29
SHA1:	C8D729A40652CE601CFBD7D0032BBA63CAAE05C6
SHA-256:	F8B12A2901299E809936F6D7565FE3F47673C63E1AC782AD01E4BAD283B37115
SHA-512:	45B2FAF1856DE0FF7250033E53A065F4EA37DE5E2D37F46400584B511BEE7785DE506CCC7363B0C5ABE456A6773ED7D642667568051F4A790AE5CD1EA30D6CC1
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=21463991&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=');PubMatic.loadAsyncIframePixel('htt

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (625), with no line terminators
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	5.469943017692108
Encrypted:	false
SSDEEP:	12:C3HE4PVhH3pMG0R1jMBeVhH3hyIwCpThs13ZFChI1PkDp:C049xaRiaxNtC1JMyKp
MD5:	B855BA73A6C92FCBD5DBE8362391F631
SHA1:	0DDA4652B067B62B90FCEFEFC37398F92F87A2F3
SHA-256:	2DCE9784FBA3E77AFF2A5DA438111BAA68B489EDAC38C7895D318323B8200654
SHA-512:	E5B1B6C3DBF0B93C8A5B17D2F7D386CB74A5F33AA615F5770688C8012C44AB940E65ADB8DEF9015FCCB320FCE3FF32708911BE7B547F096FCA943B80C72C4847
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=70967970&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
URL:	https://tpc.googlesyndication.com/pagead/js/r20231207/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	27489
Entropy (8bit):	4.526214825721999
Encrypted:	false
SSDEEP:	768:CKwoGYUqov1ww7ZdYhNFWQ9Aw33JZVtfbqoQ:CKwoNVov1w0GJbq/
MD5:	DA107C5EA01FF6EA4B3E1B266826AEEE
SHA1:	90EDC4D9D9DBCD2A702399031AE7BE7E104D4D09
SHA-256:	C1DFE0DE94335510EF3BFE4855CF5F99CCEE35501834D2F51DD15E54F69E6010
SHA-512:	A4C6D7A33D59E1BA5038F51A667C89048A0DA633149B6F3955E354D67421682A1C65F99E5B10E8CF8AE1D70339EB8EF601F06142510635A5C283D09D9B820C04
Malicious:	false
URL:	https://scripts.mediavine.com/creativeBlocks
Preview:	{"231750":true,"261165":true,"261167":true,"573450":true,"582548":true,"582549":true,"582550":true,"582551":true,"582552":true,"582599":true,"584858":true,"588634":true,"5185227":true,"5639483":true,"5639484":true,"5706980":true,"5707010":true,"5707021":true,"5742030":true,"5742041":true,"5742050":true,"5742059":true,"5742063":true,"5759613":true,"5759634":true,"5781680":true,"5781685":true,"5781695":true,"5873753":true,"6000231":true,"6000236":true,"6000241":true,"6017418":true,"6043989":true,"6043992":true,"6043995":true,"6060002":true,"6145708":true,"6153957":true,"6177059":true,"6177061":true,"6177066":true,"6196536":true,"6200077":true,"6226323":true,"6237662":true,"6238185":true,"6266029":true,"6266030":true,"6266031":true,"6278945":true,"6312645":true,"6318000":true,"6318005":true,"6318011":true,"6323417":true,"6323418":true,"6323421":true,"6323426":true,"6325391":true,"6347016":true,"6347018":true,"6351473":true,"6361249":true,"6369940":true,"6369942":true,"6369943":true,"63699

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	5.233913935506896
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsLEwK4LzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4L994xYqJmWeV4IQL
MD5:	66D1BB3159B83CB2BE9ED066165E4C38
SHA1:	FF0D58E13E55067882F7BFFED31A1D8970FD6401
SHA-256:	3FDF2EE487005F6505D00CC9D7A3757A1942D56BCAEA69929CBD5BA110494390
SHA-512:	F55E4F9C1CEA37771D93B79F5B50295C0D25B93E7E41DBCECAD0795A96673793723A2A08DCFE5023972C5EF047FBB5FC11F4F3AB88F1018C14990590DF187B31
Malicious:	false
URL:	https://eus.rubiconproject.com/usync.html?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright the Rubicon Project 2020 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	2.5857114762260935
Encrypted:	false
SSDEEP:	24:JGY7peHU2k7N7DRhoZNtwNKzbEqNpdGY7peHU2k7N7DRhoZNtwNKzbEqNp+:uHU2k7N7YtG8EqNEHU2k7N7YtG8EqNM
MD5:	5C98B31F0E318509324A3E12D7D3F2F5
SHA1:	8011ECFD0F3BB160029CC0CC8DFE6352DF40DDF2
SHA-256:	784A81D7ABBD8E4670546720EB51F5C55607597AA5189F7674558148C08DEA21
SHA-512:	85DED69024B2943A5E2D2254EA03D2F066A5B8195AC644DFF26729396F863D9447C9E4931F16ED658CBD3E23ED9FE8356427DB241F99C2C9EDF151B5F44E64E2
Malicious:	false
Preview:	GIF89a............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f3.f33f3ff3.f3.f3.ff.ff3fffff.ff.ff.f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........3..33.3f.3..3.3..f..f3.ff.f..f.f......3..f.............3..f............3..f.............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f....3.f...........3..f.............3..f..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.................................................................................................................................,..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
URL:	https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1---
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537072399&val=4050678938750962602
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
URL:	https://69faac858c5d4dd1fe516cd03a7ff5a4.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1845)
Category:	downloaded
Size (bytes):	22413
Entropy (8bit):	5.517447892550561
Encrypted:	false
SSDEEP:	384:yt81xDRymEUQQ/kG37XGxE7mGBMvEDxWY7sMh6Hv8pjJQ26faBR4vo5wKHryDSSA:ySxDRyxGl3LGxE7RM6sQ6Hv8s2fR40w0
MD5:	439AF7CC0CE573867448D119615DB5AF
SHA1:	74F1FCC18747EA6131B2BA3D0A925C22AA91FEBE
SHA-256:	DB2BDAAD0DC9232FADB3DE900BF039A0F356521698F213DF1EDF601E02A5870D
SHA-512:	9C2DDD00474382283D3D4881744DFCCB4881F65F100A009EFED2C7F19056DC2B82F1EEC381C3AA6A3D81BF4523D00444F8386C622E55B46B6A6C54F3E75DFDF6
Malicious:	false
URL:	https://tpc.googlesyndication.com/pagead/js/r20231207/r20110914/elements/html/interstitial_ad_frame_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=n,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function q(a,b,c){q=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return q.apply(null,arguments)};var da=aa(610401301,!1),fa=aa(572417392,!0);var r;const ha=n.navigator;r=ha?ha.userAgentData\|\|null:null;function ia(a){return da?r?r.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function w(a){var b;a:{if(b=n.navigator)if(b=b.userAgent)break

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3367), with no line terminators
Category:	downloaded
Size (bytes):	3367
Entropy (8bit):	5.630558581126653
Encrypted:	false
SSDEEP:	48:CfOlaiUedCKAHVTg77+ysGJdNa0BlsC8t5nC5lTjWTKySMqB0QevI6beBDq:Cf4aindCb47FsyyC78teYlDv1bWq
MD5:	498372871E7225DF7BF7B68DCF1C7F22
SHA1:	29237483A553FFFEEE8B64ED4D27E57B93EDDB8F
SHA-256:	B4D94F791CEB91FBBAB34F37A139CD72B956EB8778A04B44539EC7DE0ED3FE32
SHA-512:	4392BAEA0D6A791A2958535737773FFC6CB24EF747B0238455A7F4DD8091C5F0714C11EC8D8EA10E9BCD647E0BEFB64E03C12DC42EA53D5B9986EF7B1088B030
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=33525283&p=137711&s=137812&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D');PubMatic.loadAsyncIframePixel('https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=htt

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5399
Entropy (8bit):	7.945888170602499
Encrypted:	false
SSDEEP:	96:CZhfz15wtmgNBl0Ru4aZFLFCAQB3gGzmFkL7LnUEgnse2Gou6VY:kFz15LgrORutFLFCAQBwGGOz2nse2jVY
MD5:	13937A29C3669B3901B210B74D0F62BB
SHA1:	9055DACA52EACDD03709F1B7B8071E433F61F36E
SHA-256:	58283E02B752D05BEFB55DAFD51A43DFA0658763A759FD59EED0D8340DE4E307
SHA-512:	ECB9B7B2B7ECE4426ECE86D8A7172C4926AE610D44FB7E65FF24F692E7E3F1DE594FB27ECFD1460441025797AD82CF19A941E6B87EE6695312275F9BF18681E3
Malicious:	false
Preview:	.PNG........IHDR...d...d.....p.T....pHYs..........+......IDATx..]yp.W..u.u.O9.).v.L6..@......!.90...a.`...7;;..%.$....V..p.....I...."1.*.3..2P....$5\.d[.e...!?........?..._..{..~.{.'.}d...d......=....qY.......tW..ZC..Gz,..p.N.._E.0...1..Oq8.[p/_.L.y~.7'f.....z..l....g...qh.....\|..3..x...\1....p,......%...1.6.s..s.....:......m%B$....@.K.q".J."./.........;..../.p.....&.+.s.j<.Z.B.8i_.W..b..s-....4t.}i......,88gb...itE/.L.k.M#..7./].Wye,).K......^...G{.s...K..!.q.0vey.#T............0.mwb....CP.:...O.z.u.. .w.O....\|.U....l.b....=..A.P.c.c.t..g...Qp..J..'r.x.0.kbE!_.j../...Xh?...#HzS.+.G`..$.5.#r.].s(....=....O...q...._...zIC...6.P..%....pK.ch...~.y\.%..G.8.z?..i...k6....}5n.I.iX].h.=.I.+.g.{. <..-]...!K.r1....S....i......a.....\|q.e.....\|q%j.Va.?......]^&c...9...NK..x.P.... .p$.>B$..E>....s.......Z...H.cK....U.=.f.-5H..=.U.jl.].+..X.AC..]Qc.V..apG..."A.....M...I.p2.L.x....h....4...#r.......u.-..J\.......!$H.\|...;R.jj.....pL.W.E.0.,........f..kI..1....`.

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
URL:	https://sync.targeting.unrulymedia.com/csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.215346826699106
Encrypted:	false
SSDEEP:	3:RFrXJFhXA8wq0FPIvn:jrX1A8FIIvn
MD5:	F6AB5FF81934FB35354C4C81A02D4843
SHA1:	A5DAFFB05D48FAEDD64A523AD5FABF80570D5A5E
SHA-256:	FCA34E38DDF5C8D31B91B369935B3CE6E1D2BF935CE3A595E2470DBD9A820FC1
SHA-512:	ED2E53B7F9BE4FF2445082E9B724A0E93FA751C3520CB9699E660C7E41ABA8BA2AA315C77E805E38B0559753E8EF04B3590AC7E1B3D229CE544B8605C7CA6065
Malicious:	false
URL:	https://mathblog.com/2WOFDurG0lJJ.js?ts=78819
Preview:	// this beacon is used by Presslabs for metric computations on mathblog.com.

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	70935
Entropy (8bit):	5.126024473080479
Encrypted:	false
SSDEEP:	1536:Iapg/Z9c6KSWWQemzRSQVoV3e5hjszcTv8susa75:HsZ9c6K+mz+75
MD5:	BEB1695C86A35A0F5466C2A79D90AE53
SHA1:	A1DDFFBD43906D5A932970FF076B69F83C0A0F79
SHA-256:	D5D9D3DA8BC53D6165575F2FC7D56542C0834084FD16775CDF14B119B5CDD3F1
SHA-512:	6A6DEED5F92B285026BDADCC3545368FDC12CAE9F681452996C9114F67CCCE62A9F9D3447E482F69CEA43757A1F3EFF77CF54207598C51F787242EC2E2E7D32A
Malicious:	false
URL:	https://mathblog.com/
Preview:	<!DOCTYPE html>.<html class="no-js" lang="en-US">.<head itemscope itemtype="http://schema.org/WebSite">..<meta charset="UTF-8">.. Always force latest IE rendering engine (even in intranet) & Chrome Frame -->.. [if IE ]>..<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">..<![endif]-->..<link rel="profile" href="https://gmpg.org/xfn/11" />... . . . <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="apple-mobile-web-app-capable" content="yes">. <meta name="apple-mobile-web-app-status-bar-style" content="black">. . <link rel="prefetch" href="https://mathblog.com/tiling-one-arc-sided-shape/">. <link rel="prerender" href="https://mathblog.com/tiling-one-arc-sided-shape/">. . <meta itemprop="name" content="MathBlog" />. <meta itemprop="url" content="https://math

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.0021975300504877
Encrypted:	false
SSDEEP:	3:CUO/RD/wlHrfx/n:oD2/n
MD5:	ED280A0EA3CC38F3CBBC747ACFBEF47D
SHA1:	6BDCB32EE75E957A5085C010F4DFD0C716BFDADC
SHA-256:	8F69E10876805B747A3AD08A818D46AC7E731B1AF417EA6E259D9B6B7DEB65C5
SHA-512:	4248E293BB759C3AC0EA71F545E10E85D0C3C7F1237CE8B18C6A3FD00499A11BDC0252C938BE87359FA673C8E7A83C7CC6FC5D12718A68844C2615E5DCA3527B
Malicious:	false
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	55037
Entropy (8bit):	4.675517205957966
Encrypted:	false
SSDEEP:	768:h9+f1T857kDbwj2iHwbJYDpt57ro2NCu3q/EuNP3MN35YJGQ7HlrFMH:hOBk8bwj9gYD5dQqq8utO3nQ7FO
MD5:	AA5A8F95979D04A0AF755030917B5AC7
SHA1:	451415F6589AB25C84EFA7AC1B54AEB11B8AA21A
SHA-256:	188C37B15CC527AA4B8E081D6121F4808EB544F22D3537B7BDFD8504D7619B98
SHA-512:	AEFFD60E5B6A2A11F41B5EA48C5E2F7AE510865340582277FFE2B4597F5A85D6A467799AC05CF8729E5782E15453FC50A01DA3F7748B98AB350D0F24C6BC1236
Malicious:	false
URL:	https://scripts.mediavine.com/amazon/v1/adjustments?offering=mediavine
Preview:	{"w3pr0g":{"1b83mdc":{"b":"bpjlds"},"kl6lmo":{"b":"bpjlds"},"1k3qmm8":{"b":"bpjlds"},"2twl4w":{"b":"bpjlds"},"12cgm4g":{"b":"bpjlds"},"voqcxs":{"b":"1b83mdc"},"1v7adxc":{"b":"1b83mdc"},"dxgcg0":{"b":"kl6lmo"},"1dg0dfk":{"b":"1k3qmm8"},"mt3cow":{"b":"1k3qmm8"},"1mbndog":{"b":"2twl4w"},"51tc74":{"b":"12cgm4g"},"14kdd6o":{"b":"12cgm4g"},"r8wutc":{"b":"voqcxs"},"1qrgvsw":{"b":"1v7adxc"},"9hmubk":{"b":"1v7adxc"},"1906vb4":{"b":"dxgcg0"},"id9ukg":{"b":"1dg0dfk"},"1hvtvk0":{"b":"1dg0dfk"},"lzu2o":{"b":"mt3cow"},"104jv28":{"b":"1mbndog"},"z0lhj4":{"b":"51tc74"},"1yj5iio":{"b":"51tc74"},"h9bh1c":{"b":"14kdd6o"},"1grvi0w":{"b":"r8wutc"},"q4yha8":{"b":"r8wutc"},"1pnii9s":{"b":"1qrgvsw"},"8dogsg":{"b":"9hmubk"},"17w8hs0":{"b":"9hmubk"},"ukrzeo":{"b":"1906vb4"},"1u3c0e8":{"b":"id9ukg"},"cthyww":{"b":"id9ukg"},"1cc1zwg":{"b":"1hvtvk0"},"lp4z5s":{"b":"lzu2o"},"1l7p05c":{"b":"lzu2o"},"3xuyo0":{"b":"104jv28"},"13geznk":{"b":"z0lhj4"},"wsoqgw":{"b":"z0lhj4"},"1wb8rgg":{"b":"1yj5iio"},"f1epz4":{"b":"h9bh

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3190)
Category:	downloaded
Size (bytes):	113329
Entropy (8bit):	5.5425534745301075
Encrypted:	false
SSDEEP:	1536:sEo6wmPpFI51aHP0/+MzVnks85XU3GkwE+nprJd0x5qFtSR37LyT/mCm:sIBFaAMm2ks85k3iEqw/R3/yHm
MD5:	B96023064158A454A208A49620C0734C
SHA1:	E3C1CC046EFDFABF65D41A8A3CB4EFC63E3C6C46
SHA-256:	1642DD5DC126DF4FEFF2255CBA0988528507973D842D0A73331A5873F6B9D4E5
SHA-512:	44F33B8D6FFFABBFC6FEF7AF60DC2D7A07EF59B6969F828C177AC5814C5D07C2C103ADFC165F07CE4B6D9B55928A913BEB5BFCD854BE09596E401A41B884585F
Malicious:	false
URL:	https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_278.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.fa("Symbol",function(a){if(a)return a;var b=function(f,g){this.j=f;ca(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=functio

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
URL:	https://spl.zeotap.com/?zdid=1332&zcluid=95cb27def9651c04
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
URL:	https://e.serverbid.com/usersync?cn=5529&ttt=1&dpui=LQ2T1KDU-17-IBG6
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x1200, components 3
Category:	downloaded
Size (bytes):	24690
Entropy (8bit):	7.658984602965332
Encrypted:	false
SSDEEP:	768:Rh1M1pZMxtAqW75Hz95Q62hi2VbhW/oYHI:RhC1puXAqO/B2E2Vg/oyI
MD5:	173CF305E43A0C6110B2BF3F38190E4C
SHA1:	57987D3A935ECDFA9EA6059BC9BE348C9B01360E
SHA-256:	D51AABA2B7984372E30C81723BC2785DE05BA4B34399F17DB3A6C3DBFED4BB43
SHA-512:	A25575AA15415200CD1F9515F25D19F236D47DC7ED5F0C8937DF39E60255415092A6456765D56EADC24CA2BB93231982E9A08143E9762B9EB06155861E71C972
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/4207599684547219402/images/bg.jpg
Preview:	......Exif..II*.................Ducky............. http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:349C28216EF211EE9197F387ECC8D9F0" xmpMM:InstanceID="xmp.iid:349C28206EF211EE9197F387ECC8D9F0" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="54645C84F3F372B4C7189714A6F4EAF8" stRef:documentID="54645C84F3F372B4C7189714A6F4EAF8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................$..$.#.#.+####+9111119B<<<<<<BBBBBBBBBBBBBBBBBBBBBBBBBBBBB.......#..#2#.#2A2((2ABA=1=ABBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB.

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27120, version 1.0
Category:	downloaded
Size (bytes):	27120
Entropy (8bit):	7.992599615699717
Encrypted:	true
SSDEEP:	768:4BcH8SkhomPgR1ZIKWtb5NSklaPakPxnZN2IpJnqbqC5z:4OcSUi1SgklaPNZ8IPoqC9
MD5:	43E7D3F1DEC74478587A2B3CFA272631
SHA1:	C065F24AC428353854EBD6715C49966FC4F4C762
SHA-256:	6C6C9C3FAD669C3D32227F5CC3467735C8211DDCF4F8C184C2E62E7F3EF7AF44
SHA-512:	93F0A045BB00D07FCA9B2374FB127461A2E77BE8C26DB774372EC5679938B51510B4CB19161DDB5ED7C942ABBEEDC9F358ED1F51A1AE2B3EAD2AF47C30A6CAB6
Malicious:	false
URL:	https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2
Preview:	wOF2......i.......4...i...........................b..B.`..Z....b........O..b..6.$..@. .....I...[^.q.m..u'X.._.9.!l.........l........s...&5i[3s8.r...H.U..Y....".......g"<0D./[..;.u..%lT...@.2..O...-N...&9...../..P..7..[..A...d...........g.s7/S.+Y.........KD..d.......$I.6)..e..G......m3DT0@.$..Z.D.B.........^..7....j...u~l.}.......b..M.8K...G8.Tu.:!+...i..gX....`....1.r!........{S...[g.z..V...N.&Y!f7.....\|J.E.J..j.Z...m..%....)....d....I...h....Mp.~..{....in:.......=T.,...=:...H...Z..4/...<.~.h..r.?....l..../m.......5l.O.......R'.8x....<.{.wcr.ei\.`.....D..-...`...._.u...... .2X.l...........u.X..P.jH...}...{s.NY2's.H.oHgz..i....CDz;.cG..a7..I2......[.,:..d.HO.'..N.b^.3..[.TU..J.%..BtB.A.A.i...B......CLXt.C..!.&.]\l..j&{v3.^m'..,..Y...~Mu.e..X.......{7....:...,t...s5]^.....].........J.8.D.$..{Z.....'C..B....M-.@.l..Q...,..&...,{RO.3{...__..QQ....y.c?...hh.fe...{.g?.....n+N... ...P...cM.....U@.t.........X..1.[.\|...` .....>.~..$.....^.w..A0

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4232
Entropy (8bit):	5.3923507588964394
Encrypted:	false
SSDEEP:	96:1OLNFlOLNTFZKOLNZOLNJyOLNwOLN8Vc+omOLN+1N1OgNUlOgNXFZKOgN5OgNbyn:ANFQNDN8NJXNtNGgN+rNU7N8NHNbsNWQ
MD5:	10ACF12873EC2D590F15B02AB8184F63
SHA1:	C401EB1D269B023F6AE76E50BAE6AF541962AFF8
SHA-256:	F8238CDD1CC6032F1C34CF7E559B55A936097F78CC8839628E5CC39A6FC3F390
SHA-512:	76D4A9E5E1A1F782E2D29C9CF0563EC3A01190347855BB38E0BD96B497B6A040B585673A3B3FC88DA4A05C3078B3F3E27247EDF55A357581478882FCD6289362
Malicious:	false
URL:	https://fonts.googleapis.com/css?family=Roboto%3A400%2C500
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2) format('woff2');. unicode-range: U+0370-03FF

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-B415WAvT3AMc01ggouq6Wl6ZxCotXT43QE9C0RdXco6_spZRczB7eSHtxMcmnidYWPql2rBh0ZB2Jso7eUx-Q0tqZ4OAoHlHpKJ3OLXRN4_2F4Zow
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	3.066054462414549
Encrypted:	false
SSDEEP:	3:M3SLlHh/:f/
MD5:	729C3007A8ED0597531B0C76D54A94BB
SHA1:	90FE9B8A8142548FDFAB29F59CB0A164A0EAEF81
SHA-256:	6A842EA462DACA2A0B5A0F5F25BCFC8E0059AC811CA6C6A1BC54E4D9119621C3
SHA-512:	AC44DA7F455BFAE52B883639964276026FB259320902AA813D0333E021C356A7B3E3537B297F9A2158E588C302987CE0854866C039D1BB0FFB27F67560739DB2
Malicious:	false
URL:	https://usync.vrtcal.com/o?xs=1624&did=LQ2T1KDU-17-IBG6
Preview:	GIF87a........jl...,...........D..;

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/AE4A8C3D-1096-459A-B091-2BADD5009F52?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2942), with no line terminators
Category:	downloaded
Size (bytes):	2942
Entropy (8bit):	5.462878556752266
Encrypted:	false
SSDEEP:	48:F75PZ1p/AnUjdoOqo/+5xfgzSu7p0g0eYMzOAhY:V1p/AnUhqm+5xf/i0lelOAS
MD5:	7687384995F0A7A1035A10812B11B29B
SHA1:	2EDB61A309EA0A1D0A4DC768189F0B48E206E99E
SHA-256:	FFB80624264FB2038BAF8456A09804E1E009AFE7D642235BEAF65DFEA1DE6FAE
SHA-512:	689C7355BB47F295EE39E26ECFEC5622E1BE2FB961C9A0ED3D72009FC8ABD9DD7F42A008B500C9FBAD82661E956A88579857F898BDD44C9938E31A60AF007704
Malicious:	false
URL:	https://scripts.mediavine.com/tags/3367/14decf0a94814552b0fa.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[3367],{3367:(t,e,i)=>{i.r(e),i.d(e,{Content:()=>v});var s=i(3583),n=i(3127),r=i(6039),o=i(2379),l=i(2415),a=i(9383),h=i(9906),d=i(2180),f=i(7879),p=i(8970),b=i(4548),m=i(3190),u=i(8391),c=Object.defineProperty,_=Object.getOwnPropertyDescriptor;const g={desktop:{atf:1800,lazy:2800,ref:2e3},mobile:{atf:1900,lazy:2800,ref:1800}};let v=class extends h.g7{constructor(t,e){if(super(t,e),this.slotName="content",this.adUnitId=r.A.isMobileOrTablet?"content_mobile":"content_btf",this.lazy=!0,this.refreshTime=s.Q0,this.restrictRefreshSize=!0,this.adBoxConfig=new f.HB({heightPxToContain:324,widthStyle:"100%"}),this.interscrollerConfig={isSlotValid:()=>this.number%2==1},this.maxOutstreamWidth=510,this.ibvConfig=new m.O(this),this.timeout=new d.V7(this,g),this._sizes=r.A.isMobileOrTablet?this.getMobileSizes(this.model):this.getDesktopSizes(this.model),this._gSlotSizes=r.A.isMobileOrTablet?[]:[[320,50]],void 0===v.experimentalOffset){c

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1000x288, components 3
Category:	downloaded
Size (bytes):	63462
Entropy (8bit):	7.98060668677621
Encrypted:	false
SSDEEP:	1536:tImX3zSoRQAFA+zextStpc6c++EG4swazJAaxeaoWBy1Gvb+r:2mHtQADeqazJFiWBTbm
MD5:	81A4C65E410256F14A738A022F4A2F35
SHA1:	47A55CE201DAB800C1DD0AA7A97BD07604C1A366
SHA-256:	DD449A7901801E89D5EEB7C309B70E4364A6529D690BAC02A628D3175D62AC06
SHA-512:	87BF9F500FA97D240D2FEBDDF38DD6D581C998488E7E494B4CA733DB5B3A9EFE69DD5AD9C13433E276B62BC4499B89BD7FBF46F3ED15FDB74DF0FA053E1B0F77
Malicious:	false
URL:	https://interactiveds.com.au/IDSau/wp-content/uploads/2013/01/cropped-DSC06269-c.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C....................................................................... ...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....7...H.e..Uj..3.............<.h.e.S[[.x.2H.p.o.$..~E.....f.u...!.....?...O/._..h.Q..."..u..M[.H...xa.nF...........4...av..U..d.=..E...Z...;oc.[....Kv.5].s.a{...."W.6l..W..,Z.....`1...P ..U...j3%..g.....S..oC#".........\|...;......%lec.EI.<...8=...J.n...d...Ht.F."P...O...Y.'''.T..@J ..o!Y.?J...

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzU3MTA2MjgxNjQ1MzYxMjQ5OTU2Ng%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	25314
Entropy (8bit):	7.948909983908925
Encrypted:	false
SSDEEP:	384:KZ0DVqwv2vO50Jv+zHtNDFRID7ODELWBLgo1nSW1t9Wftb0n63X2HPFSXsJ2POEN:KZevSYHXs7dLCc0a4n6bXYoO6r
MD5:	4A3FAB82B301CC45BF9796FF81BC49CA
SHA1:	D921BED1FB67ADDE58C29C9D650DF21A4C41080C
SHA-256:	986243A1C58598AC4978696B967CA261B9F9F39F69180D801D10BA7FA0246FF3
SHA-512:	5CBDEC23F1BE401EF9BBFCBDF72B244C9628BD521D35B59DD8BB710C4253AB57107300272902AD119FA2127D4146729AF49B84E6B93C2A535215B45A441EC3DD
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/4207599684547219402/images/end_car.png
Preview:	.PNG........IHDR...X............;....PLTE...........................................................................................6>.... !...9CGENRNWZ......X_c>LVCOV...ry.#'814:...'=`,7@556......q\|....555-?]KP....{}.JJJ4Fw.....$]q.##(3Jj/Gi.;..BASVZ....:Y .".........^m.......Ig....................... .....................,,...455-/0. #..122',..%"#$''&888...,4]"" .#A$+M)1W"'D..&..0;<</8b"%((.R. <)-/Q^. (J..5...5?m>??$'DO.IV.LX.@L.7BrN\.;Fx...GS.Tb.wwwBBBXe.Z[Zfs.>I}WWV_^^\j.RRREEE0:h`n.rrqKKKHHH......mmlOONm\|.jv....6H....4<fbba3C}eefBO.0>uiih?K....!+T...FU....\|}}...v....".]\g.z..Q].*9o9L.&4er....N\.CU.<Er...}..Wb.<P.....#7bn......._v...r..Od.gv....CY...QJ_....n~......Wg..........{..JU.EOx...]p....\a....{..Wk.i......=......ims38QINg<B[fk.SXu...uz....hf^.{.~u....s....>'K)..h]i\|?v...StRNS......&-.5DN..<X.az..j....r.............`D.6m......^....x............o5....}..l......iTXtXML:com.adobe.xmp.....<?xpacket begin="."?><r:RDF xmlns:r="http://www.w3.org/1999/02/22-rdf

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	253900
Entropy (8bit):	6.135039802162877
Encrypted:	false
SSDEEP:	3072:Pm9oYozKBSdNI6hmuUae9QLj0KA0CzxKqzxhcjUrMrv4WryWi:PqopzKBSXAf59q0KA06xKyxhNQRji
MD5:	127414A56988BDC8B4B2F0D9292EC5C0
SHA1:	FF6095AAC28ABC8F3173D4F5546432ABA9A6D934
SHA-256:	5066B925DD8F5FEDE9D9771144C8071D8D73945224FE0211784A4A25EE916225
SHA-512:	C7ABE0D54147B8B19FAE737D52F2A5FC610BBA841BF96F05FF60F038CF189889F3A22CA19AA92EA155A1589D247CF4B22B68D66C3EDDF32846DDBEF2C24C4EBB
Malicious:	false
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2014244732259650&correlator=3956531839955638&eid=31077976%2C31080122%2C31080115&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&us_privacy=1---&iu_parts=1030006%3A1037824%2Cmathblog%2Csticky_sidebar%2Ccontent&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F3&prev_iu_szs=300x250%7C300x600%7C160x600%7C120x600%2C320x50%7C300x250%7C728x90%7C336x280%7C468x60%7C250x250%7C320x50&fluid=0%2Cheight&ifi=3&sfv=1-0-40&fsbs=1%2C1&eri=5&sc=1&cookie=ID%3D70f210562803e33e%3AT%3D1702413502%3ART%3D1702413502%3AS%3DALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ&cdm=mathblog.com&gpic=UID%3D00000da8e52e5ed8%3AT%3D1702413502%3ART%3D1702413502%3AS%3DALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A&abxe=1&dt=1702413608218&adxs=892%2C292&adys=916%2C3450&biw=1263&bih=913&scr_x=0&scr_y=0&btvi=1%7C2&ucis=3%7C4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=4&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMC4xLjAiLCJ4ODYiLCIiLCIxMDkuMC41NDE0LjEyMCIsbnVsbCwwLG51bGwsIjY0IixbWyJOb3RfQSBCcmFuZCIsIjk5LjAuMC4wIl0sWyJHb29nbGUgQ2hyb21lIiwiMTA5LjAuNTQxNC4xMjAiXSxbIkNocm9taXVtIiwiMTA5LjAuNTQxNC4xMjAiXV0sMF0.&url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&loc=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&vis=1&psz=300x0%7C300x-1&msz=300x0%7C300x-1&fws=0%2C4&ohw=0%2C300&ga_vid=1980800170.1702413486&ga_sid=1702413606&ga_hid=1969482089&ga_fc=true&a3p=EhsKDDMzYWNyb3NzLmNvbRjQtYj-xTFIAFICCGQSiwEKCmFtYXpvbi5jb20SdDdib0RSZ2lKRkR5SWIwcmhJL0IyNnFpb3N5WmJIc2pEbnIwZXREM3h4MFl6V0tMazdGMVdYSlBNdEtPZEg3bFlkTkdrVTdlWHcramRoL2cxNUs3SnpNL2s1cUFNazViYWJTUXlhWFdlcnpFNGw2WHg1Ylk9GOa-iP7FMUgAEhgKCXlhaG9vLmNvbRjQtYj-xTFIAFICCGQSFwoIcnRiaG91c2UY0LWI_sUxSABSAghkEj4KBW9wZW54EixleUpwSWpvaVJHRnhNR0UwYVRsQmVGa3pibWw2YUVaU2MzZDFVVDA5SW4wPRiAx4j-xTFIABIdCg5lc3AuY3JpdGVvLmNvbRjQtYj-xTFIAFICCGQ.&dlt=1702413595236&idt=7356&ppid=6111c3f0e29bb55dcd4030d89a5b2298b74b6ad4e27ce0bbfc93f4e34f6fe609&prev_scp=maxVelocity%3D801%26hb_bidder%3Drubicon%26hb_adid%3D47f02118ece6235%26hb_pb%3D0.26%26hb_sdef_set%3D0.961024%26hb_bid%3D0.26%26hb_bsbid%3D0.2584413%26hb_safeframe%3D1%26hb_liv%3D4%26hb_ub%3D0.26%26hb_size%3D300x600%26hb_pb_rubicon%3D0.25%26hb_pb_pubmatic_s2s%3D0.14%26hb_pb_appnexus_s2s%3D0.23%26sales_cat%3D596%252C597%252C631%252C599%252C602%26sales_safety%3DGGT0%26sales_kw%3Dpolynomial%2520root-finding%252Calgorithm%252Cpolynomial%2520root%252Cvalue%252Cequation%252Csolution%252Cinterval%252Cstage%252Cproblem%252Cfunction%252Cfield%252Ccase%252Copposite%2520sign%252Ctechnique%252Canalytical%2520method%26partnerLift%3DconversantE0M2%26slot_id%3Dsidebar_btf%26hb_count%3D4%26hb_pool%3D0%26hb_pmp%3D0%26UR%3D26%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dsidebar_btf%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.12%26ccpa%3D1---%26timeout%3Dsticky_sidebar_lazy_d_1701%26gid%3D0%26inview%3D0%26grow_state%3D1%263pc%3D1%26illr%3D0%26gpp%3D0-0-0%26pps%3D687%7CmaxVelocity%3D801%26hb_bidder%3DindexExchange_s2s%26hb_adid%3D51be4050edaa9d4%26hb_pb%3D0.24%26hb_sdef_set%3D0.961024%26hb_bid%3D0.24%26hb_bsbid%3D0.23928048%26hb_safeframe%3D1%26hb_s2sBidder%3DindexExchange%26hb_liv%3D4%26hb_ub%3D0.24%26hb_size%3D728x90%26hb_pb_indexExcha_s2s%3D0.23%26sales_cat%3D596%252C597%252C631%252C599%252C602%26sales_safety%3DGGT0%26sales_kw%3Dpolynomial%2520root-finding%252Calgorithm%252Cpolynomial%2520root%252Cvalue%252Cequation%252Csolution%252Cinterval%252Cstage%252Cproblem%252Cfunction%252Cfield%252Ccase%252Copposite%2520sign%252Ctechnique%252Canalytical%2520method%26partnerLift%3DconversantE0M2%26slot_id%3Dcontent_btf%26hb_count%3D2%26hb_pool%3D0%26hb_pmp%3D0%26UR%3D24%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dcontent_btf%26arrival%3D0%26refresh%3D0%26sspm%3D1%26bidFloor%3D0.12%26ccpa%3D1---%26timeout%3Dcontent_lazy_d_2801%26gid%3D0%26inview%3D1%26adomain%3Dsubaru.com%26grow_state%3D1%26dsp_seat%3D85%263pc%3D1%26illr%3D0%26gpp%3D0-0-0%26pps%3D687&cust_params=site%3Dmath-blog%26path%3D%252Fpolynomial-root-finding-with-the-jenkin%26secure%3D1%26sessiondepth%3D3%26optout%3D%26categories%3Deducation%26generator%3Dweb%26bucket%3D23%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D2%26day%3D12%26month%3D12%26hour%3D20%26wrapper_group%3D2.94.20-tooDense-beta-control%26wswy%3D0%26sessionId%3D1980800170%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26s2sVersion%3Dproduction&adks=2722745430%2C2680944423&frm=20
Preview:	{"/1030006/mathblog/sticky_sidebar":["html",0,0,null,1,600,300,0,1,null,null,1,1,null,[88032331476],[69942876],[29955756],[299148516],[99284],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CKmc6_TgioMDFePt4wcd75gCoA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20231207';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;align-items:center;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inher

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	56403
Entropy (8bit):	5.969411210519308
Encrypted:	false
SSDEEP:	768:mWc9UreQNyUaNBrrYJ1QgZQ9ONQ4dU8sz074rlN+klv0:mjUy4J1l/NZU8sk4rxlv0
MD5:	67A34C78CC1057C03B5F46AE75DBE04D
SHA1:	4B61E354573490B65712B4303842B2F559FE2895
SHA-256:	B8899082E49D3C5D194078210230C4F3E579B8FF453A79D44166545D7537DF13
SHA-512:	AED241641DBA7CF85F5530798BDB3B55A5C1277AD23B9D568E54C7549F2DE4CF66DBFE686B5B3CE05EB909077AFA17BBCD553E4ED3D3C5F60F4F206E8BDF3F07
Malicious:	false
Preview:	{"/1030006/mathblog/adhesion":["html",0,0,null,0,90,970,0,1,null,null,null,1,null,[107212704516],[179384556],[29955756],[299148516],[98686],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CNi95vTgioMDFfHqlAkd8p8CAA",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-singledo

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
URL:	https://cs.lkqd.net/cs?partnerId=109&partnerUserId=76225de3cf&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1348
Entropy (8bit):	7.75162634176018
Encrypted:	false
SSDEEP:	24:P5nAiUAdIQc35ELXfx6s0AanO7687GIQBjUXE+r1Fm4PoWSQaKiKo+aMpfDM:P52cI53WcAcOebd3+ZDaKiZhcfA
MD5:	7649D38EB30703DEF05177C018F3570F
SHA1:	622C0957F3D2591E75C005A3BF18F9512A2594C8
SHA-256:	DB09AD7662A85AA1B31C479ED2F57A936091E3D56353E4FE759A0DB449A7EA7A
SHA-512:	32790EE04D5D07DB1585AA817BB027EF5E7595279E211B90DCE56A1AD0100523CE0051D4A0BAA077CCF2A64170A701F0D6F6B7C4F1D08621F47F7E193E794D84
Malicious:	false
URL:	https://secure.gravatar.com/avatar/2dba0e1f37c50ff66849dc68c4e4816a?s=80&d=identicon&r=g
Preview:	.PNG........IHDR...P...P............pHYs..........+......IDATx..=n.1......".....$E....t..).".p.+8eZ..WHc.i.FP!.s..0.....\>..\.....>.o.4.Z.BW..s,..~...2.x.....p.......0..[...-s..\.so9..Q......\|...........U.RV....T0EC..0...d.Y......1....O>M.D!..wj(.@.....1...`bFQu.U.1..1....bNx@.Yx.b.<Q...........X`..O$.o....g........+sFg...H.'.`0D..LBL...#/..Lx..WK...V.Y.X..T8...i$..].]..d$..... #.P.>H..a.,..3...gX,.....U..1.J..[...<QI.[..&<Q)....'*..a<..(....:..........b.........#<.&.Z....H.b-@-..%..';..J.c.M.J..E]..AR6..g.Xg........w......".-q..m.D_..gaM..U.X..X....y=....W..lw.A..A..x,....a0~..}T0..x .;.}g..g=./@..cjg.~...pc..\|..}h.=S..P.%(.Q..B...b..Y.V".......Al...A........G..mw..V......o..z.1.......@.}V..R..U....k..xVjL..x....R ...'...;.{Q..jn..CP....3Uvjg\|.<.....G..j.....9...#.f5..E,...x".....9c.X7%.U.'...]9.....<.6u....XX..<......4.:E...T.'...v..a...+.lw.0...).....en.T.k..z.A.6g..O.i.....=...x....%y".C.k.o&..D.X.'R7N3f....S;.L..-..3R.D../...&9

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12753)
Category:	downloaded
Size (bytes):	12823
Entropy (8bit):	5.418909003690939
Encrypted:	false
SSDEEP:	384:77n4A4md5GfxUJfiQswjwOfyNmegtOiic9nh/IHQPYpoc2n6LsQ:X4Ajd2UIQP0OqNFpwlhrPYp8n6LsQ
MD5:	C6802C3BE7BC0A98E011CD0842C54BDE
SHA1:	1011F89445234711F092700B3BBEE9D9DEC6C90D
SHA-256:	16E81FE5EB8E62440C8208FE13409E40EC141B75547A35B7A79655935B409B9F
SHA-512:	2BE5ACA71AE6BE49F4FCFCE232591C3EE8FE26EDB2A5C619FF27D9EBE7293CF176531B30F4C530727603B26BBDFF544CD94B23DC63642704ECEA47F696EA1E10
Malicious:	false
URL:	https://exchange.mediavine.com/usersync.min.js?s2sVersion=production
Preview:	/! For license information please see usersync.min.js.LICENSE.txt /.(()=>{var e={34:(e,n,t)=>{var i,o,r;void 0===(o="function"==typeof(i=r=function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var i in t)n[i]=t[i]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(i){function o(){}function r(n,t,r){if("undefined"!=typeof document){"number"==typeof(r=e({path:"/"},o.defaults,r)).expires&&(r.expires=new Date(1new Date+864e5r.expires)),r.expires=r.expires?r.expires.toUTCString():"";try{var a=JSON.stringify(t);/^[\{\[]/.test(a)&&(t=a)}catch(e){}t=i.write?i.write(t,n):encodeURIComponent(String(t)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),n=encodeURIComponent(String(n)).replace(/%(23\|24\|26\|2B\|5E\|60\|7C)/g,decodeURIComponent).replace(/[]/g,escape);var c="";for(var s in r)r[s]&&(c+="; "+s,!0!==r[s]&&(c+="="+r[s].split(";")[0]));return document.cookie=n+"="+t+c}}f

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=XlgrDenbgEaMcD0KDoEzLQ&google_push=AXcoOmQuAVx9hQ--jcxlFJuUK3jXxX7-iFlXz3fGw4FdQzGGmxXBqqCafnKdM0B4JQLjDdC8xrP3UNiGqcb355EMI572e9tV_Y4F1A
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16254
Entropy (8bit):	6.017509485713256
Encrypted:	false
SSDEEP:	384:BvsR8P/3zQHhHv1Um/3bOrFi5WFh1tHirC/UwJrn5IbvG:ZsR8P/cHhPL/3CrFiIFh1tHwazIbvG
MD5:	959A39F30F00F9966F728E900C61EF33
SHA1:	6AFD89EAE94696B0DD13D2F6CE565ACF06F8E5D0
SHA-256:	FE74C9C4BA23CACE9E0CB351CFB3C740E8EA1EDFAF802A0E450D4B242264BD9E
SHA-512:	3F71D9EF300A668423E0DE4B40F9F3DF5C8C373AD5593A8A82A0AF565A22F22BFB03E4182095ED83DFBDA8866B33D68E6EF48A9A7CC8656D63F08665C875195B
Malicious:	false
Preview:	{"sodar_query_id":"KcV4ZfTqDYGI3rsP9JiKuAs","injector_basename":"sodar2","bg_hash_basename":"Dtt_-LR3WxpzwV0Gscftq1A_D1owstvxoTnWWhwY4Ow","bg_binary":"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

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40262)
Category:	downloaded
Size (bytes):	40263
Entropy (8bit):	5.457470717464792
Encrypted:	false
SSDEEP:	768:ul099Tr73piyvMQCbj1tDXlyj7JIRqMLggEOZlYAuSkedeIQktc5lgFPRGJY:s9dPVVL4AuSheIQLlk7
MD5:	5E7316F80D92E2586AD0DB3EF9125804
SHA1:	D5B7DECD4D5FDE4786107B33101125F585A0E75E
SHA-256:	04D549A4F168546AFDC3608BC6EF4AD67A16A2BF2BAF8C6770F88F524C924D11
SHA-512:	27A3A1FB265B6641AC6CA9593729A63484BD47EA7EE44B5C1C67ABE1251A7AA374BDA0F3B20A4063A62A2DBF8F6A42789F9586EE3CF7001F0B4A112C8EBD0BDE
Malicious:	false
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202312060101/pubads_impl_page_level_ads.js
Preview:	window.googletag&&typeof googletag._gpt_js_load_2_=='function'&&googletag._gpt_js_load_2_(function(_,_m){var wP=function(a){if(!vP.test(a))return null;a=Number(a);return isNaN(a)?null:a},xP=function(a,b){return a&&a.source?a.source===b\|\|a.source.parent===b:!1},yP=function(a){a=_.Fg(a);return.05>Math.abs(a-1)},AP=function(a){var b={bottom:"auto",clear:"none",display:"inline","float":"none",height:"auto",left:"auto",margin:0,"margin-bottom":0,"margin-left":0,"margin-right":"0","margin-top":0,"max-height":"none","max-width":"none",opacity:1,overflow:"visible",padding:0,"padding-bottom":0,"padding-left":0,"padding-right":0,"padding-top":0,position:"static",right:"auto",top:"auto","vertical-align":"baseline",visibility:"visible",width:"auto","z-index":"auto"};_.hv(_.A(Object,"keys").call(Object,b),function(c){var d=a.style[_.Zy(c)];("undefined"!==typeof d?d:a.style[_.Xz(a,c)])\|\|_.Yz(a,c,b[c])});zP(a)},CP=function(a,b,c,d){return BP(a,"fullscreen",d.va(952,function(e,f){if(f.source===b){if(!

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1162x700, components 3
Category:	dropped
Size (bytes):	23258
Entropy (8bit):	7.595427984668704
Encrypted:	false
SSDEEP:	384:Y25SpTooSJHGTM7q4g+jbeCDlzqMuXFCM5e9lgRcYZudvwTWkNUXLl:PSCoIHQaqses+X0lz5dYTZGl
MD5:	8A5252CA346FAE606D20218914AD42E1
SHA1:	DA4CB82F5A695DD304BE36D1BB61B6D99A305D92
SHA-256:	55B981D9725165BC8C6C429A834432BC8C331FBAFD73E647B12E63EE5DA7C567
SHA-512:	9C2C6F3F97E713259173A338D8BC03F0AD26815558F2630C5ABAEA883731A604475D61DC03F8F8093C0CED5E73A18158FEF44FE9B2D4F545B9E052625EC8281A
Malicious:	false
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777..........."........................................C........................!.1A.."Qaq.2.#BR...b...$3C...Sr.%4cs...5................................+......................!..1.."AQ.23#$4qBCa............?..(.Y... ...... ................B......(.(.....".*....@. "..(.. .P.@.@EI.Q...I........@....P......I ...@..... @.......@.......E..@@...@$.@.DP.P.@..........h.....T.....@.`...4.......O.4.....@w.....^..D.B.............j~...&...;..@w.......j~p.j~....w.'...S..;..D..].....;..4i{....@M.........w...........`J.......^..C..4...w......C..4.......!.s.N..A@.....A4......w...."......;....@....~....w..'.....'.....w........................@4......hEE..XE..v. .......J..u.P....A@A@@...........4....O................................_..;N.,.^...F6.D-k6v\|.N.?.l......G[......b...1...[DM.;.....NukX..~.y.?M.>...m.h..H....-}....5..Y....y.w...>...{.u..LDn

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12201
Entropy (8bit):	7.965556772521496
Encrypted:	false
SSDEEP:	192:Z4bWQrYnenzRoLMubVfPao5FXjEg69eUq6oFd+fIOpeENYqNVSLGVTfruD/mVE7J:en2RLB99Mg69eUqtd+Zf/+KTY/mA
MD5:	B136D4CAFF264AED34969E2BB588E9F4
SHA1:	720CC098048F8060FB5AD5F55CCAD07411580615
SHA-256:	5A40324782F84F6D41939C95FA035DFF093F014CE40E8523E41ADD857CEDD12B
SHA-512:	7535F0F5E502426DEB5E076F59F3AFD2AE8E3FF77B9366F2F222EF78C10CF8EE50E9347E294AA79D846A168D578BA4933D5A33A0CEEA786EC6F1F33BA9BA1839
Malicious:	false
Preview:	.PNG........IHDR...P...P............pHYs..........+.... .IDATx.]..eYr.......;..........&[..A......Y6......~...g......$C. @0...$7[..........k..?.....,$...s.Y;V....E.....nf...'..J......m.G6.5.....+..=..x(...:..X0..9w....1.............._...L7.D...>.>........kD...?...E.._y...N.<x\|....J.y...e.......!....'......+~....fu......O>..o\|...'......!.R .a...(U...9O.4....u.9g.jU....Jz...`.........v.F..q.......f..........]...&..q....R.7n.........F@U(E.....HDD@..B......L..H{.....8..K`.^...KB.LU+",...zB... .-.*........;.$bH.....}...I,.f..`..TV.5..GL.......c8...U$.B;...].......?$?....C.11..U....!`".....B....@..Z..H..b..J.X........./H).a..!.U..H..a... .R...R.....lT.v.C[D..".(.. .....<..t)A..p~~.7o. ....]..E..B.9..R+!$...."......&..G.E!.e.J.aR.. @.FD.&. .a$D.-.U.V0.T..~.v.o...)Uk.u.-.B..@.."L...yBBdu.f%B..."......._..?@A..T...)%.....B.w<....a.....#.H...~.t)...Z1.~.$.R....."V...~8Pbd..[.7<}yC...77.y..#..f.Fk..o.A..HJB.j....X.....#W.Y$..5<U.Rp.9bf..kJ)d+...X0S..............

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyYi0xZmQzZWQzYTIzN2I=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=540290843&val=d6.c5bd044156be4b89a58d19d2b5fdecfd
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Preview:	apstag.punt({"cb":"0"})

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62130), with no line terminators
Category:	downloaded
Size (bytes):	62130
Entropy (8bit):	5.159576877500298
Encrypted:	false
SSDEEP:	384:Ambh2Xi+F0F7wft71Ziu7TUnrDoQ7Hb7AVl8qWm87hQmdCNZZD7joJSvFdK7fh7t:PbQy+SFrDOWmXA4MSvFdFqA2synWtW
MD5:	5CB04891DF6C7A71C62FFC2360719CE6
SHA1:	81139AB31654BFFFF74B3EFA350203D3C54E3C94
SHA-256:	2DDE6CF65105C6317A21327D5D4777D57ADADD12B2A7062A1BA1637177D00B78
SHA-512:	9673E487395AF8AC7E993F403552F7E7B02D417FB0AD0B4D054E1811E1D9CDB6C9EAF518C3E1BA764C3584E1D5E57C500AB6C6B09D562969C745AF43CBFC68F7
Malicious:	false
URL:	https://cdn.opecloud.com/ope-dmplite.js
Preview:	!function(){"use strict";var t=function(){function t(){this.initialCallPromise=null,this.maxCallDelayMs=2e3}return t.prototype.callPixel=function(t,n){var e=this,r=function(t,n){return new Promise((function(r){Object.entries(n).forEach((function(n){var e=n[0],r=n[1];void 0!==r&&t.searchParams.append(e,r)}));var o=new Image;o.addEventListener("load",(function(){1==o.width&&1==o.height?r({isThirdPartyTrackable:!1}):r({isThirdPartyTrackable:!0})})),o.addEventListener("error",(function(){1==o.width&&1==o.height?r({isThirdPartyTrackable:!1}):r({isThirdPartyTrackable:!0})})),window.setTimeout((function(){r({isThirdPartyTrackable:!1})}),e.maxCallDelayMs),o.src=t.toString()}))};return null===this.initialCallPromise?this.initialCallPromise=r(t,n):this.initialCallPromise=this.initialCallPromise.then((function(){return r(t,n)})),this.initialCallPromise},t}();var n=["tcf2","implied","usp","noConsent","auto","gpp"],e=function(){function t(){}return t.parseStringOrNull=function(t){return null==t?nul

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.97020783365077
Encrypted:	false
SSDEEP:	3:CUzRtrllHh/:dJ/
MD5:	7312A5205389CCAE2576D800255B1DF8
SHA1:	897C14EBB5D7842B621F310E4E90680050FD1C1F
SHA-256:	22816A00DFE9FCDC30063D22717AB9CBAB3AEB2A8E9844E9D774D256DC48B7C8
SHA-512:	110B55A7D8475D18BE9C9786C3A59106D3944E5D4574D3D4C924E0D96A08393D8BE8AA32188F9ADE88EB0718D37FD8E6EB458D903A303B6FECCEAEAE5882C436
Malicious:	false
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	5.3474537301789935
Encrypted:	false
SSDEEP:	3:YA0fRGPijKEoX2GWBUEVcuYpqEFkYNzKn:YAmRFcxWB1yTzKn
MD5:	2A202C8D6A79CF7DC00C66E33E2FE8A4
SHA1:	9AE187D2F719B3A9348A0647FD6A553C8BC313CF
SHA-256:	8AE83490921320DBE0E1485B83EE328C24A7C7CC706CED53436A2AB053BAF59C
SHA-512:	259C6B6CF158181E40DE1EC88D5A7505BF0BF7A3B1B9E38562F715C717CAAEC61A3D083D78B77992AA7180582E1DA4A20291B377A0ACA343B473FCA5B6072389
Malicious:	false
Preview:	{"esp":"eyJpIjoiRGFxMGE0aTlBeFkzbml6aEZSc3d1UT09In0=","i":"Daq0a4i9AxY3nizhFRswuQ=="}

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3042)
Category:	downloaded
Size (bytes):	20786
Entropy (8bit):	5.532382223000229
Encrypted:	false
SSDEEP:	384:jE+Z+q025oid4XS4v7jOPlGrzhkWjiTYqHZPBOxwA8/43oXZNzIM6ak0bM/g0Jwh:jE+Z+p2bd4XStPlGrmWjic4fOxwA8Yoj
MD5:	E936A4C5ED2A020E88AAAE5A67810BD3
SHA1:	ADB64F4FE75B0D02429E4837A0F8262F1D99D5E9
SHA-256:	8D6679C1CE1AC8605F5C410F30D1B06713479732043B75E81130CBE21B60E579
SHA-512:	C4777845B5101A1D1D3987B84A64C8BE45368BC82E27590DC7DFE33A63BFD636D3AD208233EB14F81A07316AB1D299EB6523C4CEDB0856E227D25EFF3DD951EB
Malicious:	false
URL:	https://tpc.googlesyndication.com/pagead/js/r20231207/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function t(a,b,c){t=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return t.apply(null,arguments)}function da(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,f){for(var h=Array(arguments.length-2),g=2;g<arguments.length;g++)h[g-2]=arguments[g];return b.prototype[e].apply(d,

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HTL:zL
MD5:	C78FC4C73991971736F95F00B7C09E4F
SHA1:	2BFE006346297E446B58308E3F37169A4BC29046
SHA-256:	C70E533105E5FE64092A52295354E975F8D6DDF470DA3F7AE4A6D4F3FC915283
SHA-512:	5F85D1EA2C4DB38DF3A6FC5414C03EDA186CF86A84F9D0E4C37053791060936B486A0493B54010319FCBA943ED4E95F58045C3EDD135952E69CED9EE87BD21F0
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTA5LjAuNTQxNC4xMjASEAkR8BQnPKxANBIFDbtXVmo=?alt=proto
Preview:	CgkKBw27V1ZqGgA=

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (331)
Category:	dropped
Size (bytes):	3619
Entropy (8bit):	5.4173081671604955
Encrypted:	false
SSDEEP:	96:FGHyPxqogCk4U2usP1Wf4bknqh0yR0+FPpLB:FGSQb748Ucf44nquyuct
MD5:	EFEFC86EE83A20AB67D83B0F8E3BE2CD
SHA1:	4672759E823C0B66D6D3D4CED326965E9C8B3346
SHA-256:	A5E292C8BDB7A37776B948412E7EFEF6C5516F110FF1C8E1DDDF50E920C46A5D
SHA-512:	6B7E5FA1F4CB9635F699DC17B4BC62AB691421094B34F4FDB2B24E3B5A1CB0B8A7A6EFA37CBF971FF5F32BDF0BE957EB922CD1830FA0F705E70ECB64DDDB5440
Malicious:	false
Preview:	<iframe width=1 height=1 src="https://us-u.openx.net/w/1.0/sd?id=557617007&val=csuid_50f425cc-f697-4641-8d2e-58c9f6c7ba00"></iframe>..<iframe width=1 height=1 src="https://ssc-cms.33across.com/ps/?m=xch&rt=html&gdpr=&gdpr_consent=&us_privacy=&ru=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3D33across%26nmuid%3Dcsuid_50f425cc-f697-4641-8d2e-58c9f6c7ba00%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D33XUSERID33X&id=zzz000000000002zzz"></iframe>..<iframe width=1 height=1 src="https://prebid.a-mo.net/cchain/0?gdpr=&gdpr_consent=&us_privacy=&gpp={{.GPP}}&gpp_sid={{.GPPSID}}&s=pbs&cb=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Damx%26nmuid%3Dcsuid_50f425cc-f697-4641-8d2e-58c9f6c7ba00%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%24UID"></iframe>..<iframe width=1 height=1 src="https://ib.adnxs.com/getuid?https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dappnexus%26nmuid%3Dcsuid_50f425cc-f697-4641-8d2e-58c9f6c7ba00%26gdpr%3D%26gdpr_consent%3D%

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://u.openx.net/w/1.0/sd?id=537106470&val=2527372694113908282
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38622)
Category:	downloaded
Size (bytes):	39606
Entropy (8bit):	5.679119871052659
Encrypted:	false
SSDEEP:	768:jKvZzLcOBo9xlOrGstkk9XPAiSjsi3l2IlrBj7aMSWMCGDtYp3:jKloFOr9tkk9fU12ItBxMvYV
MD5:	509FC31DA1611D556288E9EFEAAC7FFA
SHA1:	F41923D59672895D3B295F5630665AADFD08F1C0
SHA-256:	0EDB7FF8B4775B1A73C15D06B1C7EDAB503F0F5A30B2DBF1A139D65A1C18E0EC
SHA-512:	1343D77ECA31AA1A975F669651F8D7DA9EAD4164D6C44127F0FE6AB090A1800C95273C608C67AE6C99A3D1670DA6CE2E922881C9F5577F71A5DFF30DAF3FAC83
Malicious:	false
URL:	https://pagead2.googlesyndication.com/bg/Dtt_-LR3WxpzwV0Gscftq1A_D1owstvxoTnWWhwY4Ow.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function x(C){return C}var q=this\|\|self,W=function(C,k,m,Y,t){if(!(t=(Y=k,q.trustedTypes),t)\|\|!t.createPolicy)return Y;try{Y=t.createPolicy(C,{createHTML:T,createScript:T,createScriptURL:T})}catch(I){if(q.console)q.console[m](I.message)}return Y},T=function(C){return x.call(this,C)};(0,eval)(function(C,k){return(k=W("bg",null,"error"))&&1===C.eval(k.createScript("1"))?function(m){return k.createScript(m)}:function(m){return""+m}}(q)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){var

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
URL:	https://828ea6707d12e484b3921bd7195f251f.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.004895759723114
Encrypted:	false
SSDEEP:	12:WuO+CQa1GbiDm82iYFAMsG8aREsa3AaaN:qQbiDmFNFAMH8acva
MD5:	15CF32F1816BE72AB8AA0D16E398339B
SHA1:	2C227D4B3904BD6D0862A4EECCB2827AD62222EB
SHA-256:	B7AAC81B09E4B993E29207E4B7A36E13B56F0674D6E9696F65F8F07FB06186A4
SHA-512:	E85076FA0486D02AFE09952B1F0F52B8FCD7E30B62B5690BF5B2E2F72AD7AFD43B1C1ABE5B49DE7B8089C513138BD9AAFD53152433B8A2CE31FD96970805EA51
Malicious:	false
URL:	https://mathblog.com/favicon.ico
Preview:	............ .h.......(....... ..... .................................................................................................................................................................................................................................................LLL.uuu.........................................................................................................................111.555......................................... .........===.\|\|\|.....XXX.....................................000.............................................................BBB.........""".........000.........(((.........................VVV.....@@@.zzz.............GGG.....777.........................ggg.ccc.........................nnn.HHH.........................www.""".....................JJJ.###.YYY.....fff.ggg.................................................hhh.....................................................................ZZZ.ZZZ...............................................

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1468)
Category:	dropped
Size (bytes):	5984
Entropy (8bit):	5.256109035495472
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdNfWrR29PaQxJb+lq0yTMQr+CfLnqNV:1j9jhjYj9K/Vo+nXaHvFdN+rk9ieJ+lf
MD5:	EBA0A9211E70C62EC18B38EA015938CE
SHA1:	B0494192D6D0DD1556875CF65BAA03D641C1C85F
SHA-256:	FEF00502FC75B747C9E81E59CFEAEBE52110E55C47185A42DD1E6728EB4A82B6
SHA-512:	76DD37B8A0C5A41BFA19E175F4A955CD1942031F84AB6D8CA2B45D09EDDA828F0A366FA794013F48908868EFC90BA527D7C3D8744181087665BA3A82B5898508
Malicious:	false
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFEyVDFLRFUtMTctSUJHNg==&google_push=AXcoOmQZAqWr5dyrQJpkgAEcs-hHckVChMpfoE5lOENz-K8IrVugBkhsQ2FLgwEPRBrx41oawA1j0zZe0CHqHxq_5UDeAcPm2IU
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (301)
Category:	downloaded
Size (bytes):	459
Entropy (8bit):	5.00023839860406
Encrypted:	false
SSDEEP:	6:C63163nP63963Tz63HcJYWReGkptk+v9CMlJVSzUuy35HE21KLU/he2ljHHnz5RU:JYXCA6AVeGk1XTf5HmLU/hljHHFRQL
MD5:	92AD15FFECF6A7A84D73E00A8672972E
SHA1:	8E55E01353C09B698D622F89124AC12EB995545B
SHA-256:	273F17CF8653B65CC03001648C2CB223DAB515312957A061D85C1E8AE976ABB5
SHA-512:	23C346C5C0880C860E655BBAB12D302DD7274C2ADA5FCA330DB6C869B29FEFAB2E08F872A1033FEC433DC74B1FB09BA01780743A509EC4E4B9B6034274459535
Malicious:	false
URL:	https://keywords.mediavine.com/keyword/web.keywords.js?pageUrl=https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/
Preview:	. window.$adManagementConfig = window.$adManagementConfig \|\| {};. window.$adManagementConfig.web = window.$adManagementConfig.web \|\| {};. window.$adManagementConfig.web.keywords = {"status":"PROCESSED","sales_kw":"polynomial root-finding,algorithm,polynomial root,value,equation,solution,interval,stage,problem,function,field,case,opposite sign,technique,analytical method","sales_cat":"596,597,631,599,602","sales_safety":"GGT0"};.

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0530507460466545
Encrypted:	false
SSDEEP:	3:CUHa/t121l/JtH5:gkBD
MD5:	57F187C7A868FAEAC558007A8EB6CB2E
SHA1:	11AB10AB109FDB53D91D444AC781101F5A6360C6
SHA-256:	AA03DC59BDCA72631D2301E4297CFA030BD31B907DC138E7B973D12311C90A22
SHA-512:	3844065E1DD778A05E8CC39901FBF3191DED380D594359DF137901EC56CA52E03D57EB60ACC2421A0EE74F0733BBB5D781B7744685C26FB013A236F49B02FED3
Malicious:	false
URL:	https://match.justpremium.com/match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e
Preview:	GIF89a.............!.......,..............;

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
URL:	https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmRitpS51bW4JaM48NaX9NPBXlaY9K04W1VYXq8TEE5561E_P514CJXwEtxoLpgKQRpvC_1xgAsKN-NDS5V_Ru8BuC8ZVvUm&google_hm=IQK9kLEdXCzUdbrtiYiwkQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.97020783365077
Encrypted:	false
SSDEEP:	3:CUzRtrllHh/:dJ/
MD5:	7312A5205389CCAE2576D800255B1DF8
SHA1:	897C14EBB5D7842B621F310E4E90680050FD1C1F
SHA-256:	22816A00DFE9FCDC30063D22717AB9CBAB3AEB2A8E9844E9D774D256DC48B7C8
SHA-512:	110B55A7D8475D18BE9C9786C3A59106D3944E5D4574D3D4C924E0D96A08393D8BE8AA32188F9ADE88EB0718D37FD8E6EB458D903A303B6FECCEAEAE5882C436
Malicious:	false
URL:	https://secure.insightexpressai.com/adServer/adServerESI.aspx?script=false&bannerID=11552347&siteID=N7470.3713632DV360-22SQUARED&creativeID=206432296&placementID=353807570&rnd=30096077&gdpr=0&gdpr_consent=&redir=https://secure.insightexpressai.com/adserver/1pixel.gif
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	77
Entropy (8bit):	3.7011434673082864
Encrypted:	false
SSDEEP:	3:3FFiAK/kWNuR48FuuKQLvaSdNY:3FFi3bNuRmuXaQY
MD5:	192066050DD01ED3BA2379B66F080742
SHA1:	665DA634DF3A66E4613B90967D27FBCEEBAD4723
SHA-256:	CACF3FCB6F8F5B8C455CC8BF4E75152371740FAEADA4CC8AE491BD2ECCE231DC
SHA-512:	4F83AA692C41DCE3619F44F1125474FA2CD4DE22324A98176A5A32D414693E08185D7B4223AC121970BDD597D81AA8E61376021C20A0D4227B20C732803FD27C
Malicious:	false
Preview:	{.. "geo": {.. "state": "FL",.. "country_code": "US".. }.. }

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	5.3474537301789935
Encrypted:	false
SSDEEP:	3:YA0fRGPijKEoX2GWBUEVcuYpqEFkYNzKn:YAmRFcxWB1yTzKn
MD5:	2A202C8D6A79CF7DC00C66E33E2FE8A4
SHA1:	9AE187D2F719B3A9348A0647FD6A553C8BC313CF
SHA-256:	8AE83490921320DBE0E1485B83EE328C24A7C7CC706CED53436A2AB053BAF59C
SHA-512:	259C6B6CF158181E40DE1EC88D5A7505BF0BF7A3B1B9E38562F715C717CAAEC61A3D083D78B77992AA7180582E1DA4A20291B377A0ACA343B473FCA5B6072389
Malicious:	false
URL:	https://oajs.openx.net/esp?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&rid=esp
Preview:	{"esp":"eyJpIjoiRGFxMGE0aTlBeFkzbml6aEZSc3d1UT09In0=","i":"Daq0a4i9AxY3nizhFRswuQ=="}

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4540
Entropy (8bit):	5.396267137178851
Encrypted:	false
SSDEEP:	96:1OEaNFlOEaNTFZKOEaNZOEaNJyOEaNwOEaN8Vc+omOEaN+1N1OpaNnlOpaNiFZKr:KNF6NBNWNJFN/NGqN+nNnXNTNINmcNTM
MD5:	0D09CC7E9425E82E7EAF394FA7D1EF93
SHA1:	BAE208ADF079D3BB4D302D8981AEC9821A90786A
SHA-256:	2D0922BD18F06DF3C7413FCD6A3F1C5EC9545B4B07B131E362F30DF7275FC058
SHA-512:	B7BE44D75B926215A076B61702FD94825B5267E1C7FA2E7275A6A0CF48EA429F2215E5467A26A82978D066B69B15E7C4B08B0FB3844FC552E318AAEDC7A6E06B
Malicious:	false
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	79088
Entropy (8bit):	7.62925437526816
Encrypted:	false
SSDEEP:	1536:ijLjDlngW/CAI+HZpfB6gz4Daa/R2p/1PviCdzjRl7+AUFy1EmKUA23:cvD1gWKwZppq3R21tiCdzjRlaAuPmKJA
MD5:	64232028E6A966393125C6656FC6C888
SHA1:	5009475437C204CB68035A96496A55518416E817
SHA-256:	87A92E159459B46D503D7CA9301E076E886BF1EB91ABAAE349F8B6A69DEB2571
SHA-512:	2CBD3C27F22486C2BB2521D158C2C414588EAD3769E8EA414255A3374118FAA87319E846578D6010D3761088FD00C3499DD4BE402B697CD389546957AD0EEB46
Malicious:	false
URL:	https://tpc.googlesyndication.com/simgad/7775594092382834397
Preview:	.PNG........IHDR..............!......pHYs...........~... .IDATx.....$U}8.W....,.r# ........x..>...(A....Q#.h4^.B%.}....x!".".....]._......L.tUWU...)g..........{..d#@.5....m..Y.../Ny.Y.~.d....<-.4/..YJ...E..?..;..x....... @.@...E.7.U..u.........^.............^....!~.~......tu..j......F.@.....6....0..Z.qn7.o...o../...o.?......n#@....... @`....qM.W...W........N..~F..H\|.......V.;Gh.#...n.vY\|..s\|..S..S..s.8V...0v...... @.........^........%......q.Hp...6..F( .5B\|U.............~...1.HT.=..6.... @....5.(Fq........?.D........m..T .U...S FUm.-.w.}..].j<o..&@.......h....D..{..?Fk]..j....H`...D...HVm.C...C......{..... @....... 0^...[EB.;......Hj.q.......$..o...D...Ki.NJ.FS..{..*...!...... @...................7..#.U... 0C....B9m\|."a5/Z_L.<(.Cb.`...@...... @.....f#PL3<'..........O...S.H`M.....D...E1.......xu..}...h9..... @....%....=...=...\|!..DB+... p......~..@<.p..?..pX...c...... @.......R..Hd}>.X_....v....@..$....b.\ FYu..bd.....=c.. @....... @...

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
URL:	https://www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6865
Entropy (8bit):	4.919837869231804
Encrypted:	false
SSDEEP:	192:YHSGsjyiR9V/uDCkTeU2IPBDlMa+h69ZOZ5ZXZ9ZbZiZsZ+3ZUE5oMYta8Qi8:3c3gr1vJE647
MD5:	AF2F05994DCA1E2CD8E89DC7E69EAD86
SHA1:	14E4F04AD653047D3AADDFA245942B1F7CB5EA43
SHA-256:	75733CAFD48E07301F03016226717E3F1EDE55CD522926FE8BB78098F9CDA70B
SHA-512:	68DB0CA06DA8C74A2EC4832DC5C95335F356169A71FD5236FDC1E08AB67F1DD4C4F95C04E68BEBA590C18F8C8229E7B19A751D88A54C415192478BCA016AE029
Malicious:	false
URL:	https://scripts.mediavine.com/launcher/settings.json?off=mediavine
Preview:	{"productionVersion":"2.94.20","videoVersion":"9.1.10","ampVersion":"3.0.0","betas":[{"trafficPercentage":2,"version":"2.94.20-ab"},{"trafficPercentage":4,"version":"2.94.20-remLexiconId"},{"modelRequirement":{"modelProperty":"enable_grow_slidebar","modelValue":true},"trafficPercentage":10,"version":"2.94.19-slidebarRevAB"},{"trafficPercentage":8,"version":"2.94.12"},{"trafficPercentage":2,"version":"2.94.20-1510-1523-imp"},{"trafficPercentage":16,"version":"2.94.20-growSmartLock.2"},{"trafficPercentage":8,"version":"2.94.20-tooDense"}],"videoBetas":[{"trafficPercentage":8,"version":"9.1.10-ab"}],"ampBetas":[],"s2sBetas":[{"trafficPercentage":4,"version":"s2s-ab-test2"},{"trafficPercentage":0,"version":"node20"},{"trafficPercentage":4,"version":"ADT-1304-Adhesion2Nativo"},{"trafficPercentage":4,"version":"ADT-1532-NewBidderPtrn"},{"trafficPercentage":2,"version":"heimdall-s2sStagingEnv"},{"trafficPercentage":4,"version":"ADT-1591-CanonicalUrl"},{"trafficPercentage":4,"version":"ADT-158

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 618x349, components 3
Category:	dropped
Size (bytes):	21141
Entropy (8bit):	7.974415372278402
Encrypted:	false
SSDEEP:	384:0ybg8Kt50nd43vcLZRqIbhc+rw4jHr+Bym3iJrQBXqPZ+DU7:0y7g50d3ZRq2+CywmlJqhAU7
MD5:	9C99B73D832A5C41453486244A3CECEE
SHA1:	B4CDB795DC216A2FBCF7FF611CC8B67EB90B4FD6
SHA-256:	2A9E130F85C37B3FBDD4A98CD8D7EDAC62BDDCFD4D909942FB1E0812422BE5AA
SHA-512:	F5F19A8CB8801001FB718ABCDE29EFD0529020C0D00FA1FEB4675AD47AE9B4F69863C1F826C09E54BBCEC559BD3C72B51428F04F636FAC94D713493A8EF7B1E6
Malicious:	false
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......].j.."........................................J.........................!1AQ.."2aq.....#3BRr....b.$4...5CSc...%tDTds..................................+........................!1.A.Q"a.2q$3B..#............?..i$..1I"....N.$.H.L..@..2I I.I.5^......VP*U..#.;Ur.W.E..)....u..Fex.B........AC...Z8.2.C.0."..6.....#.....a$S..jO..:3.g.#k.h..4e..h..HW.&1.X....+ZV]..+>x..QGD......z...,...4^F ..G..R...A .[...W.n.I..H..q.....~.]v.T...GH..RhrcQfh0..a.ia.co.J..`l.Xe.c.....N.gJ8\.......1.Y.#..... m...6?..=v...{......_.........I.hD..5.\|.2...<..'..X5'...._...9.....~k:N...wS.F^..6..n.-,...in......%fP.....B...3.Z.G.iG.cs.^..w.nX..k...2.-c'.x.6v....R......ILe......D]!.......d...t.e.G4.A......:El..%>.f...s..swk.b<..l.Q.iNg.N..[R. c_....A.i..{,....dT...gu.%:..G.^\....}2.r)3.G....l....V...\|.......vfh...V..KjYn v.x...d...

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	104
Entropy (8bit):	4.807324007837037
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4DCVeBSyfNh:8WiIUemo/H1fCYKbY4DCVeSMX
MD5:	CC5C23B445ABF8BA4E3DE22FB76B522B
SHA1:	1466DD00502360513DD71B22C1043859312BE0F9
SHA-256:	9C26D98737A773D4E29C2B539E05CCE37EB8AA92B6026B8A1E6D1DB6062FF10F
SHA-512:	4450A85C64BB0E4C58E8E7D021E1BFC86D0785CE283B4606333B621FD379FF10A9540968EE3167A2BC37B70A7AEBDE3E7B12AB605B181FA958AE0A8F476ECD5B
Malicious:	false
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg","cb":"0"})

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2502
Entropy (8bit):	7.885521295962446
Encrypted:	false
SSDEEP:	48:kfcMDcv54meKZVcvTOodUWfYKESWX7OI40t+34oXROODmtnt31tN+kniLDX9:kRwRPVsqCUctWX6IHg3jEODmtntl+Fh
MD5:	FF862C0E7A4755ADF3682DA543BCE1E4
SHA1:	9DB9B9C9BB176AEE7F639F5F4A4CD702105358B6
SHA-256:	36133CA07927C88A7CC578FDDBAED3C668AB75087834D0CA13DCA5DE4EC856C1
SHA-512:	F7BD41F50C64D5DFC88989D0DDEE4C2CE816A08DC7410E5176C9386052791C04991022D406ED15BD0B6CA8C1E1ED83CD2E3B37C0F601DE26646F0FC49FCA0E6F
Malicious:	false
Preview:	.PNG........IHDR................W....IDATh..go.I....&s..g....I.8...6Yd0".(..#.."..d.t&.x.q6.8.7...'...u......wX.!.C........O.>.e....I....2.,.,....A.....,tV....m...6..SR....'.JKKi..l..<0=.={x........::}.4M.0....C.;w.......)==]y..Ky..?6..\.z..r..w...r'C5.:....a..z.....k.}....6y.d...1..x...5.........H...EDD....p.i..}...\|....Y.....<..{.;.V.9..t...\.hm..Z.y..]........C.u..#F......,x..-[.5x.....5..I.N.....&Xx...6....;......z..?.....n..N.u}...>}..7..\|:~.8..q...U[[K.z..v..@.^.t...k.*++..X..........\...L;..t.........%%%Qyy9{..]...n7......u.X....,x#.....m...F}...[.n).....G..U.x\\|.(l..r..IZ.f..'._UU._?h..g.RZZ..5<..3.z.jZ.v-.C.D...799..........TQQ...r.....u.VZ.b..:t..4...!.A......5..k.5;X....:p.......y..E.=...,v.Vj....=z4..;...1c.p..;.}....Pc.......i...Ba..;v.....}.v.4...yn.c`....C.xO.......4./l.....5..f.a.]n.]....=...8(.....X..Bs...a..z+P...........>.\..".mX(3.(/...W.......S.......<..jYY...U+.1;;...._..F...D.~....y.fo.QSS.}.......

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
URL:	https://cdn.mathblog.com/wp-includes/js/jquery/jquery-migrate.min.js
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 618x349, components 3
Category:	downloaded
Size (bytes):	21141
Entropy (8bit):	7.974415372278402
Encrypted:	false
SSDEEP:	384:0ybg8Kt50nd43vcLZRqIbhc+rw4jHr+Bym3iJrQBXqPZ+DU7:0y7g50d3ZRq2+CywmlJqhAU7
MD5:	9C99B73D832A5C41453486244A3CECEE
SHA1:	B4CDB795DC216A2FBCF7FF611CC8B67EB90B4FD6
SHA-256:	2A9E130F85C37B3FBDD4A98CD8D7EDAC62BDDCFD4D909942FB1E0812422BE5AA
SHA-512:	F5F19A8CB8801001FB718ABCDE29EFD0529020C0D00FA1FEB4675AD47AE9B4F69863C1F826C09E54BBCEC559BD3C72B51428F04F636FAC94D713493A8EF7B1E6
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcSg4uUw5qUoyFP5-Cjv4-7Yp1oB4SJUq7zabhKTGQ1I6FQCZWLn4zjmbtsNIAg&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......].j.."........................................J.........................!1AQ.."2aq.....#3BRr....b.$4...5CSc...%tDTds..................................+........................!1.A.Q"a.2q$3B..#............?..i$..1I"....N.$.H.L..@..2I I.I.5^......VP*U..#.;Ur.W.E..)....u..Fex.B........AC...Z8.2.C.0."..6.....#.....a$S..jO..:3.g.#k.h..4e..h..HW.&1.X....+ZV]..+>x..QGD......z...,...4^F ..G..R...A .[...W.n.I..H..q.....~.]v.T...GH..RhrcQfh0..a.ia.co.J..`l.Xe.c.....N.gJ8\.......1.Y.#..... m...6?..=v...{......_.........I.hD..5.\|.2...<..'..X5'...._...9.....~k:N...wS.F^..6..n.-,...in......%fP.....B...3.Z.G.iG.cs.^..w.nX..k...2.-c'.x.6v....R......ILe......D]!.......d...t.e.G4.A......:El..%>.f...s..swk.b<..l.Q.iNg.N..[R. c_....A.i..{,....dT...gu.%:..G.^\....}2.r)3.G....l....V...\|.......vfh...V..KjYn v.x...d...

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_push=AXcoOmQW3qugg7xpy-P0yfEnH9d8Pr24MPXOexQo1faPbexnBkk4Q42OF8XYPfPSimUulbXFwRkr94OSwQ6AtBPIG-E5_aDGEEgNMw&google_hm=b9cbd8dc7ec97bf01pm7xc00lq2t4i8v
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2706
Entropy (8bit):	7.8766682278267295
Encrypted:	false
SSDEEP:	48:WoLPwaWA+iNn6OrNlvVK8b9JSWlsWe+kCGWfZD/mezrTVTQYD:Wmwa7uMkW2JCZD/mMVTQs
MD5:	8E7D991AB0E094FEBB581BE9B473BED0
SHA1:	4F1264F8104E5CC3218A8CA69536CEEE99058B7B
SHA-256:	ABD4A4F94EF0E4072A7977AC3D9B034055399E87D3697E9E290175C0235D7812
SHA-512:	06065574BC7C5C04D9D583A8D096259EF3643C130542D73EB18DA90A647C8BF86BAAB68928C7D3F824BF1E5B40A9BB2954CCB7CDAA619DC88BDAED724A5BE1F3
Malicious:	false
URL:	https://secure.gravatar.com/avatar/ea0e0b733362594417cccfb7e87d4799?s=80&d=identicon&r=g
Preview:	.PNG........IHDR...P...P............pHYs..........+.....DIDATx..Ol.....o.k..?..,..@0.qS).RZ..H....D9...Co...=E.z...C......'PD.pp.....&6.......].o........fg.y3."u.'{..7.....w.I....@..."r.h..o8....?..A9:......4.T..#.HCy.N<...{..T...i; ...a.@..../........ .......B.9...w_.1.5..-..)...{.......C...:9..\..21@?8"..........{`\[....'..X...r..`......M=.......d...2.z../.dl.,p^../B...U..... ........]x..........`.h]^..5-Hn.<...z..'..M.:.d)...M8.=....\.Ui@.+....TP..2>...>........W^...t.;....>....z.yAJ.... .}4.......Q..^.....}D~.z....s.M. ............wa.b...(..@...B]H..}Da..)..hb.T...Wq\..>o....p.M~..\..yo.....-8....i.....9.nq.M"yo?.......l.....7S?~.{e....l)7=.....}\m...h....g.........+0..B;...W.@.).>.TP.......0.."...c]j..........~.KvUG..`\[..G...S..(G.q......H.......X.@....>w@...u.QR.....ox/.A..gU.h_....f..s.......D.R1...h`.C\........>_1A..G.y.y..Y....B..h.[.\.:9.......r...Az.G..UiPAz].u_..Y..@..0)8.d.....}Q....$.JR%.$.tO!%8"IHI_.\..?..,...K.X..w

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (406)
Category:	downloaded
Size (bytes):	18319
Entropy (8bit):	4.805510982569554
Encrypted:	false
SSDEEP:	192:01WLaxOtWRFLqFGhdvuB6/z4diU152spOvAxE6LNTJKADowhqGdbH9jTCdE+Kjw2:dLyFLqFo/cxRZTJlDxhq4b9j28t2UZ
MD5:	C80485A5C9B4A48FC0AA61BF12B0EEDE
SHA1:	5151F1AEBCD0F2E9092262099E2497471A359F2E
SHA-256:	C6748CBFDCA55F66D983077068F3CA5AE27219B6C78E7DB140F6B28D20ED1691
SHA-512:	59AAF1A2ADC74DB82A022DA98379ED21D747F4E752CB7B1A5608C7B01FFCA074832D5E273D64D696A0DCC1F70F35F5E172EC763EED190B17945C431684A94FD7
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/plugins/wp-review-pro/assets/css/wp-review.css
Preview:	/. Plugin Name: WP Review Pro.* Plugin URI: http://mythemeshop.com/plugins/wp-review-pro/.* Description: Create reviews! Choose from Stars, Percentages, Circles or Points for review scores. Supports Retina Display, WPMU & Unlimited Color Schemes..* Author: MyThemesShop.* Author URI: http://mythemeshop.com/.*/..review-wrapper {. border: 1px solid #e7e7e7;. margin-bottom: 1.5em;. clear: both;. box-sizing: border-box;.}..review-title {. background-color: #f6f6f6;. border-bottom: 1px solid #e7e7e7;. margin: 0;. padding: 10px 15px;.}..review-wrapper .review-list {. margin: 0;. list-style: none;. padding: 0;.}..review-wrapper .review-list li {. margin: 0;. list-style: none;.}..review-wrapper .review-list li:after {. content: '';. display: block;. clear: both;.}..review-links {. list-style: none;. padding: 10px 15px 15px;. margin: 0;. overflow: hidden;.}..review-links li { display: inline-block; margin-bottom: 10px; }..review-links

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2522), with no line terminators
Category:	downloaded
Size (bytes):	2522
Entropy (8bit):	5.315304272929255
Encrypted:	false
SSDEEP:	48:Fd0qcQAmy5g2ZSUAHlh3fhy6bydHY2mJHDQ4c2mxT8Kipjp2:LmmmXZdAHlh3py6bydHYBJHDJc2mZ8Kf
MD5:	76ED95A13469C309BB1771B0E3CC1C4F
SHA1:	15FFD8A33597B5B544B001F098EC13352B5027DB
SHA-256:	64A4ED8872228E80F2EF6519AE6F19200DDD5DA2670CDBCB30EEB8AC46E09A63
SHA-512:	F13D6D5F4EFF34373AD0968581E85723D2AB3B99E03FBB8F6F4181DFF68D7E8CCA85E208C22182DDB167988A01F066B13B26BF25F41CFF3DE5470C508ABB9753
Malicious:	false
URL:	https://scripts.mediavine.com/tags/9300/d273b3f7a25cb28cb418.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[9300],{5182:(e,t,i)=>{i.d(t,{Dn:()=>a});var a=(e=>(e["3gpp"]="video/3gpp",e["3gpp2"]="video/3gpp2",e.flash="application/x-shockwave-flash",e.flv="video/x-flv",e.javascript="application/javascript",e.m4v="video/x-m4v",e.mp4="video/mp4",e.mpeg="video/mpeg",e.ogg="video/ogg",e.quicktime="video/quicktime",e.webm="video/webm",e.wmv="video/x-ms-wmv",e))(a\|\|{})},8001:(e,t,i)=>{i.d(t,{G:()=>a});var a=(e=>(e.title="title",e.body="body",e.sponsoredBy="sponsoredBy",e.displayurl="displayurl",e.icon="icon",e.image="image",e.clickUrl="clickUrl",e.cta="cta",e.video="video",e))(a\|\|{})},9300:(e,t,i)=>{i.r(t),i.d(t,{buildRequestFromTemplate:()=>o,getLen:()=>l});var a=i(5182),r=i(8074),s=i(6039),n=i(3528),p=i(8001);const d={},o=e=>{if(d[e])return d[e];const t={sponsoredBy:{required:!1}},i=document.createElement("div");return i.innerHTML=e,i.querySelectorAll("[data-native-type]").forEach((e=>{const i=e.getAttribute("data-native-type"),s=u(e

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEBbc3Ulb89MYktvFpUDZ7SE&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12382), with no line terminators
Category:	downloaded
Size (bytes):	12382
Entropy (8bit):	5.307319922419049
Encrypted:	false
SSDEEP:	384:CLyi0O59W149JrM53aZPNHVO0zycS+P5cm:CLyi0O59W149JrM53KPN1O0zyEJ
MD5:	7468B50ABCA76EB482CAAD4FF8F174A5
SHA1:	CFFE54FEF88585D4CCE466837FFCDC8DC83B93A2
SHA-256:	883FA9745390489E86FC6CB70805527A3CA2D558FDD02EC649B90C3944FBC14C
SHA-512:	619B10DC630F44540B33C7815EE8FBD9F0E2B7F3F0ADFA0DA8588C330F77E004F81C74589C2DA6F4B6781100E493D55198E50A703B1AC1997637E196601BBE64
Malicious:	false
URL:	https://scripts.mediavine.com/tags/3222/127c66279545a39a8f5b.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[3222],{3222:(t,e,i)=>{i.r(e),i.d(e,{default:()=>H});var s=i(7562),o=(t=>(t.mediavine="mediavine",t.pubnation="pubnation",t))(o\|\|{}),n=(t=>(t.siteIdCTPDesktop="desktop_ctp",t.siteIdAutoplayDesktop="desktop_autoplay",t.siteIdCTPMobile="mobile_ctp",t.siteIdAutoplayMobile="mobile_autoplay",t.siteIdOutstreamMobile="outstream_mobile",t.siteIdOutstreamDesktop="outstream_desktop",t.siteIdStickyOutstreamMobile="sticky_outstream_mobile",t.siteIdStickyOutstreamDesktop="sticky_outstream_desktop",t))(n\|\|{}),r=(t=>(t[t.bidAdjustment=.7]="bidAdjustment",t.id="indexExchange",t.testSiteId="199990",t[t.timeout=1e3]="timeout",t))(r\|\|{});const a={[o.mediavine]:{desktop:{ctp:"341819",outstream:"502649"},mobile:{ctp:"341821",outstream:"502650"}},[o.pubnation]:{desktop:{ctp:"872634",outstream:"872633"},mobile:{ctp:"872636",outstream:"872632"}}},d={[o.mediavine]:{accountId:"17404",categoryLength:40,id:"rubicon",siteId:{desktop:"169104",mobile:"

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1550), with no line terminators
Category:	downloaded
Size (bytes):	1550
Entropy (8bit):	5.616606217909566
Encrypted:	false
SSDEEP:	24:CpJHvey1jOSC6xYPmfy1C7OMTaMsz21M/USKCvSMqB0QeHDko1pKcRA6b29Bhom3:CzpjOSCQPyoTjWTKySMqB0QevI6beBD3
MD5:	AB6F2D08921D2E45C477730AFEFED96E
SHA1:	07586C88633241D70D8DB3397E666F79FCB6ED76
SHA-256:	95E209669627C162C917BB389EB8640752BB256746921392CAE47473B675A023
SHA-512:	98AD270C9BF8FF97A270A30E34DBE1AED2AC684EFBDC667B3E0121F3522EAA0E5EA3EDEF324BCED1E6E64C0F0CBB93E493FC7550ED740AFDEB9F359277260323
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=88383604&p=156212&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:AE4A8C3D-1096-459A-B091-2BADD5009F52.');PubMatic.loadAsyncIframePixel('https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID');PubMatic.loadAsyncIframePixel('https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmQwViH5imfCrQKK_65QAQgX_vTURMXdERw6kmd_ESZjOhg9VUjVIQ_0ztSOtP_3BRh_xUYCQLrG_-AGgwjqEqb1nezDgW8&google_hm=UjM1Q0E5XzEwRDk3RjhFM183QTU2MDlCRQ%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	12326
Entropy (8bit):	4.487641996260961
Encrypted:	false
SSDEEP:	384:uy+LxFY1DcA9F/SRHWjtRWOqDygOezPOf3nnLco+PQGU4/gtw6SIpz:IFKh9F/SRHWjtRWOOygOezPOf3nnLcon
MD5:	A8439F87B17221A01DFB08FCE6414C4E
SHA1:	48D245E104CFFD7B2BC158E8F61EE478BD790F86
SHA-256:	F19AC2165C082044CDEF10559BF17F24D3CD8C1D489602CE6B69365D60AF4C88
SHA-512:	6C476A80CB347D81051F6197F80BB16938F9B423F774CC0E235E9995A78F5CEE6A52D8A6817FFA89C281DBDC2CDAAAD2E7B2465E347046355B563BC068266365
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/themes/mts_schema/css/responsive.css
Preview:	html {. overflow-x: hidden;. -webkit-text-size-adjust: 100%;.}..main-container { max-width: 100% }.@media screen and (max-width:1366px) { . .shareit { margin: 0 0 0 -140px }.}.@media screen and (max-width:1300px) { . .shareit {. position: relative!important;. width: 100%!important;. top: 0!important;. padding-left: 0!important;. padding-right: 0!important;. margin: 0!important;. padding-top: 10px!important;. border: none!important;. box-shadow: none!important;. }. .share-item { margin: 0 }.}.@media screen and (max-width:1152px) { . #page, .container { max-width: 96% }.}.@media screen and (max-width:1024px) { . #move-to-top {. margin-right: 0;. right: 5px;. }. div.header-social-icons { margin-left: 20px }. #primary-navigation a { padding: 17px 5px 16px 5px }. .mts-cart span a { padding: 17px 3px 16px 3px!important }.}.@media screen and (max-width:960px) { . #secondary-navi

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=402a9937-9d5c-4b95-8106-4af28162991a
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13534), with no line terminators
Category:	downloaded
Size (bytes):	13534
Entropy (8bit):	5.26908483350061
Encrypted:	false
SSDEEP:	384:GXYeO76PHBXiHc49GVnWCaKX0TulQxaLJW48D:UYeO6PFiHcZVWBg0TulQxUJW48D
MD5:	ABB142824B55F4ACB7BCC829E62DC8A2
SHA1:	2E92B5D24A7F97C6851CBC5607E247230366B560
SHA-256:	6FEEDEE0B3FF656231324E97F80EAC7FEB981BA46B89187F0DAAA9E058E6F6B9
SHA-512:	617BA34CC086259D2DF9683A8347ECF262E3F0A3E7517B9FDCBEBCC02CB9AB6AE8D9CAC6052428A77D63346D31BB76AF037454CD12E59B75B374DCE29753995F
Malicious:	false
URL:	https://scripts.mediavine.com/tags/6409/9a4878ce647526870d8c.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[6409],{8001:(e,t,n)=>{n.d(t,{G:()=>i});var i=(e=>(e.title="title",e.body="body",e.sponsoredBy="sponsoredBy",e.displayurl="displayurl",e.icon="icon",e.image="image",e.clickUrl="clickUrl",e.cta="cta",e.video="video",e))(i\|\|{})},6409:(e,t,n)=>{n.r(t),n.d(t,{getTemplate:()=>Oe,getTemplateName:()=>We});var i=n(5595),a=n(3528),r=n(6039),o=n(2978),l=n(8001);const d={"grid-area":"content",margin:0,display:"grid","grid-template-areas":"'icon content'","font-size":"12px !important","line-height":"1.2 !important","column-gap":"4px","align-items":"center"},p={"font-size":"12px","font-weight":300,margin:0,"text-decoration":"none",color:"#555"},s={margin:0,"font-style":"italic"},c={"grid-area":"icon",overflow:"hidden",height:"32px",width:"32px","border-radius":"1000px",margin:0},g=()=>`\n <div style="${(0,o.W)(d)}">\n <div style="${(0,o.W)(c)}">\n <img data-native-min-size="[100, 100]" data-native-type="${l.G.icon}" /> \n

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2714)
Category:	downloaded
Size (bytes):	24117
Entropy (8bit):	5.4950048998661885
Encrypted:	false
SSDEEP:	384:1s5a6rQK8OWtLjl4DndbZNaeeGSpNvWvl7ozBy34j4i56pm7R4bZlpxPzy4tlfWd:1s5a6EKhWtLjl47dbZNaVzpNvWvl7Qx1
MD5:	89405558ED16D15E21BDA111719EC50D
SHA1:	52F8442853E3189411E741DCCD52AB0A49262CF1
SHA-256:	C8FFFB0B438B7F9403CCD47FDDC2DE355F2F685FE2F59AC9D4C15F82854D79B1
SHA-512:	08676ED147FBAD382639A69120700840C20D9129F2CB9CF60447E91518368838D901BB5F7AB064944693CC70F447CC2DD955C5AE6741B96561DCBCD064279396
Malicious:	false
URL:	https://tpc.googlesyndication.com/pagead/js/r20231207/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var k=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=k,f=0;f<c.length;f++)if(d=d[c[f]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ca(a){return a};var da=aa(610401301,!1),ea=aa(572417392,!0);var n;const ha=k.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return da?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function r(a){var b;a:{if(b=k.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function t(){return da?!!n&&0<n.brands.length:!1}function ja(){return t()?ia("Chromium"):(r("Chrome")\|\|r("CriOS"))&&!(t()?0:r("Edge"))\|\|r("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!r("Android")\|\|ja();ja();r("Safari")&&(ja()\|\|(t()?0:r("Coast"))\|\|(t()?0:r("Opera"))\|\|(t()?0:r("Edge"))\|\|(t()?ia("Microsoft Edge"):r("Edg/"))\|\|t()&&ia("

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130
Entropy (8bit):	5.5440750014536455
Encrypted:	false
SSDEEP:	3:YW/uiXSTh+E0gKF6whyHJkkcO/5znD03/zRR3pFPxY:YWRXhc7wUqVk3U/bJY
MD5:	8D92255D24BCF470E01E1F281A44597A
SHA1:	671BA50FECC8F48F94FFEDF18BA56ADA8122D9B2
SHA-256:	88E11A75F06BBB172C054C4640FB7893D53DB05A1B5A20131B12CAEEE52F655E
SHA-512:	50CD09B206395E129D2998D7CD983AEC0F921387C192FF81CC3585DE28C50470CF8B24CE1389B3E0964B8D24FDA9A539A1D15215FF4F7A44AC8D75208C0E720A
Malicious:	false
Preview:	{"s":"jSijp5CuJ0kxVwMmIcKK7w0qXOPsvHZGqWG2EoK/lQ41LQ==","t":"awWAr9kZF/sLD692UzBFQ/5QaHuwMrAj9ZuZ6zZTrtdKZw==","kid":2,"ttl_s":71}

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65534)
Category:	downloaded
Size (bytes):	96790
Entropy (8bit):	5.2889512121509625
Encrypted:	false
SSDEEP:	768:cXnJL1fv/k1Ut0QVSPFVfxuOCJywJqOKEjn8CTx0j7LLGGbQNbxlZ0imzKuFJtxW:cP31uKm5ddWEA/vE1uOQGwmuBO6
MD5:	5376C157C62EFE566646CC52A4093E0F
SHA1:	45B798AA45448326B353599353C7120A30B759F6
SHA-256:	3907CC5ED9D4A0CDB316D069614220B55FCCD5624AC173592A7A4C2C3AAE0636
SHA-512:	6038670A08E451AAC27858B527E330B1BD50054299614CA3E161F7334524B009806508E6B8E95456781751EE7C9618A406C2E9AD5B0255E1F876B232CEC8EC4F
Malicious:	false
URL:	https://cdn.ampproject.org/rtv/012310301456000/v0/amp-analytics-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-analytics",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function s(){return i\|\|(i=Promise.resolve(void 0))}var e=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}},{isArray:n}=Array;function r(t,i){for(let s=0;s<t.length;s++)if(i(t[s],s,t))return s;return-1}function o(t,i){const s=t.length-i.length;return s>=0&&t.indexOf(i,s)==s}function h(t,i,s){const e=s\|\|1;for(let s=0;s<e;s++){let s=0;if(t=t.replace(/\${([^{}]*)}/g,((t,e)=>(s++,i(e)))),!s)break}return t}var{hasOwnProperty:u,toString:c}=Object.prototype;function a(t){return"[object Object]"===c.call(t)}function l(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function f(t,i){return u.call(t,i)}function d(t,i,s=10){const e=[],n=[];for(n.push({t:t,s:i,d:0});n.length>0;){const{d:t,s:i,t:r}=n.shift();if(e.includes(i))throw new Error("Source object has a circular reference.");if(e.push(i),r!==i)if(t>s)Object.assign(r,i);else for(c

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	20067
Entropy (8bit):	7.934808477345554
Encrypted:	false
SSDEEP:	384:aYUMqmB7tHNQdRg8KzJFftWQ6MLStwJdh2bup92vTvLu+1LS5:C+NQdR0VWQFvHEKpoLd1Lm
MD5:	31709343B72E76DED4DD7BBD16876D75
SHA1:	AD5F47D70F5ADAB726D6AFB7C624C66744E35063
SHA-256:	F396F37E70D5689893A9D1EFA342F12C74638A8584B00ED09402C108B7CEA1E3
SHA-512:	D0244DCADE88CBACBF116582A8F2AB999B03BD0E3EBF5027402E4CCC6956F4F6E392759B1C2292ECBAE6F6E19B770920A27B1ECC62E6755654093D21425984EE
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/4207599684547219402/images/cy.png
Preview:	.PNG........IHDR...X............;....PLTE.................................xyy...................................................................................................}..nrs.....................LMM..................w}.......vwwwxx......!"!...............................?@?...,-,...~..DDDbdc...XYXEFE........MNM......(((!!!......................[\\...~..IKJ>?=............................................................................&&%..........""".........***.............................................ddd221...`aa......................fgg...........555{\|\|.........qqq......]^]......sttnoo}.~vwv.....Z[Z...hii899BBB...EEE...jkk...........lml...<<<...LLL...HIH.....WXWOOO.................???...QRRTUT.........................ZoPE.sk^2$.jN...{.c[.aG...J3.....UE9.......ptRNS................/.#.7.(.J. ..@....v]S.nf.............O6........xm"#;...n4..V......r....X.................<\A..J.IDATx......................................................

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	229394
Entropy (8bit):	5.582554879812652
Encrypted:	false
SSDEEP:	3072:OuTzdZAlCIWYMuUyO1jdaypDDMlMT6LhA9DfFWk4i8rIj5qd4w:bnfIHMuUy4IAT6LhA9DfY1DrIj8
MD5:	8C4D806C2C0A4AE58352235482921E0D
SHA1:	6A110B7FC2F6AF1A7779331A803B9CDF7ED529E3
SHA-256:	5F5034B5EACBAABF1B5560DFED0F20191C3A0708A456C9BF8A1232B4A4A715FA
SHA-512:	E5643A7A79BD2BDC9648B1C454ED15825D259F68D61749CDBB4C5A6547E32527A819AC63CED273AE9C3C0E15C21DE8703CADF1CBB43DA74302651A6D03BFBD3F
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-LYGYJBC3GR&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","mathblog\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":20},{"function":

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	295
Entropy (8bit):	6.975307958372994
Encrypted:	false
SSDEEP:	6:6v/lhPLOzLMMDaUMir+kRaAotDyhKmqcw4tGS3Q4wu4Dy+lbp:6v/7DTka4r+kRadA4cw3S3Q4n4Dr
MD5:	D848A2953307AA510BDAD31F5BF84671
SHA1:	E9D6D8DAA9255F99E4E778FF4C4B47806BDB18C1
SHA-256:	7FD59024B6CA83F11F7A3448EC148309A13B705725716DF134F699E60A96EB1B
SHA-512:	338B5E0E93084FE0BE5A46E437AD6E7E3CD600444B26A62CD2908C01409D739FFDCD8C3DF5C4C948BE59C93866B5DEF5C4759636F149377385BC59F7C7684B3D
Malicious:	false
Preview:	.PNG........IHDR.............kFI.....IDAT8.c8.....f.t.W(.tv....-;.....?'..Y_:X..n.s..a....X.....e.I...4...S.E......,.>...3oh`1.<L.&g..9 -..a.9`.X.,=.G..a..,D.W..Tv......-..rq;.d.aA..bt}. ....Y.r\......1.Q...)..f ....q%:.-.....Z..u...o.>...,1...qZ.K..8...^..Z ..J...2..^.......IEND.B`.

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	39038
Entropy (8bit):	5.430664050428052
Encrypted:	false
SSDEEP:	768:a5/nVk+G9hMlWTSwx832cQyHaSaSmAjiT:a1Vk+G6lWuwx8fLabSNU
MD5:	E073798C657A0FC59453B8B6ADEDCEBA
SHA1:	401AB66A92A6716CD4C981894D47F679FC1AE9AB
SHA-256:	EB66C7C9D097D5BA414230F422484C17FA6F37157D30E1DED2CC5F65A9667987
SHA-512:	866345625C19C0256BE9BF9F383291E645C6B64124A43BDD1C02F92FC2AE0F0AD985A15FF39319456B679B73B058290C0A0FE10C073D76F2C5976D8ED8D84A49
Malicious:	false
URL:	https://tpc.googlesyndication.com/sodar/62bHydCX.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ba(this),t=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}};.t("Symbol",function(a){if(a)return a;var b=function(h,f){this.Ca=h;p(this,"description",{configurable:!0,writable:!0,

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537072954&val=AAAFpUUg-oxSbgNMk9I8AAAAAAA&expiration=1702500006&nuid={OX_USER_ID}&is_secure=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20992)
Category:	downloaded
Size (bytes):	21388
Entropy (8bit):	5.299550000687997
Encrypted:	false
SSDEEP:	384:imrxoiMoB8uxsARrbXEBwCrSQXlGSnL/LuCcQjy21+uPR592rt+7j:iXLm+HxlGSnLbci/+uPB77j
MD5:	EF27F02B424726CA0D1C73E995D74B67
SHA1:	7C9158EDA6664F8326479866E3ADA3A190DA04D6
SHA-256:	C5E507CDD056C590258573B14FED0C8232CA65E2EBF4712CC19F30333295D3A4
SHA-512:	B86F66A9B8373C4CE5D06B6C3C753295BA4A7F692C17D63A51EBB791CA583FA34D8D4EDB4275F76FF898B91755B26DF1A3D9F21D34B37E260F3143B023A91670
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/themes/mts_schema/js/jquery.magnific-popup.min.js
Preview:	/! Magnific Popup - v1.0.0 - 2014-12-12. http://dimsemenov.com/plugins/magnific-popup/. * Copyright (c) 2014 Dmitry Semenov; */.(function(e){"function"==typeof define&&define.amd?define(["jquery"],e):"object"==typeof exports?e(require("jquery")):e(window.jQuery\|\|window.Zepto)})(function(e){var t,n,i,o,r,a,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",h="."+g,v="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,n){t.ev.on(g+e+h,n)},k=function(t,n,i,o){var r=document.createElement("div");return r.className="mfp-"+t,i&&(r.innerHTML=i),o?n&&n.appendChild(r):(r=e(r),n&&r.appendTo(n)),r},T=function(n,i){t.ev.triggerHandler(g+n,i),t.st.callbacks&&(n=n.charAt(0).toLowerCase()+n.slice(1),t.st.callbacks[n]&&t.st.callbacks[n].apply(t,e.isArray(i)?i:[i]))},E=function(n){return n===s&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537123500&val=863968679737
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	7.782642217459844
Encrypted:	false
SSDEEP:	24:8kadhKd8PGR+r5QlZL0adbcsnxulQg1Pmksavlrs1CixAuvYhqJsN15fXHX/L:Paq8PUzl2YcseQ2Qav1tixAWJsz5HPL
MD5:	940D4D7FA143913C835E638B0CC8CE3D
SHA1:	A58A74A2DF30A28FC594CAF9F9FA9CC15E7C281E
SHA-256:	BFC81B7858ECC9AFF22B9BBCFA5FAF4E499A22AB8CF8F1559BD34E37D863B8E1
SHA-512:	9D01B54EE0F9B7BBE5642BF6087399C28DCC5CC5E66739D65B4FBA9881D5951581D8B32E4B7032C7334044A9F6D5F3F752ADA56CEF8D564C35F5BE607A9B0243
Malicious:	false
URL:	https://secure.gravatar.com/avatar/0357be48a77180052e32b659cd94bad6?s=80&d=identicon&r=g
Preview:	.PNG........IHDR...P...P............pHYs..........+......IDATx..Oh.G......v.ZFi.........C!.1..........K/..b.!..\r.-.`.........MD...TT..6.n..(...ofv..w.Q.Y3.y^..o..u]..Z_D...l756/lW4'...(...6..:j.....3.156.m.u.X.\|.]...7.....v.`.Z.?.......h.cm{...E.V..Z.j}.k.K....I....K.d................/..I...O,..Om.D...3........)ra...$...;HYp~...0)...............).....hu6..].............2...g.a..v..V..g....c.=u}..I..P....h..a..A...F.....J.}."@Y......"p^..J.}.PT...3...Dj.h.G.b01..'.........wK_`..Hh^...L2...~?.x.y..W......../.^M.q!...0.K.s...w.....>.U.........C.....G._..}..6~.......{...v.%.5.&...g..........p\;.N..9........s....>@p..u......f.".......>..0..... >.e.T..@...t.&...yc.2....a.<. .X..#.W..3..w.1.;c1\.u..7^.vT.'.....%w&.l.1...X.........8.......~...a..d3..3...k.......v=.1..q...p.w......$2.Q.n.b........{W...H....\8aU.{f..wZ+h..r...R..W.....)....0~....0....f,...Y.J.-.>.(..^+......r....j......r..*R.?(u..I2u'..q.L&b..u.wQ.N.3.........#....3.

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1456 x 180, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	22076
Entropy (8bit):	7.975171437112754
Encrypted:	false
SSDEEP:	384:4KfdAt5mZGIvpYSfR3CVp/3Z3zso0mOxz0Z0y5tONbAKKeUs8+mQsy:k5m5vSAR3Ap/JGzU/rQxKepHsy
MD5:	BC896B7C7F4F7F4F200E3D23E79AE7C3
SHA1:	756CB9A4B23C34A48BEE8F91BB7A92C9DA461715
SHA-256:	70B3AC0F0C879A523F8F445D0936E1C6E841D2363495E7037B9374CC21DA2E03
SHA-512:	E024F9A7B8B7EEB786D5E49478E7A2867B5B70E9D3E67EA356E8753DDE2E121F68A78F057F374B1C27AB665FCD270AD6106016C6207B0CE2B72F15C37AA00E91
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/3291718278215255336/images/end_car.png?1699399357903
Preview:	.PNG........IHDR.............r..8....PLTE....................................................................................345TUV.. ...HHI...\]^??@NOPbdd...+,...ijkTSSM;?eeeMJKgfg....../%'hjj......~xyWSTA03ldeVJM$%.................\|4<........ursz\|\|......,,,.//222...!!!...)))FGGAAACDDIJJ,..OPP...LMM777:::%%%...2.....455O........>>><<<SSS...YYYVVV'''A..\\\:..bcc___J..eff..`......dnjllihh.......18..z{z.HQ.-5wwwd")...u(/9#&.-4..qqq$..nnn.4<.....rQV.'/q.&..~.......*1k)/...W.....kAF.....6>.............?G..mIN.x....~.(4...CJY05..g39sttD03P"(D........;Ci...w......LVZ',.v.........w~tZ_.........-...jq....`fN=@.[b.QX....bgs6=..u..nv.gp..ak.=D.#".GM....._k.V^b<@.....XHK.x..;C........Zb.PX....KS.qw.kp.U[....Zd..........u..q\|.dn......ENcQU&450AA........KYZs..........9Gv}..hu...a\|1.....HtRNS...!(...0.6.>..F...Np.ya[hU...............A.cR).s.z.....~.H.........[.{{....iTXtXML:com.adobe.xmp.....<?xpacket begin="."?><r:RDF xmlns:r="http://www.w3.org/1999/02/22-rdf-s

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	9058
Entropy (8bit):	5.17539360030367
Encrypted:	false
SSDEEP:	192:90BYuhQro18B1v52Ntgq/ILBYce7nalVMaFnYI2mkkNztmHD1:90BYuhQro16R2Fc3f4D1
MD5:	AF916BA13F4865D970A8377E97825FE8
SHA1:	7B0483B26C4E00BD5DD103073B143F263455C46F
SHA-256:	E049E0AF4F078BCB49391CE41AC868554C8019D7964637E988A6B6C17261DBE8
SHA-512:	D0FA0592D1A78F9E30BB1C8C48BCEC1E32937E7B822B828C8D4F13295948363A13C7A9568BB6FC2AB046C1AD0399B8CBAE3B81985EBA0DCE85F3E377A85B32E0
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/4207599684547219402/index.html?ev=01_250
Preview:	<!DOCTYPE html>. ..NOTES:..1. All tokens are represented by '$' sign in the template...2. You can write your code only wherever mentioned...3. All occurrences of existing tokens will be replaced by their appropriate values...4. Blank lines will be removed automatically...5. Remove unnecessary comments before creating your template..-->.<html>.<head>.<meta charset="UTF-8">.<meta name="authoring-tool" content="Adobe_Animate_CC">.<link rel="stylesheet" href="https://07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com/fonts/toyotatype.css">.<meta name="ad.size" content="width=300,height=600">.<script type="text/javascript">.var clickTag = "http://www.google.com"; </script>.<title>index</title>.<style>..#adchoice {....position: relative;....width: 300px;....height: 600px;...}...#adchoice img {....position: absolute;....z-index: 10;....top: 1px;....right: 1px;...}..</style>. write your code here -->.<script src="https://code.createjs.com/1.0.0/createjs.min.js"></

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 7 x 7, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	77
Entropy (8bit):	4.649860198034585
Encrypted:	false
SSDEEP:	3:yionv//thPly4tJRHPTrAbDjp:6v/lhP/5PfEDjp
MD5:	4C3AD797D1D966477C8D8AFB841B2B08
SHA1:	6A9BD02402E3279E6A4A5564C751CEED1EB0CB5A
SHA-256:	E5766694458AF1AF1833514EB4C2948BD9E9CC2082A4C02281B8668F386C1F41
SHA-512:	230BEB786350393A17BC2AF380C5E4450FB6F4F2CE6DBE9C3FF188A7F16AA4D9B94E9F16AD164ABA1E7B1115491425FB856F9EEF4496275C47E15A2FEE33ABBF
Malicious:	false
Preview:	.PNG........IHDR.............n[.X....IDATx.c..V.E...I......B%Q.v....IEND.B`.

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537146931&val=4c_0f2fd50c-4ce9-46bf-8fbf-4c75ac6b55dc
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22919), with no line terminators
Category:	downloaded
Size (bytes):	22919
Entropy (8bit):	5.39850643784808
Encrypted:	false
SSDEEP:	384:lo/ZD15sW6oQRLzuJ19HDbSchRulNhB7iuryPkpAD4rq4tHjrFLfpOEgjHGOO9H+:lUZDh6oeaJ1F/IlNhB7iumwAEr/tHjr8
MD5:	D7DB3D94FDD15AD068F50ED4B521747D
SHA1:	5855D9FE4843C1E40E35AA956C4013C66E87CBC1
SHA-256:	61861944A87C13E53BDF08B7628939FA9683B52D361274A668A1C2F6A5734598
SHA-512:	A297971415F246F5BBF94D43A74AD9973C1EDF7ED9D530EE3F0E3BDC0F2DBCC937D43078BBE9178B6A709A91AB16D9847D9EDA2CBE48CF350525596700FFB4B2
Malicious:	false
URL:	https://scripts.mediavine.com/tags/5629/69f7a57a4414750d2aff.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[5629,999,6600],{6500:(e,t,s)=>{s.r(t),s.d(t,{GPP:()=>w});var i=s(8473),n=s(3583),o=s(6643),a=s(4441),r=s(3528),d=s(2932),l=s(6921),p=(e,t,s)=>new Promise(((i,n)=>{var o=e=>{try{r(s.next(e))}catch(e){n(e)}},a=e=>{try{r(s.throw(e))}catch(e){n(e)}},r=e=>e.done?i(e.value):Promise.resolve(e.value).then(o,a);r((s=s.apply(e,t)).next())}));let c,g;function u(){return p(this,null,(function*(){if(!g){const{GDPR:e}=yield Promise.all([s.e(1011),s.e(8262)]).then(s.bind(s,1353));g=new e}return g}))}var h=(e=>(e.US="US",e.EU="EU",e))(h\|\|{}),m=(e=>(e[e.TCFEUV2=2]="TCFEUV2",e[e.TCFCAV1=5]="TCFCAV1",e[e.USPV1=6]="USPV1",e[e.USPNATV1=7]="USPNATV1",e[e.USPCAV1=8]="USPCAV1",e[e.USPVAV1=9]="USPVAV1",e[e.USPCOV1=10]="USPCOV1",e[e.USPUTV1=11]="USPUTV1",e[e.USPCTV1=12]="USPCTV1",e))(m\|\|{}),b=s(9399);const P=new Map;P.set("US",h.US);for(const e in b.g)P.set(e,h.EU);var v=(e=>(e.NOT_APPLICABLE="BqgAAAAAAgA",e.APPLIES="BqgAAAAAAgA",e.NOTIFIED="BVQq

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (785), with no line terminators
Category:	downloaded
Size (bytes):	785
Entropy (8bit):	5.169315761106911
Encrypted:	false
SSDEEP:	24:2JZNfm8uVCxwgxvHlS1IWHEtK1IrOV6/Oflok:C2ox1FS1IWktK1IKV6/glok
MD5:	8473B6D1B73F4192CBBAE52DD8E49290
SHA1:	A442C51CD937D04FFE28D873A2EE36E01EDCBF35
SHA-256:	DA5A9713C8DB40810CDA1896DE2B5EB393087CC1CD90A86FED1DC76AEDA58B63
SHA-512:	F9335D7757B6043F9533584227CB1B3909134EB40E63690C3AAB1358F022C402A2FB1D5C1754BEABAB94E207FC31C21A59EBC01C99FCF7B79E321DB6D84F5C27
Malicious:	false
URL:	https://config.aps.amazon-adsystem.com/configs/38918095-8e45-4332-88bf-226b3514cb64
Preview:	(function () {try {const accountId = "38918095-8e45-4332-88bf-226b3514cb64";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("log/analytics/setSampling", {"restrictions": {"block": {"libraryVersions": "23.1211.1645"}}, "ratio": 0.001});record("analytics/sampling/set", {"restrictions": {"allow": {"libraryVersions": "23.1211.1645"}}, "rates": {"errors": 0.001, "status": 0.0001}});record("google/secureSignals/set", {});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_push=AXcoOmT1E_W7BkDWZ0GqWWcsM2Dvzz5AyIQ-kRPwoGESfgHKIahEoz8JUl1IrF9gK0GWIlZb_NfRjFFF_cOArg_EyARjYSUiNCym&google_hm=Hz32hLZHBFKxs3xrQUqrw0Qb
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
URL:	https://ads.scorecardresearch.com/p?c1=9&c2=13554685&c3=2&rn=1702413625&cs_xi=787c0e16-6558-0745-3abd-8bbce6d61926
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1000x288, components 3
Category:	dropped
Size (bytes):	63462
Entropy (8bit):	7.98060668677621
Encrypted:	false
SSDEEP:	1536:tImX3zSoRQAFA+zextStpc6c++EG4swazJAaxeaoWBy1Gvb+r:2mHtQADeqazJFiWBTbm
MD5:	81A4C65E410256F14A738A022F4A2F35
SHA1:	47A55CE201DAB800C1DD0AA7A97BD07604C1A366
SHA-256:	DD449A7901801E89D5EEB7C309B70E4364A6529D690BAC02A628D3175D62AC06
SHA-512:	87BF9F500FA97D240D2FEBDDF38DD6D581C998488E7E494B4CA733DB5B3A9EFE69DD5AD9C13433E276B62BC4499B89BD7FBF46F3ED15FDB74DF0FA053E1B0F77
Malicious:	false
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C....................................................................... ...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....7...H.e..Uj..3.............<.h.e.S[[.x.2H.p.o.$..~E.....f.u...!.....?...O/._..h.Q..."..u..M[.H...xa.nF...........4...av..U..d.=..E...Z...;oc.[....Kv.5].s.a{...."W.6l..W..,Z.....`1...P ..U...j3%..g.....S..oC#".........\|...;......%lec.EI.<...8=...J.n...d...Ht.F."P...O...Y.'''.T..@J ..o!Y.?J...

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=47&external_user_id=ViN9mkBO1Rd9xZ5&gdpr=0&gdpr_consent=&expiration=1705005629
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	5.233913935506896
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsLEwK4LzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4L994xYqJmWeV4IQL
MD5:	66D1BB3159B83CB2BE9ED066165E4C38
SHA1:	FF0D58E13E55067882F7BFFED31A1D8970FD6401
SHA-256:	3FDF2EE487005F6505D00CC9D7A3757A1942D56BCAEA69929CBD5BA110494390
SHA-512:	F55E4F9C1CEA37771D93B79F5B50295C0D25B93E7E41DBCECAD0795A96673793723A2A08DCFE5023972C5EF047FBB5FC11F4F3AB88F1018C14990590DF187B31
Malicious:	false
URL:	https://eus.rubiconproject.com/usync.html?p=gumgum
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright the Rubicon Project 2020 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2025)
Category:	downloaded
Size (bytes):	32217
Entropy (8bit):	5.459232336880123
Encrypted:	false
SSDEEP:	768:U/l8lMzDvZftXS9dDZN2ZGgAdzSFyFWYU9w:Ql8lMz7AdDZNgAkyFWYUO
MD5:	FFE848E92E351C030B784FBAF32972A7
SHA1:	2F443CDF2D5125D62357D7C84FA4FC8173E8B65D
SHA-256:	F6CBE31747C16C069D861A8ED01B15186EAEE8C381F74CA1712087811C39F4D4
SHA-512:	C49875FA07E185D9247F89B502964FDA00C442C3C63D2CB9BCDAF7AA928E79C5E4E8BF770F3F4E646301ED403AFF8A70A97644D87D9BF8EBFB7D8626AD8E8784
Malicious:	false
URL:	https://pagead2.googlesyndication.com/pagead/js/r20231207/r20110914/abg_lite.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=ca(this);function u(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function da(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var ea="function"==typeof Obj

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	471
Entropy (8bit):	5.022284930450752
Encrypted:	false
SSDEEP:	12:YsfXGpLDltUXGpLDlttQXGpLDltoyHwHPjrHdMqY:YsfGdltsGdlttIGdltoUyPjTuqY
MD5:	ED5E0CC93637E936CF4A4A1D2C70CD21
SHA1:	75655A53E44ED1CEB010A6ABE0669FD38180A3B5
SHA-256:	46BF2987C83E22BD6BB782658762840E43C3389176AB927FF6DA4029F567A7A7
SHA-512:	053D4911BEB1B3518B49D47D3F7A5F7F91A458DA26C3AEA00121225BBEAAA8F2CB0E74FECA7ADB6D6A0EBA38D5C631E273B11BBED3E2A625128F4517948484D9
Malicious:	false
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"propertyId\":\"44\",\"vendorId\":\"liveRamp\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"pubcommon\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"id5\",\"sourceId\":\"600\"}]","3psamplerate":5}

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.6064889911285665
Encrypted:	false
SSDEEP:	3:Inq1r91DtCkuhwinPA6iyPwfnDKthxRIK2YY:7DtePRiowS3ul1
MD5:	338020577AC23C331AC03A7C328031D9
SHA1:	8EEA07AA8673A4B259686F7F39485FD4D6736AAB
SHA-256:	DEBB32DF6FE13E5640F68F07CE7330BF79C3073BD39D499F55F707C7FA7F7422
SHA-512:	5E1485D824524D386D23E2F5AA86370991F9C3B6CBBF3096CF09D8F4ADD5EF93E12CC7E790E3B01EEF1E3E27B92FB2A2E843AD731DED8B7542016AB024A5C87F
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTA5LjAuNTQxNC4xMjASLAmfkUgpwFVq1hIFDTE9lDASBQ2jG53KEgUNeG8SGRIFDQ5LEYESBQ2BejQQEhAJf6i8fNGwRKgSBQ27V1Zq?alt=proto
Preview:	Ci0KBw0xPZQwGgAKBw2jG53KGgAKBw14bxIZGgAKBw0OSxGBGgAKBw2BejQQGgAKCQoHDbtXVmoaAA==

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14061
Entropy (8bit):	5.6096980977443165
Encrypted:	false
SSDEEP:	192:o/y/XMYmiG9Ir5zEwTNRhiZqxyHFU1/s3jZi5aTAGoEbIqehlZN+yc4:hncpIPkCT
MD5:	2371135568EEF24255D4BFF01EC173E9
SHA1:	70AD97570DF72685D5F947395A4B95B230B7B1E6
SHA-256:	AADE7746342F608807B7EB107059C842FE200E1FF09E146DB822250055CECAED
SHA-512:	D557E663F1ED55445C4E212D3F863A432819541E44F1FBD4E36C7A1DFD85B8A44E25F4DBA3329F57C3424EDEA5011028278A0DDD49EF1A25093543021072A5E6
Malicious:	false
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0964-0965, U+0980-09FE, U+1CF7, U+1CFA, U+200C-200D, U+20B9, U+25CC;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPj8UvaYr.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 712x700, components 3
Category:	downloaded
Size (bytes):	29435
Entropy (8bit):	7.524079200212167
Encrypted:	false
SSDEEP:	384:ajPHWyoUWAATE9BEgjsGwp/o7X63D+B5aCA2HVx/bCaz7fbMVxUM7Ikol:aADAATEDcqQqZb1x/bLHfUpbol
MD5:	A26F26237B19EA7DC42C45116F173B44
SHA1:	9F292A56291495BFC19E3C1D0793EC905C22EA21
SHA-256:	D11DB99CC4001BF6EF03F1CFC11E9EEE14F82869BDE16BF14A289EE01AE4070A
SHA-512:	6F1B56DB394EDDA9EE8D3D5F41D91D79D5CF1AA78B7005465D159CD60F794D9F444ED6EBED3E841537CEE3A1342ADF5FEF981E4FE15DC5E8A4BBB72EC677C1F2
Malicious:	false
URL:	https://encrypted-tbn3.gstatic.com/shopping?q=tbn:ANd9GcTvf-020rXPUCJB74XXEOSFqDo0yRgRj_gQTKEHxOhMhQt6AwBTw-07jdbh-fo&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777..........."........................................T........................!.1A.."Qa.2q..B......#R.Ub.....$3.6CSrt...4Ecs....&DTe...5............................."......................1.!A2Q."aB............?.. .........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	980
Entropy (8bit):	5.078247516944294
Encrypted:	false
SSDEEP:	24:fg/dN1APOgsMqvL8X7Tn8h3msh38VyujBXrsA:fq1PL8X8pjp8M4BXr3
MD5:	4A3737F27E75FD7FF4086B0AE781D43A
SHA1:	A786D3B06860CC0CF75FC489022832363F909A45
SHA-256:	687A44DED2AFD0FFD0E142762DCDF4E440BA81CBB1A688EAA25035E271C0C55E
SHA-512:	52FB14932AA410CA419381057CC6F0FD510CEFB17F575DDF42322B01AD781C87CD43DB43C6E5A963E57238725B353540E60B8B8F631FF580795AE87594F7F68F
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/plugins/wp-table-reloaded/css/plugin.css?ver=1.9.4
Preview:	/************************************************.. This CSS file belongs to WP-Table Reloaded! .. DO NOT make any changes here, add them to the .. "Custom CSS" textarea in the "Plugin Options"! ..************************************************/.....wp-table-reloaded {...border-collapse: separate;...border-spacing: 1px;...background-color: #CDCDCD;...margin: 10px 0px 15px 0px;...font-size: 8pt;...width: 100%;...text-align: left;..}...wp-table-reloaded th {...background-color: #E6EEEE;...border: 1px solid #FFFFFF;...padding: 4px;...color: #3D3D3D!important;..}...wp-table-reloaded td {...color: #3D3D3D;...padding: 4px;...background-color: #FFFFFF;...vertical-align: top;..}...wp-table-reloaded .even td {...background-color: #FFFFFF;..}...wp-table-reloaded .odd td {...background-color: #F0F0F6;..}...wp-table-reloaded .row-hover tr:hover td {...background-color: #D0D0D6!important;..}...wp-table-reloaded-table-description {...clear: both;...display: block;..}

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	130
Entropy (8bit):	5.56980560120708
Encrypted:	false
SSDEEP:	3:YW/l2kuCIOkvnPpRRQdY//VX7TqyAiFXXw9Gcp5lPC:YWNQZvB3QdIlvA2nw9FH6
MD5:	60B432651CF1CF6EBC7BFC54B683C18E
SHA1:	E52953549189077DC6693E592B1E2AD8AB1E8017
SHA-256:	E75F6C706398581019B526EA5D2C36A00152B9E45048EF94409708A0F53A8AF5
SHA-512:	75A76BB4203D6A4A4F849E97C3C3E4CEFE806B1373C0E9EA1A09B146797558BE63286D55FE64769EAA56A1D6C6EEEFF9AFADD93C5F5BDC6B91D5F50E6823D4A7
Malicious:	false
URL:	https://pdmp.profiles.tagger.opecloud.com/v1/targeting?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&fpid=223e362f-211b-485a-8f8e-b769f2bcebb9&tenant=b4
Preview:	{"s":"wSSR1UxR31SFpCdQfuBME+hr2LvqJBIKzdmx1fmG4GdVXg==","t":"0zgJyRXFtay9GeA9da4DEdqy6W/ARUWzbikU/Ccy4xQ9uQ==","kid":2,"ttl_s":66}

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55037
Entropy (8bit):	4.675517205957966
Encrypted:	false
SSDEEP:	768:h9+f1T857kDbwj2iHwbJYDpt57ro2NCu3q/EuNP3MN35YJGQ7HlrFMH:hOBk8bwj9gYD5dQqq8utO3nQ7FO
MD5:	AA5A8F95979D04A0AF755030917B5AC7
SHA1:	451415F6589AB25C84EFA7AC1B54AEB11B8AA21A
SHA-256:	188C37B15CC527AA4B8E081D6121F4808EB544F22D3537B7BDFD8504D7619B98
SHA-512:	AEFFD60E5B6A2A11F41B5EA48C5E2F7AE510865340582277FFE2B4597F5A85D6A467799AC05CF8729E5782E15453FC50A01DA3F7748B98AB350D0F24C6BC1236
Malicious:	false
Preview:	{"w3pr0g":{"1b83mdc":{"b":"bpjlds"},"kl6lmo":{"b":"bpjlds"},"1k3qmm8":{"b":"bpjlds"},"2twl4w":{"b":"bpjlds"},"12cgm4g":{"b":"bpjlds"},"voqcxs":{"b":"1b83mdc"},"1v7adxc":{"b":"1b83mdc"},"dxgcg0":{"b":"kl6lmo"},"1dg0dfk":{"b":"1k3qmm8"},"mt3cow":{"b":"1k3qmm8"},"1mbndog":{"b":"2twl4w"},"51tc74":{"b":"12cgm4g"},"14kdd6o":{"b":"12cgm4g"},"r8wutc":{"b":"voqcxs"},"1qrgvsw":{"b":"1v7adxc"},"9hmubk":{"b":"1v7adxc"},"1906vb4":{"b":"dxgcg0"},"id9ukg":{"b":"1dg0dfk"},"1hvtvk0":{"b":"1dg0dfk"},"lzu2o":{"b":"mt3cow"},"104jv28":{"b":"1mbndog"},"z0lhj4":{"b":"51tc74"},"1yj5iio":{"b":"51tc74"},"h9bh1c":{"b":"14kdd6o"},"1grvi0w":{"b":"r8wutc"},"q4yha8":{"b":"r8wutc"},"1pnii9s":{"b":"1qrgvsw"},"8dogsg":{"b":"9hmubk"},"17w8hs0":{"b":"9hmubk"},"ukrzeo":{"b":"1906vb4"},"1u3c0e8":{"b":"id9ukg"},"cthyww":{"b":"id9ukg"},"1cc1zwg":{"b":"1hvtvk0"},"lp4z5s":{"b":"lzu2o"},"1l7p05c":{"b":"lzu2o"},"3xuyo0":{"b":"104jv28"},"13geznk":{"b":"z0lhj4"},"wsoqgw":{"b":"z0lhj4"},"1wb8rgg":{"b":"1yj5iio"},"f1epz4":{"b":"h9bh

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65010)
Category:	downloaded
Size (bytes):	200642
Entropy (8bit):	5.250259947825165
Encrypted:	false
SSDEEP:	3072:i1BDOwHS4hA/4V2K73J1dban6MXC5c4uGWdx:aBDOwHS4hA/4V1JnG6QC5bcx
MD5:	CD37A35902975F02C1A4E5624C30EEF9
SHA1:	97160ED87A5217305060FA31FED20A6E64F61302
SHA-256:	C6077711CE3174050CCEBE6559EB5F0E251942C2CAD21900D1C3EF316065565B
SHA-512:	E664D373D3959367590EB1A1FADA76899B9E34B14ABB9A3714AE8A4E0B26B42A9F51A31B9B23631B03A810C4C673C355374552952E523E7624EACF020D4E9A44
Malicious:	false
URL:	https://cdn.ampproject.org/rtv/012310301456000/amp4ads-v0.mjs
Preview:	self.AMP_CONFIG={"v":"012310301456000","type":"production","allow-doc-opt-in":["amp-next-page"],"allow-url-opt-in":[],"canary":0,"a4aProfilingRate":0.01,"doubleclickSraExp":0.01,"doubleclickSraReportExcludedBlock":0.1,"flexAdSlots":0.05,"flexible-bitrate":0.1,"ios-fixed-no-transfer":0,"story-ad-placements":0.01,"story-disable-animations-first-page":1,"story-load-inactive-outside-viewport":1,"amp-sticky-ad-to-amp-ad-v4":0,"story-video-cache-apply-audio":0,"amp-story-subscriptions":1,"esm":1};/AMP_CONFIG/;.(()=>{var t,i=class{constructor(){this.G=new e}abort(){if(!this.G.K&&(this.G.K=!0,this.G.Y)){const t={"type":"abort","bubbles":!1,"cancelable":!1,"target":this.G,"currentTarget":this.G};this.G.Y(t)}}get signal(){return this.G}},e=class{constructor(){this.K=!1,this.Y=null}get aborted(){return this.K}get onabort(){return this.Y}set onabort(t){this.Y=t}};function s(){return t\|\|(t=Promise.resolve(void 0))}var n=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.rej

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	295
Entropy (8bit):	6.975307958372994
Encrypted:	false
SSDEEP:	6:6v/lhPLOzLMMDaUMir+kRaAotDyhKmqcw4tGS3Q4wu4Dy+lbp:6v/7DTka4r+kRadA4cw3S3Q4n4Dr
MD5:	D848A2953307AA510BDAD31F5BF84671
SHA1:	E9D6D8DAA9255F99E4E778FF4C4B47806BDB18C1
SHA-256:	7FD59024B6CA83F11F7A3448EC148309A13B705725716DF134F699E60A96EB1B
SHA-512:	338B5E0E93084FE0BE5A46E437AD6E7E3CD600444B26A62CD2908C01409D739FFDCD8C3DF5C4C948BE59C93866B5DEF5C4759636F149377385BC59F7C7684B3D
Malicious:	false
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/icon.png
Preview:	.PNG........IHDR.............kFI.....IDAT8.c8.....f.t.W(.tv....-;.....?'..Y_:X..n.s..a....X.....e.I...4...S.E......,.>...3oh`1.<L.&g..9 -..a.9`.X.,=.G..a..,D.W..Tv......-..rq;.d.aA..bt}. ....Y.r\......1.Q...)..f ....q%:.-.....Z..u...o.>...,1...qZ.K..8...^..Z ..J...2..^.......IEND.B`.

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2973)
Category:	downloaded
Size (bytes):	91013
Entropy (8bit):	5.482778754777459
Encrypted:	false
SSDEEP:	1536:FN+oUKGvIVf0Ux4axlUuGr2cdwXEuPgtAorVCW4h:JVGxaxGJhuPgtAor0xh
MD5:	0BD00D035485979BC8798F6597913442
SHA1:	FB97B3BA6A6F84C9150822F973AAD62B14D506D9
SHA-256:	38EB0379C855F10A0E69073AF6B54582216FA37B7E2B1563A1246BBF1EF49642
SHA-512:	AC205524B037EC55181F082D48EC9020FBDB596151177400A003B5602946F73FD24B8778D90B9BBB45CEC3DB2544E0C59BB0E483A043005978BAE270F4F357ED
Malicious:	false
URL:	https://pagead2.googlesyndication.com/pagead/js/dv3.js
Preview:	(function(stc){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,h){this.Pb=f;ba(this,"description",{configurable:!0,writable:!0,value:h})};b.prototype.toString=function(){return this.Pb};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 712x700, components 3
Category:	dropped
Size (bytes):	29435
Entropy (8bit):	7.524079200212167
Encrypted:	false
SSDEEP:	384:ajPHWyoUWAATE9BEgjsGwp/o7X63D+B5aCA2HVx/bCaz7fbMVxUM7Ikol:aADAATEDcqQqZb1x/bLHfUpbol
MD5:	A26F26237B19EA7DC42C45116F173B44
SHA1:	9F292A56291495BFC19E3C1D0793EC905C22EA21
SHA-256:	D11DB99CC4001BF6EF03F1CFC11E9EEE14F82869BDE16BF14A289EE01AE4070A
SHA-512:	6F1B56DB394EDDA9EE8D3D5F41D91D79D5CF1AA78B7005465D159CD60F794D9F444ED6EBED3E841537CEE3A1342ADF5FEF981E4FE15DC5E8A4BBB72EC677C1F2
Malicious:	false
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777..........."........................................T........................!.1A.."Qa.2q..B......#R.Ub.....$3.6CSrt...4Ecs....&DTe...5............................."......................1.!A2Q."aB............?.. .........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (53556)
Category:	downloaded
Size (bytes):	53668
Entropy (8bit):	5.273093766678164
Encrypted:	false
SSDEEP:	384:X5p/DErqvhzqGdpkJkr3M4v7NlN1J6+Hl1K67ij8xvxfXBYV3G4ooP5uHlWjDZ0:X5hoqMwkJkQ43fjl8Dm
MD5:	7549D51888F0142460AC70BE66758BC9
SHA1:	DE3D36D7B56310E9AE3D2D40B6333E3E711C9C28
SHA-256:	ECB740996CE05E9B7823C9690564A0D7B3840BECAD640D37E929CD4F4EE1CDF4
SHA-512:	DF70115AC548E37DA6226AE8A377C03DAB20DCC8A3EA54031C1DF4D65C0A1F0326942F6DB62BE5A692E7A4009455AD4BD2BB86C5E517C560276F1B1ED272F6A4
Malicious:	false
URL:	https://cti.w55c.net/ct/cms-2c-rubicon.html
Preview:	<html>.<head>.<meta http-equiv='Content-Type' content='text/html;charset=utf-8'>.</head>.<body>.<script type="text/javascript">!function s(i,c,u){function a(t,e){if(!c[t]){if(!i[t]){var n="function"==typeof require&&require;if(!e&&n)return n(t,!0);if(d)return d(t,!0);var r=new Error("Cannot find module '"+t+"'");throw r.code="MODULE_NOT_FOUND",r}var o=c[t]={exports:{}};i[t][0].call(o.exports,function(e){return a(i[t][1][e]\|\|e)},o,o.exports,s,i,c,u)}return c[t].exports}for(var d="function"==typeof require&&require,e=0;e<u.length;e++)a(u[e]);return a}({1:[function(e,t,n){"use strict";var s=e("@iabtcf/core"),i=function(e){var t=RegExp("[\\?&]"+e+"=([^&#]*)").exec(window.location.href);return null===t?"":t[1]},c=function(e){var t=document.createElement("script");t.type="text/javascript",t.src=e,document.body.insertBefore(t,document.body.firstChild)};t.exports=function(e){var t,n=i("gdpr_consent"),r=i("gdpr");if(r&&0!=r){if(r&&1==r&&n){var o=s.TCString.decode(n);(t=o)&&2===t.version&&t.vend

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1545), with no line terminators
Category:	downloaded
Size (bytes):	1545
Entropy (8bit):	5.511298427828332
Encrypted:	false
SSDEEP:	24:2uetHGuadP1GYcT1nG2Q1QX0q/Fyx3yVAuN9dIJIta6OfJCYh4v/HuIugHINY:2uetUt+ThG28Qkuyx3+3N7I1fQYyH
MD5:	BD94052D0D4BF1A52F611F86148B538F
SHA1:	C5E89D7F893E424D9FC9948302DF952812180748
SHA-256:	02829CD372D9098C5A54E96BCDFF04A7FAF26EE992E821AD0E68BD4C56680406
SHA-512:	7F20B9674C6C6B543080D2649467BB436881EA702149259A0313C92378DB1964D2A22F6B95B4D0DFC0D408B4A30FC96F747DC6B830AC32EE32833E6D48E572A1
Malicious:	false
URL:	https://tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=1035&ttfrms=9&brid=3&brver=109.0.0.0&bridua=3&bds=1&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTau%3E2E93%3D%408%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTau%3E2E93%3D%408%5D4%40%3ETar9EEADTbpTauTaueh7224gdg4d5c55%6076d%60e45_b2f77d2c%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=4461&ddur=1633&uid=1702413636368578&jsCallback=dvCallback_1702413636368595&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F109.0.0.0%20Safari%2F537.36&htmlmsging=1&chro=1&hist=1&winh=90&winw=728&wouh=0&wouw=0&scah=984&scaw=1280&jsver=5125&tgjsver=5125&lvvn=28&m1=15&refD=1&referrer=https%3A%2F%2F69faac858c5d4dd1fe516cd03a7ff5a4.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&sfe=1&fcifrms=17&brh=1&dvp_epl=217&noc=4&nav_pltfrm=Win32&ctx=750202&cmp=29001397&sid=5744950&plc=354148455&crt=206429218&btreg=574432668&btadsrv=doubleclick&adsrv=1&advid=5677814&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=70162804.92411837&ee_dp_sukv=70162804.92411837&dvp_tukv=176597111432.28714&ee_dp_tukv=176597111432.28714&dvp_strhd=0.29999999998835847&dvpx_strhd=0.29999999998835847&dvp_tuid=1042585919468&jurtd=2106493577
Preview:	try{var dv_win = window._dv_win \|\| window.parent._dv_win; dv_win['dvCallback_1702413636368595']($dv,window,'4e1948f376ff45ba9efe0c1f938586ed','tpsc-ue1.doubleverify.com',{"ee":{"cvs":{"size":60,"dur":1000,"cons":1}}});}catch(e){try{var image=window.document.createElement('img');image.src=('https://tps.doubleverify.com/visit.jpg'\|\|(window.location.protocol+'//tps30.doubleverify.com/visit.jpg'))+'?ctx=818052&cmp=1619415&dvtagver=6.1.src&dvp_cbError='+encodeURIComponent(e.message)}catch(e){}}var dvObj=$dv;var impId='4e1948f376ff45ba9efe0c1f938586ed';var dup='';dvObj.pubSub.subscribe('ImpressionServed',impId,'ResearchIPv6FromAkamai',function(){ var tagObj = dvObj.tags[impId]; var serverName = tagObj['ServerPublicDns'].substr(0, tagObj['ServerPublicDns'].indexOf('.')); var tpsServerUrl = 'https://cdn.doubleverify.com/redirect/?host=' + serverName + '&param=akipv6&impid=' + impId + '&dup=' + dup + '&eoid=1000'; dvObj.domUtilities.addImage(tpsServerUrl, null, true);});$dv.tags[$uid].s

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1348
Entropy (8bit):	7.75162634176018
Encrypted:	false
SSDEEP:	24:P5nAiUAdIQc35ELXfx6s0AanO7687GIQBjUXE+r1Fm4PoWSQaKiKo+aMpfDM:P52cI53WcAcOebd3+ZDaKiZhcfA
MD5:	7649D38EB30703DEF05177C018F3570F
SHA1:	622C0957F3D2591E75C005A3BF18F9512A2594C8
SHA-256:	DB09AD7662A85AA1B31C479ED2F57A936091E3D56353E4FE759A0DB449A7EA7A
SHA-512:	32790EE04D5D07DB1585AA817BB027EF5E7595279E211B90DCE56A1AD0100523CE0051D4A0BAA077CCF2A64170A701F0D6F6B7C4F1D08621F47F7E193E794D84
Malicious:	false
Preview:	.PNG........IHDR...P...P............pHYs..........+......IDATx..=n.1......".....$E....t..).".p.+8eZ..WHc.i.FP!.s..0.....\>..\.....>.o.4.Z.BW..s,..~...2.x.....p.......0..[...-s..\.so9..Q......\|...........U.RV....T0EC..0...d.Y......1....O>M.D!..wj(.@.....1...`bFQu.U.1..1....bNx@.Yx.b.<Q...........X`..O$.o....g........+sFg...H.'.`0D..LBL...#/..Lx..WK...V.Y.X..T8...i$..].]..d$..... #.P.>H..a.,..3...gX,.....U..1.J..[...<QI.[..&<Q)....'*..a<..(....:..........b.........#<.&.Z....H.b-@-..%..';..J.c.M.J..E]..AR6..g.Xg........w......".-q..m.D_..gaM..U.X..X....y=....W..lw.A..A..x,....a0~..}T0..x .;.}g..g=./@..cjg.~...pc..\|..}h.=S..P.%(.Q..B...b..Y.V".......Al...A........G..mw..V......o..z.1.......@.}V..R..U....k..xVjL..x....R ...'...;.{Q..jn..CP....3Uvjg\|.<.....G..j.....9...#.f5..E,...x".....9c.X7%.U.'...]9.....<.6u....XX..<......4.:E...T.'...v..a...+.lw.0...).....en.T.k..z.A.6g..O.i.....=...x....%y".C.k.o&..D.X.'R7N3f....S;.L..-..3R.D../...&9

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10993), with no line terminators
Category:	downloaded
Size (bytes):	10993
Entropy (8bit):	5.329698713584213
Encrypted:	false
SSDEEP:	192:HqjHLmrASkfm5JuEqqr9+rj6+trun1WDcXSjHAOiObmaQy+WhyJajURg:HkqrA1fm5Juzw9+rj6+Yn1WDcXS70WmS
MD5:	2113A79CB1E3A15B40FAD46D3723D6D4
SHA1:	89D75B63626F80968B78F421C68B39252A046B14
SHA-256:	4115A56DC9EB15A1E1773758DB804FCAF25207EE3FCD23A1DCC1C951F4C776E5
SHA-512:	7B2D5394F34601C5645818608A64CA4B80BA259511A1672C5E28BAC9BBB4C1573FA3D04622303A0CD333F27451008CAAC84ED0A54F7D01FD7B27E10ED868F7D8
Malicious:	false
URL:	https://scripts.mediavine.com/tags/675/e38ca61cbf7ddc99b125.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[675],{5182:(e,t,i)=>{i.d(t,{Dn:()=>s});var s=(e=>(e["3gpp"]="video/3gpp",e["3gpp2"]="video/3gpp2",e.flash="application/x-shockwave-flash",e.flv="video/x-flv",e.javascript="application/javascript",e.m4v="video/x-m4v",e.mp4="video/mp4",e.mpeg="video/mpeg",e.ogg="video/ogg",e.quicktime="video/quicktime",e.webm="video/webm",e.wmv="video/x-ms-wmv",e))(s\|\|{})},7666:(e,t,i)=>{i.d(t,{F:()=>n});var s=i(3528);const r=new s.Yd(s.in.debug);function n(e,t,i){let s=e.parentElement,n=!1;for(;s;){for(const o in t){const a=t[o];if(i){const t=getComputedStyle(s)[o];t!==a&&(r.debug(`MEDIAVINE OVERRIDE ANCESTOR REPORT:\n \nModifying ancestor element from '${o}: ${t}' to '${o}: ${a}'\n \nBase Element`,e,"\nAncestor Modified: ",s),n=!0)}s.style.setProperty(o,a,"important")}s=s.parentElement}i&&!n&&r.debug("MEDIAVINE OVERRIDE ANCESTOR REPORT: No ancestors of base element")}},3190:(e,t,i)=>{i.d(t,{O:()=>s});class s

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=157108&us_privacy=1---
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=962260ae-2017-4479-84d2-c2601faa687e
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.0021975300504877
Encrypted:	false
SSDEEP:	3:CUO/RD/wlHrfx/n:oD2/n
MD5:	ED280A0EA3CC38F3CBBC747ACFBEF47D
SHA1:	6BDCB32EE75E957A5085C010F4DFD0C716BFDADC
SHA-256:	8F69E10876805B747A3AD08A818D46AC7E731B1AF417EA6E259D9B6B7DEB65C5
SHA-512:	4248E293BB759C3AC0EA71F545E10E85D0C3C7F1237CE8B18C6A3FD00499A11BDC0252C938BE87359FA673C8E7A83C7CC6FC5D12718A68844C2615E5DCA3527B
Malicious:	false
URL:	https://tr.blismedia.com/v1/dpusync/6?uid=LQ2T1KDU-17-IBG6
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 618x349, components 3
Category:	downloaded
Size (bytes):	16591
Entropy (8bit):	7.848571616137034
Encrypted:	false
SSDEEP:	192:d1bv+SP5rQBeMGMcoqgpnZ4qAzdJeDfSitkr/ravhjjQDfIXyjZlIp/qqFah:dFUBe8qgpnOqSdJUfSpavhoFZOpLO
MD5:	9EED191CC0FCC8A9470BA7D4C537A66F
SHA1:	F57FDFB6D0BBEA7A3BF073DD7C00D5CF5F2FD1E0
SHA-256:	1142424D8711F5B1E8F9183013D6DEEA278BEABD3966E3FE472676CE7926F537
SHA-512:	0BBB2DF8E0C312852B672F5C3740426C04E5EC2BED9AA941613A8AC23694931949FF7C45BE08C399F9562DBA8BD425751D224AB82498A295662740C25A5856D8
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcRV-bhKAf4jR8G1Pt4YEkthNwidmpY30XvPwNmraHscL4F3o9-oCgcJbklyRNw&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......].j.."........................................L..........................!1A."Qaq2......#..BRbr.$3C...5S...%cds..4t....................................(........................!1A"2Q.3Baq#.R............?...................H.I,...l.......[.wiG...4:...[.MJk...)./...w.U.J...I.R....9._....6.o...v.Q..age.Z.......m......agCL...~o...~-.o...;E.$..6._..Z...Wm.......).....y..S.z.....v)..0.5.-..e.J....Tp......\.+..k%..-f.o%Ue..H......\.T.9s(...eF.s.....q.\..E..nt.......t.....t.....,\\N.....c...x%....0..1\...4m.V}....-3.U+_.f.B.U.;..4.Ex.........i(.o....:4!F.Q.W4..P.e....K.+.g.&.....F...C.a9r...e.D[.......1%,a.4.....z...,v.].u^(.Em?W.^oX.}4:..C~....q...zp1.kB.iP..t..B){..V....,.G?yg*.w[x\|b.H.^..~'..,z.\t..q.G.41."...FL..........H..M..N..W.YR..nK.I.:.SN.T..a].s3.o%...y!.r.......i.6...t..=0Z%.....g).

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
URL:	https://a.tribalfusion.com/i.match?p=b10&u={rubicon_user_token}&redirect=https%3A//pixel.rubiconproject.com/tap.php%3Fv%3D111756%26nid%3D3856%26put%3D%24TF_USER_ID_ENC%24%26expires%3D180
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50064)
Category:	downloaded
Size (bytes):	51274
Entropy (8bit):	5.716918913570695
Encrypted:	false
SSDEEP:	768:jDgg5uTpDSx2u1AVrFl8jqSRFZBeAUjOIqeQ9E3T77UHL6+RmNmWvAVO1:jD6Sx2u1A98HRTQvOEQ9EreRN4
MD5:	F29AB77C05E187E335ADE16F07A89028
SHA1:	32EA2C8C311ADD7DF0BCE891356963C3520522DF
SHA-256:	6BF1DA233645C84549609F619670D4D3E946AC61D516FD53E597C10AD100608A
SHA-512:	23261272DCEDB2700E2AA99B625048B3EF3B78D862BE3932A6B248AA036352FF0981F8544574945040C0EAA9D10491BF6A121169154238952C6FE689CC04E8CD
Malicious:	false
URL:	https://pagead2.googlesyndication.com/bg/a_HaIzZFyEVJYJ9hlnDU0-lGrGHVFv1T5ZfBCtEAYIo.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function M(I){return I}var z=function(I,S,p,K,D,m,w,x,r,X,Q,h){for(Q=(h=91,61);;)try{if(75==h)break;else if(h==p)h=x&&x.createPolicy?70:84;else if(h==K)h=Z.console?I:S;else if(91==h)r=w,x=Z.trustedTypes,h=p;else if(89==h)Q=61,h=K;else{if(h==S)return Q=61,r;if(70==h)Q=12,r=x.createPolicy(m,{createHTML:F,createScript:F,createScriptURL:F}),h=S;else{if(84==h)return r;h==I&&(Z.console[D](X.message),h=S)}}}catch(H){if(61==Q)throw H;12==Q&&(X=H,h=89)}},F=function(I){return M.call(this,I)},Z=this\|\|self;(0,eval)(function(I,S){return(S=z(90,47,65,25,"error","bg",null))&&1===I.eval(S.createScript("1"))?function(p){return S.createScript(p)}:function(p){return""+p}}(Z)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2372
Entropy (8bit):	7.852410997517776
Encrypted:	false
SSDEEP:	48:10kRc8U2Jh319+fQsn11JNozORASFbirO/Gf6oZ:11c32J3Ap7ozUASFbieE
MD5:	A8EADB418043310D39EC513E28745936
SHA1:	E207EE20C74D8BE5FC72F7AFD7C1F4CCC7ADCF69
SHA-256:	E5A684C395330E6CC8C64457E1BA945012E94E095352E41ADCB88BBDBE263EBB
SHA-512:	AC83728CF80E74FD73C49AF428629392C51CD9DE99CF0C385BFB9B7351967888EBD033B100501CBE49CCC74883506A7D5CC4744D4428C3A114AAEE7CF1FED123
Malicious:	false
Preview:	.PNG........IHDR...d...d.....p.T....IDATx..{..U....~..b" ....M%.P@....S`RF..0.^XXL.j...3G.AS..n.h.DH4]..)-...2...C7i...v..x..{..~.^...y~3..<....9.s.y...a..a..a..a..a..a..a..a..a..a..a..a..a...?!.^+..B.#...Nu.........hA4{..D..s.uHS...1.DC..}h.....{.v.wG.W...t.....Usy...}......v.o.........^\ZsWm.......R...Vv...:WMZ.da..#.7/.^w.$...$o\|mI....T.k.....z(.m..U... ....\...8.\|#.o...s`.....>Z?.zk.Y..s./3....@.<..uGw...T...[.K.....5....+.....h(.....&..$.......aS...y./gJ/f....<A....n.K.D.[.K.n.u.0.\|V..C:#.......\|Fe.......E`..6........&..`...x....{..8...*...\|00..8..X.<...i.........\|.......<.P...2p....-.R<...)T@TS..@u.E95....~.yIh............7.].#.c^.{............4.\.Wz.\. ...Zf...E..-.m@.O...W`4.......^...Vh;.>..3.:.4.V.....k.b`1.1..nn...LU..8+..(W./.p.p..."/.xd........=.>T.h..(.V.....%^.o.. sY.t.L..\.r.e=...>..qH.8&./.}D:.b.z{iwk..oj.....T`....K0j.G....R.E..........".....y..T..<.\|....y....k.:/o......j.....>..32....Py..\|...lsK..J.[...E..m5_Yz.^Q4{...KE..

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
URL:	https://s0.2mdn.net/dot.gif?gdpr=0
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssJwe4CGrdkMGP4x6ibTfY9ebH0M_RIs4YZKp9rqxeHGTnceFf2IywnmSwgtz513_B_vlfqAF6OjjrREZcfVP6NLHTiI6fzNa3VBT7bFUKHZoxoPpplgfQst65P8cBOXra5tl6fCA3owGYCoOUxEcZx7_jL99jaD9jqK5CWONrTHzIMmRNs49dj&sai=AMfl-YQPBL-njiVDIpd_4ELDeiPcxZd2tTtR-ggV2laYZnysPb0u_6jjnVqoWn3w457_gHWjYp8IRLmf7YFoPT42-F8OfZf5Uipn8AbGOluRR5Xfa66UXSJwAQjhiQU7KyAwz0CCFvt7BlqNGYTxG4Y&sig=Cg0ArKJSzI63N3JlssfiEAE&cid=CAQSTQAvHhf_mjCBU0M1TzX4F2zK-w0okgjzCwlANm37xWDdtS3TRLK_5C_SO-hb_uPL0IQdw5N7-RdpdkfZ7zsQ9LSSCgDZ2dqABI_lwqrPGAE&id=ampim&o=0,0&d=970,90&ss=1280,1024&bs=1280,913&mcvt=1899&mtos=0,0,1899,1899,1899&tos=0,0,1899,0,0&tfs=447&tls=2346&g=100&h=100&tt=2346&r=v&avms=ampa&uap=Windows&uapv=0.1.0&uaa=x86&uam=&uafv=109.0.5414.120&uab=64&uafvl=%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.7937473711587355
Encrypted:	false
SSDEEP:	3:YxhAjDPGgInWDcEWXpACNN7kYCiNQDxPBOzfWX4n:YnQugInirWXpAEkYCiNQtPefWI
MD5:	9A3EB0B8F405BD39C028BCD05DB2FA7D
SHA1:	35D7FB79BBFEF62A80815387EC0257F11A6B5DCE
SHA-256:	24B33B6F514634D699BAB4EA5BC887BF3D1ADC47450B735CE12B1A00B2BDFF8F
SHA-512:	726D907DC200FB3FDA75C425D426D5ED1D47A5B467A02A34EE48A60AA7985A00C5AB42318A1665CA3AE6B318FEA73A5F8B89E1F5588699711A7BBB9B595B04CF
Malicious:	false
URL:	https://match.adsrvr.org/track/rid?ttd_pid=sne7dew&fmt=json
Preview:	{"TDID":"3311a7f3-c44c-4d38-8196-dca4c2b0f8ec","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2023-12-12T20:38:15"}

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	92957
Entropy (8bit):	5.922593404620695
Encrypted:	false
SSDEEP:	1536:7j+UE5t9Tu5m0NOa0b9RksoXCkPF/fZ78h3HnAxxs/AfSfNVFV72V79cc7:7rEJDpk5YeCAfSfL7M9
MD5:	B5022E35D389EA50C851B869D7BB4D7C
SHA1:	63E06FD13A657BE96EFB3FEEE30611F501A3E433
SHA-256:	EC03EDB1742D1AA15722F2533FCD025263F96A1D0E21BE684039F5D0BE74D951
SHA-512:	B5FDF4724EBC362ABCF81EBD70964902F20BC4EB74841230861AECB8AB06CA071A3064E5A051567AE2F36AF9DF4569805F8B1E76584C9908A941BBF5178562D5
Malicious:	false
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-C7998JM9aNqJOolFuxnRYWzuUuzZguSE6R23frLqOKQQsUyac4y0Pcyb_20svwssHREl4rQHIERI2pTJclkQj1uKHZABZsKSuuBUuetHv5L_7Ise2AbA3l3xQjDAUpdwoZo3WcZZDitgTUJUedKYvXNEFMwDI-uJzKbCdDz84LF0tbIrs&dbm_d=AKAmf-AbZRjP17iXrZ_9045foAvd0JhTe8JK05KqzKqGi1fHRRAGd-vIAzQPR8hFJplOTuYnL8wcyQTk3avIZS-XCPih84xOalk46v5rkAmFHUndMUfaVWTf5ndgJA9hiC7neMj4WuO_oPum922DKMpN-879DT0qwzjDWvb1ykSM8apuBEk-GCy9x78gEjSpci5ZJ3DvN3vU_q_aEchKFtqSqv0asl1TiOk1nzszf3w8UdaSovIUR92UtjRRXvYT6Mo7-oHvVDinr21ozK8y-RxJ94B9RpEzCTqLbtLuDOsAvBtQ_H2JUxYRz8vj59SH4C-5rV4j519WlDDKdMKL9hTE_Hh-LMUSCxtKaBI1otprJt112Ehnc7otHCvD7mVibVSkQCPsu1-fejavaWAe_gZS-K7xSvLp0gq-y6SuiPp1LKaahkGdLTCLy-v-hk1ul2OQZ1iQv95W5Ec_QiLNyt7tOwgxCCCOgyRhS78vy-gPFJXog-NrtayYzLDT9cQ2DKVmvuZThBEy-8DC1l5jBQgQPJI8KWUTbaQbfOpPNAjGCXv-xRS3-i43x01XvJsgMghtb3miZqSBln1bFxSRYLt-h9rHdoXHAnPWxTwpZk1gJF3ZhkyZVbLDUalwNw_gtuaF6KTOEkU3mZOrNkxHC9clgajvM9fLVCCudspH1IjuKNo9Jypq-4h7nRZWyse_tD_o_CtfRJ7SmSzvnNogJDRqjZwCD9aj0Ptvv0oUrnOQQN29wUsk-R4XYOSLIjMkIErMbWmAVMOYrmX_L52n4TW_XCKiDWsw8Z9f77rzd-rI-BBF1S4aNyJNPwhqeFai-OLuVVZfDKdTduUzSwQLFQGqbo7j9ah_W_tPdmHaw4rGat2KJSLyxnPzlgEE7va7BI1zYQQdiTzXFYUwu3pYCaJg0CoLZJSBeJsyPlLvnnDsJ9ha-muqz655I__OJ5Y736fq4UzKp3zMltAwJp_UwZV_1AvgAEbOoQFPXeVzrzjvz1e-8TgeKhsf4GgN1ctGnoDd5d90CKYxxYzI-99X39DhT_Yx2K0koMmF5nvK9xOrWvmdx4KRN6jQHBAGbAYFASZVD0YlBRoNAeFU6_qIBOUOYzBKxoWeCAu1aW78umYcFlLgGar_VL4IniqAvJuIfYlTVEfwq-KQYPpWJ0TF6M2Nb4_BiXv-s7_5akRwBWvmTMgJwEPuup-e6qkUkUd5rVKPu3wkWEmzHGQScTPMnGBDtxIUjjz4HMpH33bftfA4nG5KRQoKsOjbjo4IgXqj9s0WQ-AnFXke8wkWn8HBkqiyPDkR12ND71XmcXEGnu6y_2_sSqHu7yeNbILtDgSAuROpXGHNY4rA-pvVAY9A3K0V2OHeqgMRqJLlM8RGVU68Te6lXgxQWuW6iDPXYKNB-m5-tZ8fyUddVSJOpLp6lUW9QDi29R7hYaO7Vt7U_PWUXOS1wX72SkUloQM-4hNAFchjHt6eyvmyCcREWLBHDAwyWxsmg6fki9J2yH0g2Wv1UO7sz26nynyHTSPCTFDCuhb7Vq6pTLZMFg4y_-L3mGxjFzSz98FGHGJHSXk9DWkamBiwD_6bZ_HY1Ed5dcYNtxL4txwStfKt8Yl1EA2u4LConRJAunCbBl6AH93t2h-DcdtFy78dKjEbYqC9eIclAypB2sJLpRKr7XUCBg6lKTcmNErKXTTov8BcnxEkDDl0NHF6GpzPhi1REFy8sE5aMYuz1KiH1KohjTNRlHMNgShVB-_1Vc1oSCJqT_KPRPwvfbpmpSkp2VioflwMUqt89WBPxGgdchovuPMe1PaO_no79UZdzBqQVrrB0UgIO2uw_hIGZTA87nGjzKKvsi1cp5M7NdN7AJk_ARJT4Vza_2g5MabnvilawmzdTaMAWwAKHttA3YOZluCAECJID8l_s0gdzVoqVdH7U9iVGzkSulktRUVD8wgssZFPSlLlVdvsOEW_K6V-0D-PRSTnjuk432C0NVgJ03JivFuJVEKLBdQVTQrHuWeG8DerYlkhTfdyHi93KY54F9g-K9WV-k2Q9IOvbYHtQmbSwRBpI-mqcnQtJPaKhBAN3x5FWXqyiQx-wC6Lf36Jci57LZVbxrFoKdG0tTxaWsNW-E7RcrPbiGF1A27DOlVYXFhsPjDwhyGSB4LDlRK_ewtJKcIpqquc1WjIcBZVzWdaN1Zjd5xcQzdrU8FHwhCGZM6eBfZtChi-8a1nCBN7YLnN-S_scWvN7ZYI9SHtVHbfP9KsfhwakOf__924oewI0iTtVu8SuGoH_XD6n0U0enXnbQOkFPufuxfcqEzlVm4AdF8lr5REJAfgPse7ffI-n0d7jd7FzwPHKd5_ne8z4mSZs6Au1jMlMpVGvh-g7SSJd4oTzSiG-1hLWsjyHQDrcVaV4v-Hsl5OPmCOCjw8lpDnwC1TKc0aw7ZlZh65tGDAvQnG-cNQbx6YulZFyAu_43L10_bV8bZa5oxjjoCKiL3qi_9UfsdOA5tmVMeWtBz6XYxnO5HvaVKHjbYs1jJk8EDk7Ej_Z5ksK5jsfsPfNOGsHjmzYWWvA_UbwXc0Vkx9l8nu34bgLENyI77CzZ95C9kFQwBZams3htl_q5-YEuS_q5-QgdWogQobaFT5LkTLchuxHQKsJJs0OOEq8_sVVrpUf3C8pKJdaF5RCndYiuRwJ6sl6C_UvWkRoNJD1bCiHTVwsjjWf8I5sTg9Gyd2KNI75FfbyRhJ0WCtOw_2ranllLn6yKA9MqwrHgtk15qrfg3RQDLzHedS8Yap57WW3QllqKg_Rh3bMLA7kdx3X_2HrxJUECnc6tBjKpNB2o5G_p4PYo5YRGCbPkBj0NHxJdD-T14355kmz7lnc9bhtL70xbtKMOdFnXsl1gD3zeaVmeCk50eC762o0a5dTAt5bkibeNgr5OlP6CqPEL7ypX83E1JmTFkJgsTYVqlxV7KHdicPSqbSRZhLfiI0bH2K9wigZmY5Sxmb3qsbFyQLNysxwMDiKayxrgggE9wTME4jK2S8rYzU9acfHFQN_Cw9wZp-sLvhqQYEChBF3Ax8JCOgvh2r-BD8lAA1rpaCsFquLgexwVXNSWLxYQurezgO4MYcL8ZtHoSZGwpD-p1KeaELz9FzxOCNne2ehQr8PuwGeJGppcby3yeI1LNakVWnU2gGlQ40Ll7GNy1v5OHLDhQG1yenY-2gR4hFHgkyHdVGz8LggPHlK6Mg6Xku930RYZuZXC8AHwKFR2_moxAkhwfedbRb3aerQPP7YnG4pg_1bYuEX6Ekn-PIm4M9lNaIgIKyTF-iGXYOs-8u7sUiFD9szfgmxNoHYXLqXGdGxVs3mD9CjnaMyfRJukHwcAJgMTqpiLIcfJ_t17ZaVBxYf8CAVBAretkLS49cmzFzk9LSOzk5WYM71oq4jwk6R3Bj050gwMEzFA3lskaxOZVI2nBlpH3kJq4-pR8BoRDh_4TmDz2eGpNJEgq2ROm3s-A7NA&cid=CAQSKQDICaaNvq7H4thAlDd4GZ0t6NRPwugdfHyJ95QgmtivfhBQthXndRrXGAE&dv3_ver=m202309260101&rfl=https%3A%2F%2Fmathblog.com%2F&ds=l&xdt=1&iif=1&cor=3157308268147741700&adk=603004919&idt=1518&cac=0&dtd=127
Preview:	document.write('\x3cdiv id\x3d\x22ad_unit\x22\x3e\x3cscript\x3e(function() {(function(){/Copyright The Closure Library Authors.SPDX-License-Identifier: Apache-2.0/var g\x3dthis\|\|self,k\x3dfunction(a,b){var c\x3dArray.prototype.slice.call(arguments,1);return function(){var e\x3dc.slice();e.push.apply(e,arguments);return a.apply(this,e)}};var l\x3dfunction(a){a\x3da?a.toLowerCase():\x22\x22;switch(a){case \x22normal\x22:return\x22normal\x22;case \x22lightbox\x22:return\x22lightbox\x22;case \x22push_down\x22:return\x22push_down\x22}return null};function m(a,b){for(var c in a)b.call(void 0,a[c],c,a)};var n\x3d{o:\x22ad_container_id\x22,D:\x22hideObjects\x22,J:\x22mtfTop\x22,I:\x22mtfLeft\x22,N:\x22zindex\x22,u:\x22mtfDuration\x22,M:\x22wmode\x22,K:\x22preferFlash\x22,A:\x22as_kw\x22,B:\x22as_lat\x22,C:\x22as_lng\x22,F:\x22mtfIFPath\x22,v:\x22expansionMode\x22,L:\x22mtfRenderFloatInplace\x22,s:\x22debugjs\x22,G:\x22dcapp\x22,m:\x22breakoutiframe\x22,H:\x22inMobileAdSdk\x22},q\x3dfunction(

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6114), with no line terminators
Category:	downloaded
Size (bytes):	6114
Entropy (8bit):	5.834482245732402
Encrypted:	false
SSDEEP:	96:7VSCRCGEh8N27KZcTXm9KhuES87iRyrrIIkv/D1HgDJXWxFMZ8pT89xhCoZyT/iu:7VIp8s+oh03RFlpADJGMeqDoG1N99unb
MD5:	074F85714A787D3D504A7C6C428E85BD
SHA1:	2905DF85943FF7FDAAF77EF1C37FC8B4EF83E3EA
SHA-256:	60B24D5F7D4AFF44A1B404995688993A9F9D737AEEE62B649DC64CD1FA6D060F
SHA-512:	D07DB7CB4E764DC31B145CBF875D449C2133EF80D7633961EEBAD5CF1060A39C93D1B090CD28C2E667DF545176C2560DC5154CFF5DB2D4098E89E4C46C3948B0
Malicious:	false
URL:	https://scripts.mediavine.com/tags/3706/9510ecc6634ec1365b06.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[3706],{9383:(e,t,i)=>{i.d(t,{H:()=>o});var s=i(6469),n=i(5595),d=Object.getPrototypeOf,a=Reflect.get;const o=(e,t)=>class t extends e{constructor(e,t){super(e,t)}adunits(){return e=this,o=null,r=function*(){const e=yield(o=t.prototype,r=this,l="adunits",a(d(o),l,r)).call(this);var o,r,l;if(!this.model.mv_native_enabled&&!(0,n.DY)("test","nativeTestAd")&&!(0,n.DY)("test","nativeTestVideoAd"))return e;const[{buildRequestFromTemplate:M},{getTemplate:u}]=yield Promise.all([i.e(9300).then(i.bind(i,9300)),i.e(6409).then(i.bind(i,6409))]),h=u(this),c=(0,s.X)(this.model.bidRequests.native);c.map((e=>e.isNative=!0));const p=M(h);return[...e,{code:this.id,bids:c,mediaTypes:{native:p}}]},new Promise(((t,i)=>{var s=e=>{try{d(r.next(e))}catch(e){i(e)}},n=e=>{try{d(r.throw(e))}catch(e){i(e)}},d=e=>e.done?t(e.value):Promise.resolve(e.value).then(s,n);d((r=r.apply(e,o)).next())}));var e,o,r}}},3706:(e,t,i)=>{i.r(t),i.d(t,{Adhesion:()=>I

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	95668
Entropy (8bit):	5.176485452968341
Encrypted:	false
SSDEEP:	1536:Uap4/Z9c6KSWWpemzOSMngztZuVgEfpLvQmodBhXGaCZ/vhyvmh:zgZ9c6K/mzigzDuVDfpLafCRvhyvmh
MD5:	46C572E676AE35A7E6552780A4555774
SHA1:	FE3E38F5D6A229673816569E76B970A46CCBDF15
SHA-256:	AF11D973B083B879B9C6A38C96F57B6789CE1D2E53053DA5E420B0401637F5CE
SHA-512:	AADC7F7C4CB330A98D3200B725D7DE50D038D58168AFE9E49A0877B185C8C399F0110840616EAF8611382C2165E530BC92790FCCE134C44B6C3E06E0EE97B02F
Malicious:	false
URL:	https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/
Preview:	<!DOCTYPE html>.<html class="no-js" lang="en-US">.<head itemscope itemtype="http://schema.org/WebSite">..<meta charset="UTF-8">.. Always force latest IE rendering engine (even in intranet) & Chrome Frame -->.. [if IE ]>..<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">..<![endif]-->..<link rel="profile" href="https://gmpg.org/xfn/11" />... . . . <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="apple-mobile-web-app-capable" content="yes">. <meta name="apple-mobile-web-app-status-bar-style" content="black">. . <link rel="prefetch" href="https://mathblog.com">. <link rel="prerender" href="https://mathblog.com">. . <meta itemprop="name" content="MathBlog" />. <meta itemprop="url" content="https://mathblog.com" />.. <meta itemprop="creator ac

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10733
Entropy (8bit):	4.988839741683123
Encrypted:	false
SSDEEP:	192:YFRYlRfiAjojA1sMbSggUdgPzvi7Vp5d7Zq6:SRYlRfVjZtDgUaPzvup5dF
MD5:	94BC4228BB5941670E191E40A6BC44BD
SHA1:	AD06418894462185E7EECC1421310F552E1E5E36
SHA-256:	5734F1B66DCB622529D435ABA20990813D43553F949BC0813719B4E7D1252527
SHA-512:	F358EDB2CCA8EA1166C2371213150D32369C30F4E6A6C29E64A41BFE46FE48D54CC09609F83FC37880F810E22A84D40C40DE9D31F17236A6A57CD3D7762BEB27
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/plugins/akismet/_inc/akismet-frontend.js
Preview:	/*. Observe how the user enters content into the comment form in order to determine whether it's a bot or not.. . Note that no actual input is being saved here, only counts and timings between events.. */..( function() {..// Passive event listeners are guaranteed to never call e.preventDefault(),..// but they're not supported in all browsers. Use this feature detection..// to determine whether they're available for use...var supportsPassive = false;...try {...var opts = Object.defineProperty( {}, 'passive', {....get : function() {.....supportsPassive = true;....}...} );....window.addEventListener( 'testPassive', null, opts );...window.removeEventListener( 'testPassive', null, opts );..} catch ( e ) {}...function init() {...var input_begin = '';....var keydowns = {};...var lastKeyup = null;...var lastKeydown = null;...var keypresses = [];....var modifierKeys = [];...var correctionKeys = [];....var lastMouseup = null;...var lastMousedown = null;...var mouseclicks = [];....var mous

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2770
Entropy (8bit):	5.410997537287984
Encrypted:	false
SSDEEP:	48:kHbLkzWGO5zBpGOox1GOeandNb7GOFgr51jGO+o26RGOUj5MCGOSy9DOGO3ucz:IkZ2BgbxkXqDbiIbDxGDyPYFz
MD5:	0136E8549F4DF6242A5485FB4B7A2E8E
SHA1:	FE0FA97045D0C50C0EA6BB3E3CBF147CBDB0F891
SHA-256:	EF7109DFBE2FC8F3C2C03CE095DD1019DDD56AA9E7EF39882A0976BBB94BD54B
SHA-512:	08ADFDD00D69FC0B7D2EE8864DC6C7F7EB5DC3D23FD3D99ABB14A266F4A64B698961CEAF58EDE6600268E8C35BA212FAB33790DD2C16142A8D687D5839A7AD70
Malicious:	false
URL:	https://rtb.gumgum.com/usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1---" style="display:none;"/>.<img src="https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D" style="display:none;"/>.<img src="https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=" style="display:none;"/>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyYi0xZmQzZWQzYTIzN2I=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:none;"></iframe>.<iframe src="https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27976, version 1.0
Category:	downloaded
Size (bytes):	27976
Entropy (8bit):	7.992169351522857
Encrypted:	true
SSDEEP:	768:Ybptzb86DVAdbCY8dHkiWG2fJZlk4TVARTWA+GP7eJ:Ybzow2bCY8WlkQV0TWA+GKJ
MD5:	22907CE040431644B934B72A7C431A36
SHA1:	78863DFB62414FE1A73F64D7F7FBFF63EBCCB322
SHA-256:	658CBF469E751ADE6D30B701FC7CA00B3403329481955D30ACB721CA38B45D99
SHA-512:	EC31F711BF05116BFC4ED0712EB75B7681269F5094D0372833F6E7F107B80C144AD37C607D89855D5FE58E78D559FB993C23058EE972BB1B493BAC80D76B9957
Malicious:	false
URL:	https://fonts.gstatic.com/s/librebaskerville/v14/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcA.woff2
Preview:	wOF2......mH......:@..l..............................B.`..Z....b.....h..c..b..6.$..@. .....I...[:.Q...<....^..#....a..[...q.A......R.0..}.3<BIL..0.....{...22.k........?<..n....0X..L..^.......,.^b.}..!.l.T.\|.~....0..}...r...-.A!".N\|..L..\|."....E..?O.\|..8h..O..f.3.)............Z..K..Ea.P....@.d...=h..Y.03r.."...;...k.+........ UD.....`CM..I..5..hL.......I.D.B.=" ..R_../....b....%9...++rz........w..XB.,...&8.}........].Z$P..<>.r.44..q.z.*H...=..g..hWW.0..?....?..T{...kg..+.Bo.=...?.Lk..]6&Y"l...uj.}"..J.VI...]D.t.:..f.o[qX..8....Z.N.)0..E.E.l,..9......1.ZVJD.Uv;.#.u..d', .F...P.V...k...P.>..'.3...w...K..G.Cs=..y......q..o..Z.]W...[.erP .d.....S.....)_..........H..aC2.....Q...SW....M.J.oR$.q.Zj#Nm....gr:i.x.w......@7..4H........!9Z...h6...$Ei.I...Y-.1..J.Z.5.D.us. ..w#.E..$.......<Oc......H..4....3I..a.EK\....%.{i.@(u.....X,..Y.....%.1.Z..........$....@.@...".....vY..s....)........a....V...L...B(.....n.oe..n.".....19d...Z..n.2..d@hX...\...N.

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	2.5857114762260935
Encrypted:	false
SSDEEP:	24:JGY7peHU2k7N7DRhoZNtwNKzbEqNpdGY7peHU2k7N7DRhoZNtwNKzbEqNp+:uHU2k7N7YtG8EqNEHU2k7N7YtG8EqNM
MD5:	5C98B31F0E318509324A3E12D7D3F2F5
SHA1:	8011ECFD0F3BB160029CC0CC8DFE6352DF40DDF2
SHA-256:	784A81D7ABBD8E4670546720EB51F5C55607597AA5189F7674558148C08DEA21
SHA-512:	85DED69024B2943A5E2D2254EA03D2F066A5B8195AC644DFF26729396F863D9447C9E4931F16ED658CBD3E23ED9FE8356427DB241F99C2C9EDF151B5F44E64E2
Malicious:	false
URL:	https://exchange.mediavine.com/pixel.gif
Preview:	GIF89a............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f3.f33f3ff3.f3.f3.ff.ff3fffff.ff.ff.f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........3..33.3f.3..3.3..f..f3.ff.f..f.f......3..f.............3..f............3..f.............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f....3.f...........3..f.............3..f..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.................................................................................................................................,..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3.

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=AE4A8C3D-1096-459A-B091-2BADD5009F52
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=ZjI2OTU4ZjgtZTg0ZC02MjQ1LTc4YTgtYmViMGJiZGVjZDI0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2372
Entropy (8bit):	7.852410997517776
Encrypted:	false
SSDEEP:	48:10kRc8U2Jh319+fQsn11JNozORASFbirO/Gf6oZ:11c32J3Ap7ozUASFbieE
MD5:	A8EADB418043310D39EC513E28745936
SHA1:	E207EE20C74D8BE5FC72F7AFD7C1F4CCC7ADCF69
SHA-256:	E5A684C395330E6CC8C64457E1BA945012E94E095352E41ADCB88BBDBE263EBB
SHA-512:	AC83728CF80E74FD73C49AF428629392C51CD9DE99CF0C385BFB9B7351967888EBD033B100501CBE49CCC74883506A7D5CC4744D4428C3A114AAEE7CF1FED123
Malicious:	false
URL:	https://tpc.googlesyndication.com/simgad/17822024181240698237/14763004658117789537?w=100&h=100&tw=1&q=75
Preview:	.PNG........IHDR...d...d.....p.T....IDATx..{..U....~..b" ....M%.P@....S`RF..0.^XXL.j...3G.AS..n.h.DH4]..)-...2...C7i...v..x..{..~.^...y~3..<....9.s.y...a..a..a..a..a..a..a..a..a..a..a..a..a...?!.^+..B.#...Nu.........hA4{..D..s.uHS...1.DC..}h.....{.v.wG.W...t.....Usy...}......v.o.........^\ZsWm.......R...Vv...:WMZ.da..#.7/.^w.$...$o\|mI....T.k.....z(.m..U... ....\...8.\|#.o...s`.....>Z?.zk.Y..s./3....@.<..uGw...T...[.K.....5....+.....h(.....&..$.......aS...y./gJ/f....<A....n.K.D.[.K.n.u.0.\|V..C:#.......\|Fe.......E`..6........&..`...x....{..8...*...\|00..8..X.<...i.........\|.......<.P...2p....-.R<...)T@TS..@u.E95....~.yIh............7.].#.c^.{............4.\.Wz.\. ...Zf...E..-.m@.O...W`4.......^...Vh;.>..3.:.4.V.....k.b`1.1..nn...LU..8+..(W./.p.p..."/.xd........=.>T.h..(.V.....%^.o.. sY.t.L..\.r.e=...>..qH.8&./.}D:.b.z{iwk..oj.....T`....K0j.G....R.E..........".....y..T..<.\|....y....k.:/o......j.....>..32....Py..\|...lsK..J.[...E..m5_Yz.^Q4{...KE..

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?val=AAB3wk7K8YkAABTAD88gJQ&id=537125688
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zeta_interactive&google_push=AXcoOmQvhaun51zVgmHcgfujMOsT9Ybkkp-qqVmvrU-XAcbPjwvHuZ4pAI7CeMPTLGXLcCnfFifgwHHQ0Q3CawCtjKut1G6rtrk&google_hm=OTY4NjI1Nzk0NTQ2MTQ1NTky
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
URL:	https://sync.ex.co/v1/setuid?bidder=rubicon&gdpr=&gdpr_consent=&uid=LQ2T1KDU-17-IBG6
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	93266
Entropy (8bit):	5.925372038891814
Encrypted:	false
SSDEEP:	1536:7j+UE53Mru5a9EOa0b9RksoXCkPF/fZhEp3HnpDx16TxYst8Vk5c7:7rEqpk52qxYF6M
MD5:	84ADECC00ABC007AEB89B6499678F5EC
SHA1:	363D923D295140DF3E6A077BA117547FC0CAA624
SHA-256:	514333EA3DB462308BFD5335847F47CC154DA17FC0B306AA993DB1A9506C00F6
SHA-512:	4100C0112FD3C1EE13F987B7883335BCBDEC89578597F0B6EE0CE0296AAB03A1413A8CC9EB520083030E5BEC8C4334BD2B3D0330C64BFFFE0685B0B8E6400C4B
Malicious:	false
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-AuWbDVqaX1z2ocdaiDaZB0Qw_WVTse8lmS7F2bVO1W-kzI22ramq8v7lJqyIX-mTsgTJKWkGcek1ZcfZqma8UOuikoWlxc6MiiddmgYxpA8DKxBMiPswoN8MzyMwKPfeCXDhFeLLGh-YwXxZNFN0_qp0c-mwvcVGvb8AJtIBh_LilhBYg&dbm_d=AKAmf-Dodp47Atfh1FkCuxk_49I2nYsyikT0f196NtNqndzPxPow7c21Pdtp04AhoviIir3AOQl8VHO59WYd8c1dKWCAA4b-plum4GgbWBH6k97UC51z2kE1whGYCkOVg7FVookFuPBetbC6R8Xq2N-0LXAN2QCHY47hVrQnlqRKUrUVneFwHJJN7KVw4QvWRiNPu4PxhsxJginE_Vw_5NZf2tA2oVli31YBOPoJfyCUamTuURa_T-4r5V1-VbLdAvCylBkt1zHxR1tOhZA1NvuLmfXpnCTj2KhVkLff9PO51TWJyNh9Iqw9kUIUzj5DHW3leFxDESJUI5hN4LNfLS3KQw77T2Cknqye_bRQvhONCDDIB_XDhC3v8lTSBC5InoJLCDnYDgaEBpWatnxomy6RvIILC9R2Zp2hgy-55rUFpShf2jgrh-zWCBLh0Hb8Vaa_pco6UfrWK1J-ZFclf12n5vkBdY1rICbdKBmyAXW2mB6pojBmEG2HLKH1p5MPUzAKlUwGqJ4GicuGpz8sUJqBOSh9iqO5jmtP55W9FI--4ry8LwcyqibzI-BGOlV5W9BwRzvAs-tUY5ZgCSlsdMIS5Fl1MwsGtpMD4wBqwG6U6lfpErla2jLqtryQjFV2AEDq_7go3k2emEMRPcLi7xF3bR0d7rTtulJ_K9T1axht7h3_bhUbDDXF01ADIcaICHvpLBIhBxu_-PotlWtjDSpN1vi24u5ntbYkKbRZlEXeLU51F1pmfzBOpfObNWJn9uFAy5TSUyrfgz9DZmHkUdLozX_YEqeez2Olhre5tAjd3RRlKmeSzRhXEsveyJTVCH8i15BaR_GRzvjOy-xqItwC9CnHoeJVc33p87JFDDbIFBob3UN-BznNMEKlvOrNCR6A_kUQcXGb_5nn0v3ya9HjCuws03D_ip7PihYQ10vfFTG22it5kiWeK7mcEMF5GHaluodkX-JekJRCFB2TQl67BdFrLpTdNGu3wPdcQK3btss9xj6T4v7_3un-hlmv8TBMpoZhy6aARm8WLwl22T8_RYWd0xejLExe0yw5fu-r75rzuh68tyfQkDY_hQD727uLNk4wTnCpNyu470AfVUL5ENfDFbRgSUgeNL2Zg8Va-0rAfOetsE49VqW4J-LQHHAafMsG5LiBBRnziaImwh9A3a2RIvNEfYc2E8x26SkicS6F-Z1v_J9csuThxRfS-gdJZcpUxVDqy12_Xhd4Xs4XkjWIxLSZ-aKtEukcw8OyQsE0gEY37Stq3xlWypb71hpY0xf4WaVuwKGhnBVX8ABs5_lb4UUSNEuIS9YhIh3i_aZ2rue5q-iwYlxpPwYWYR5JzvTgzfS3Iwu4PFRILjBy_WtdjDwwOJjHJjPoSboD4pdTtk2jzU4QZZqvwmgwVCbPljsZIvTEpVAG9QtKmLccUT7b5_rLIOYz3XqyLK--AIm7gDveIrO_HokuxUPAxjL5dUgfUlQJVyiI42O84LStgrsyEspmrZUwiiaoxX2ahaKIBaKW7rWU-giqrUZ37bRajeACej1i2oNUgblHnTZFm8nYc_iK4tqhJkpKc65CLpfwL_CqQpmv11va4wzhNBYdxGy5EMbu0hG2OW4z3zMbq_D-TZrymXcxGEVPNl7nYmpQgQ4HGH3m0vXBOfg0uQZJ7UMmhqC4mqnHnns3Cpn5TcQ_jzC-c7DXc3Ro_pA_U7mftjJFhg0AA5oY0RmQTe-vHDRE5Pfux2ZocveexBxQ0j73iFi4k3A78zna3znqjCmGKdEDlQ2Nl9U6vKzUG8XymPbemccez6JEifAAIRv2Luz0pAZ-Bp3_somBK_PXYqGXWK9Z-s8IX1bqKyLbl5QPyLwT717Db_EaeFTVPxz6otpWQk_ZqQKt__keBa-iDLL5kkZzp5Cy8czyGfY6OioIPrKLUgj6c8ikSDUFpcJJvh2jpGPEv65FvKNX_DOjRbYijppRRwgKxMkfuNtFNZPnjHsOg6-bD6Umg6E_2fv_9ygU06jh1SkoqhZAoXB4fk0PoR9KufbwllR7jQfl0HzZcXNq8bRgGPMlID9RsNbC_O3W-t8jhHOnjDhZZKjSvyAAgUfwF9f9qL_HdSqgSShBPI3DI-mKj1KDQo_WxXkMzTQ-xlMC1YxePAjgjtp37ssFuvdVuisLE82yxGWsvkwZw4ICZCYvtGFFTAjTSCl1nlVdfxe3eHbTzt0ibL7IXbqoXzk5tZLzyH6kFQazNn8JV78tZD5UdBRTI5yvclNt_uO2VosPWWF_D2WZ4wWzDW9491qP8iLWesGwLc1bjQUpEgHaAdJ-Emfa52L8pAHDURQKVY_WTXw7Z1rDuPbakV_r0LucSEYsAGy40qxziwS0YSG7HK45WlnnwQigatQGrKCKOtsVP6hj8KWUs2OAvK2kvLL2hGNuaBvNR_23LO2EBM_fZcDJL9L9_r-yfjh3frzgyf7gjNVR5SmT-vExtM-5mAkhVI8tqLGPbPDEiGrd8uFp_OGlbSxuJW2Uw5bwjNf1Al-mPecvSfRFY1QEwemJmnzTYVpJMsugesVAkNTRE7NOARbTnS2nc_EUEdUVJkUd7ax4EeAGOIRla5RwnJRlf5U24tfIp_tyNLhcS5paFNqDghltRW2ONqKKkoXLKqzpX2I3tdqXDh9Ojh-qVSNWwj7kVTSMPxxXbHF5wV1LKmsCFJZQs9Sqzi6Lrm8MV5VtXudFQEKvgHU2suGzjWgiwcvSmsIkj4VTertYuFJZM8in3axaQEEumNydZ5GiFZeOy4qyLkEtl7dSy0I933Fw0_UN23H4ZOt431mz-XLmmW3zOHdXulshDbh-mmzOwiJk7etwZjd3nWLsr3arTL3PHqDOUU4Lu6Zpjri3sC1rCMD2saJtTRyokh-p12d55kTFhRj_QUYg2lrxAmXRbMNHeBkMPhuI53QYg3c2OAxSgBbxP93FhGOt68Hb3_7DBkIUG6ZbVnwEpM3COjwpwcOWKXjKzWD7KOWpuwXeGrLKGK0i3PlfbwRUxUpEwDKhUzf62cx3xhj4fdGfDw3MEL_5Su3ZPiok0Yg4A76V6syMIPX2-N307YVW9VQTqKED1i4wYGg8SEFLN8D_7J96X1QWi_W2zKQS0eDhzL8LAHwLGwjxgg8VU9jOJZ_OWz4dCcdAfFCYj4aVzgtMEwsJbKtuGZqNnR5wzift8XzcIhPLBgTT_6S9euYM7zg4Z8-nrToJj0m997B60L3LTyr3ZffhyCU7nJWjSXLeLFyA0lPW5vLmTnVnJYeWWPi3jTkMF7PJugZnexdymIkF5OrMZieeIivmiwLFeA1uWmEBNVR_Q3ah8yjimZcknTk66Z3TqH23-mEGAdF9JOcR7gTJhwhznJQo0Rm8rTbXq9q8HVUo1cr_v8vJOWTI2KGF4Mw1zMELVrWgMOH2fs9YIohmLT97OzeefzBvsN_jkwLZA5DzpsoCDO0DDSXTR6TAjlXNdA1ld44ce-Po9DsUCSWrpU8TRXRxw1w&cid=CAQSKQDICaaNZ4mVw5mJ4FE78phJvonRXobF9zqQl_GivTwzc2c-C49N_lQqGAE&uach=WyJXaW5kb3dzIiwiMC4xLjAiLCJ4ODYiLCIiLCIxMDkuMC41NDE0LjEyMCIsW10sMCxudWxsLCI2NCIsW1siTm90X0EgQnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwOS4wLjU0MTQuMTIwIl0sWyJDaHJvbWl1bSIsIjEwOS4wLjU0MTQuMTIwIl1dLDBd&dv3_ver=m202309260101&rfl=https%3A%2F%2Fmathblog.com%2F&ds=l&xdt=1&iif=1&cor=7325677979509064000&adk=1220192026&dtd=17
Preview:	document.write('\x3cdiv id\x3d\x22ad_unit\x22\x3e\x3cscript\x3e(function() {(function(){/Copyright The Closure Library Authors.SPDX-License-Identifier: Apache-2.0/var g\x3dthis\|\|self,k\x3dfunction(a,b){var c\x3dArray.prototype.slice.call(arguments,1);return function(){var e\x3dc.slice();e.push.apply(e,arguments);return a.apply(this,e)}};var l\x3dfunction(a){a\x3da?a.toLowerCase():\x22\x22;switch(a){case \x22normal\x22:return\x22normal\x22;case \x22lightbox\x22:return\x22lightbox\x22;case \x22push_down\x22:return\x22push_down\x22}return null};function m(a,b){for(var c in a)b.call(void 0,a[c],c,a)};var n\x3d{o:\x22ad_container_id\x22,D:\x22hideObjects\x22,J:\x22mtfTop\x22,I:\x22mtfLeft\x22,N:\x22zindex\x22,u:\x22mtfDuration\x22,M:\x22wmode\x22,K:\x22preferFlash\x22,A:\x22as_kw\x22,B:\x22as_lat\x22,C:\x22as_lng\x22,F:\x22mtfIFPath\x22,v:\x22expansionMode\x22,L:\x22mtfRenderFloatInplace\x22,s:\x22debugjs\x22,G:\x22dcapp\x22,m:\x22breakoutiframe\x22,H:\x22inMobileAdSdk\x22},q\x3dfunction(

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	5.022284930450752
Encrypted:	false
SSDEEP:	12:YsfXGpLDltUXGpLDlttQXGpLDltoyHwHPjrHdMqY:YsfGdltsGdlttIGdltoUyPjTuqY
MD5:	ED5E0CC93637E936CF4A4A1D2C70CD21
SHA1:	75655A53E44ED1CEB010A6ABE0669FD38180A3B5
SHA-256:	46BF2987C83E22BD6BB782658762840E43C3389176AB927FF6DA4029F567A7A7
SHA-512:	053D4911BEB1B3518B49D47D3F7A5F7F91A458DA26C3AEA00121225BBEAAA8F2CB0E74FECA7ADB6D6A0EBA38D5C631E273B11BBED3E2A625128F4517948484D9
Malicious:	false
URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fmathblog.com&pubid=38918095-8e45-4332-88bf-226b3514cb64
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"propertyId\":\"44\",\"vendorId\":\"liveRamp\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"pubcommon\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"id5\",\"sourceId\":\"600\"}]","3psamplerate":5}

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
URL:	https://tags.bluekai.com/site/2981?id=&google_gid=CAESEE4qnAzC16GWbFK4Rq49GJA&google_cver=1
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.004895759723114
Encrypted:	false
SSDEEP:	12:WuO+CQa1GbiDm82iYFAMsG8aREsa3AaaN:qQbiDmFNFAMH8acva
MD5:	15CF32F1816BE72AB8AA0D16E398339B
SHA1:	2C227D4B3904BD6D0862A4EECCB2827AD62222EB
SHA-256:	B7AAC81B09E4B993E29207E4B7A36E13B56F0674D6E9696F65F8F07FB06186A4
SHA-512:	E85076FA0486D02AFE09952B1F0F52B8FCD7E30B62B5690BF5B2E2F72AD7AFD43B1C1ABE5B49DE7B8089C513138BD9AAFD53152433B8A2CE31FD96970805EA51
Malicious:	false
Preview:	............ .h.......(....... ..... .................................................................................................................................................................................................................................................LLL.uuu.........................................................................................................................111.555......................................... .........===.\|\|\|.....XXX.....................................000.............................................................BBB.........""".........000.........(((.........................VVV.....@@@.zzz.............GGG.....777.........................ggg.ccc.........................nnn.HHH.........................www.""".....................JJJ.###.YYY.....fff.ggg.................................................hhh.....................................................................ZZZ.ZZZ...............................................

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537146931&val=4c_dda4d101-97ce-4817-beb8-0a826215ec0d
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=539237773&val=985ce834-0b5c-1dd8-f7d7179d
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537138692&val=di_1296d48b0e654caba2d72
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyYi0xZmQzZWQzYTIzN2I=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
URL:	https://match.sync.ad.cpe.dotomi.com/w/user.sync?ptrid=14&userid=LQ2T1KDU-17-IBG6
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.97020783365077
Encrypted:	false
SSDEEP:	3:CUzRtrllHh/:dJ/
MD5:	7312A5205389CCAE2576D800255B1DF8
SHA1:	897C14EBB5D7842B621F310E4E90680050FD1C1F
SHA-256:	22816A00DFE9FCDC30063D22717AB9CBAB3AEB2A8E9844E9D774D256DC48B7C8
SHA-512:	110B55A7D8475D18BE9C9786C3A59106D3944E5D4574D3D4C924E0D96A08393D8BE8AA32188F9ADE88EB0718D37FD8E6EB458D903A303B6FECCEAEAE5882C436
Malicious:	false
URL:	https://secure.insightexpressai.com/adServer/adServerESI.aspx?script=false&bannerID=11552347&siteID=N7470.3713632DV360-22SQUARED&creativeID=206429218&placementID=354148455&rnd=2895142488&gdpr=0&gdpr_consent=&redir=https://secure.insightexpressai.com/adserver/1pixel.gif
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33589), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	58753
Entropy (8bit):	5.26167812703519
Encrypted:	false
SSDEEP:	768:y5B9KXqe7mdOgKY0hXpXVG8FoAKRXSdRKftld0VTScQI8rdFj8:EB9K6d8gghXnyXSuVld4z8Z6
MD5:	A9C11221224C7869C6B916618D892612
SHA1:	39C436EE6D2AFD6F851840AB4673C56CE0372D3E
SHA-256:	7B48A74FA0F94D83AE6D60C772F5E7AA66E7BE1B63CCF223CA14E34D3D7B0D22
SHA-512:	EA05BD1555D819AA35985D16EDA15F9A3805DA01F192156157739E30CE2A22D2888F8E4D1A2ED7A3FC2739CEF848B7EE882A5A628B3657E27AF979FE8F0EB09D
Malicious:	false
URL:	https://hbx.media.net/pubcid.php?itype=HB&cb=window.advBidxc.mnetCoRtusId
Preview:	try{ window.__mNPubCidCB = window.advBidxc.mnetCoRtusId ;/. This Source Code Form is subject to the terms of the Mozilla Public. * License, v. 2.0. If a copy of the MPL was not distributed with this file,. * You can obtain one at https://github.com/conversant/pubcid.js/blob/master/LICENSE. * Original github code https://github.com/conversant/pubcid.js. */.!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"s

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1103x624, components 3
Category:	dropped
Size (bytes):	26238
Entropy (8bit):	7.772667599172267
Encrypted:	false
SSDEEP:	384:VAGg/TQT4UoFJYDeEG23ksO3pJv72ZXYTEYJx1gwNnxEf/8M9HTclQ5EIIRI6HwM:CGPT4P+kLP7MMznEf/59HT7R6HbN
MD5:	6C3882807793D45FD85FD1CEAB3100C6
SHA1:	1118408149B7D032FB8E64BD747602C6395E6924
SHA-256:	A1AC69D0EDE070D54E191670EE255268BF2D56F00B1E5668C43D3B488C1F8D89
SHA-512:	81F4FB33B583AB544C970D1372923650F76B9B71F07103E115DE900E6CF409E27AE1340CCCA3F49B81C72A5057E2183EF404C8A647D10BBFBB127B40DF6A8B3E
Malicious:	false
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......p.O..".......................................H.......................!1A..Q"2aq..3...#45BR....br...$.C..DS...%cs.................................$.....................1.!A.2Q.Baq".............?......C....@...`$1!.........4..C..............~7..G.n...j".e..A!.0..........`....@.....!.!...........C....h..]a...OD....../.K.B7p_}..{i{....~<w.....qR.T_EE...V.rw...1....q...]R.}z..+w..sa..w..Jm..N]jNY..[...8..6...T...5Y.<...Z.p.[.^.>G[..\G.....Z..N..J+.....=.O....x.5.X.....E>.(._.....W.....q{:._EG..E.../..MA$.f;.]?O.y...J.I.....{....PY......y..1.s....%.cN.s.&n'KY.J$6.L%...t:..%.t..u..^G.8<.YJ.tg. ..^(.....z...^.%sE.I...RSY)'.......Xz.W].E.v]..q..z..R..I....^.])..e...iE.....}5#..Uy.....uR........z8Z...+~O...........G.\|..p...j..3...+...ko{.jF.js.R[..zey...^%..&Rf.M:cP.4r&Z.v.;..K..H..L.........)..Zf.E&Ej;..0

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3368), with no line terminators
Category:	downloaded
Size (bytes):	3368
Entropy (8bit):	5.63120961584703
Encrypted:	false
SSDEEP:	48:CfOlaiUedCKAHVTg77+ysGJdNa0BlsC8t5nC5lTjWTKySMqB0QevI6beBD3:Cf4aindCb47FsyyC78teYlDv1bW3
MD5:	CE81131BA0DD31E284D2447984F71E7D
SHA1:	BB6DB7DDEAAA908DBA93F7F1D1F74125083E474C
SHA-256:	6093FFBB40CF991A2681BA79C05D68B1182235BE692798EEB26183FC69A040A5
SHA-512:	EF9DC3D0A30882F79A5346574F90C8D70F030451278C98713888ED1EF2A915E4FD6D67A747A92F5E65587408396D8AD5B601DCA3D8247C2CFD8A4B1971BF0E7D
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=4229144&p=156212&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D');PubMatic.loadAsyncIframePixel('https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=htt

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
URL:	https://a.audrte.com/p
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65386)
Category:	downloaded
Size (bytes):	441821
Entropy (8bit):	5.499428895441287
Encrypted:	false
SSDEEP:	6144:AEEySk7DGM3/JmGCbMo0lJNEZq8VKfzGeTjBjmW3SJ307:AseMVGZnIfDBjbkU
MD5:	215B1CE47FF4A077F99C8184CFA83D00
SHA1:	1CE5DAAA88B96D37B996D95B396CADEC2E89B521
SHA-256:	108CDB682E1D256BA58174D96775EC12FE2E9515FFA2CA7EDFFF49343A4D97EA
SHA-512:	01A0EF0D70B45DE9963806D6337759740D05DEA41D77A8FBE8837440469AC58993CEF00722082391B10CF06846EDC9FD5F45F65C2FD66BF1858EE46AC07CCDD3
Malicious:	false
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202312060101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 .*/ .var ca,ea,ha,ja,na,pa,sa,va,ua,wa,xa,za,Ba,Ca,Ea,Ga,Ka,La,Ma,Na,Qa,Xa,fb,ib,kb,mb,qb,tb,xb,zb,Db,Gb,Ib,Kb,Lb,Qb,Sb,Rb,Ub,Vb,Mb,Wb,Xb,$b,ac,fc,gc,hc,ic,jc,kc,oc,pc,sc,tc,uc,wc,xc,Cc,Ec,Bc,Gc,Ic,Kc,Mc,Nc,Oc,Pc,Qc,Rc,Tc,Yc,ad,bd,cd,Wc,dd,Vc,Uc,ed,fd,gd,hd,id,jd,kd,nd,md,pd,qd,sd,wd,xd,zd,Ad,Bd,Dd,Cd,Jd,Ld,Kd,Nd,Md,Od,Qd,yd,Vd,Wd,$d,be,de,ee,he,ie,je,ke,ne,oe,ae,pe,qe,se,te,ue,ye,ze,Ae,we,Ge,xe,He,Me,Oe,Qe,Se,Te,Ue,af,bf,cf,jf,kf,mf,nf,of,pf,qf,sf,uf,vf,yf,zf,Af,Df,Ff,Hf,Jf,Lf,Nf,Qf,Rf,Sf,Tf,Vf,Wf,Yf,Zf,ag,cg,dg,eg,fg,ig,kg,og,mg,sg,tg,ug,qg,rg,vg,wg,xg,Ag,Bg,Gg,Hg,Og,Pg,Sg,Wg,$g,ch,eh,gh,hh,ih,jh,kh,lh,nh,qh,rh,xh,Eh,Hh,Kh,L,Lh,Rh,Ph,hi,ji,li,mi,ni,si,vi,Ei,Hi,Ji,Ii,Qi,Ri,Si,Ti,Ki,Ui,Li,Wi,Xi,Zi,$i,bj,aj,dj,ij,gj,jj,sj,vj,nj,oj,wj,zj,xj,Cj,Dj,Ej,Hj,Ij,Nj,Oj,Zj,fk,dk,ek,kk,ok,qk,rk,sk,uk,yk,Hk,Bk,vk,Qk,Ok,Pk,Sk,Uk,Xk,P,Zk,$k,al,cl,el,fl,nl,ol

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	27489
Entropy (8bit):	4.526214825721999
Encrypted:	false
SSDEEP:	768:CKwoGYUqov1ww7ZdYhNFWQ9Aw33JZVtfbqoQ:CKwoNVov1w0GJbq/
MD5:	DA107C5EA01FF6EA4B3E1B266826AEEE
SHA1:	90EDC4D9D9DBCD2A702399031AE7BE7E104D4D09
SHA-256:	C1DFE0DE94335510EF3BFE4855CF5F99CCEE35501834D2F51DD15E54F69E6010
SHA-512:	A4C6D7A33D59E1BA5038F51A667C89048A0DA633149B6F3955E354D67421682A1C65F99E5B10E8CF8AE1D70339EB8EF601F06142510635A5C283D09D9B820C04
Malicious:	false
Preview:	{"231750":true,"261165":true,"261167":true,"573450":true,"582548":true,"582549":true,"582550":true,"582551":true,"582552":true,"582599":true,"584858":true,"588634":true,"5185227":true,"5639483":true,"5639484":true,"5706980":true,"5707010":true,"5707021":true,"5742030":true,"5742041":true,"5742050":true,"5742059":true,"5742063":true,"5759613":true,"5759634":true,"5781680":true,"5781685":true,"5781695":true,"5873753":true,"6000231":true,"6000236":true,"6000241":true,"6017418":true,"6043989":true,"6043992":true,"6043995":true,"6060002":true,"6145708":true,"6153957":true,"6177059":true,"6177061":true,"6177066":true,"6196536":true,"6200077":true,"6226323":true,"6237662":true,"6238185":true,"6266029":true,"6266030":true,"6266031":true,"6278945":true,"6312645":true,"6318000":true,"6318005":true,"6318011":true,"6323417":true,"6323418":true,"6323421":true,"6323426":true,"6325391":true,"6347016":true,"6347018":true,"6351473":true,"6361249":true,"6369940":true,"6369942":true,"6369943":true,"63699

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2149
Entropy (8bit):	6.230724832270889
Encrypted:	false
SSDEEP:	48:NZWPFXp7vC6pyos+cBAKXvB3gxUm1CYZ4N:zWlvCt1BAo3mEQq
MD5:	6ACA0870F23BCF933F299572ECAAE8F8
SHA1:	952EF17132814CF4DFA6E0FA08640729622E744E
SHA-256:	45F463EBA8466BAFD6C406535D608E20E8F270D45EA7B446A0E402409731CC1E
SHA-512:	D30516DDE4176C5112552CBEF161639C8B47F5505D34A0BECB715EBF08D90DBF139180E43439611DA90547E9CBA556FFB98BC72DCB264052D414530163FC6F4A
Malicious:	false
Preview:	.PNG........IHDR...X............;...3PLTE..............mt.....:........[c.FP.......~......=.....tRNS.@..f....iTXtXML:com.adobe.xmp.....<?xpacket begin="."?><r:RDF xmlns:r="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><r:Description xmlns:x="http://ns.adobe.com/xap/1.0/"><x:CreateDate>2023-10-26T14:56:45-00:00</x:CreateDate></r:Description></r:RDF><?xpacket end="r"?>........IDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUU

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537141727&val=18072662090765666652
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 399x209, components 3
Category:	downloaded
Size (bytes):	12957
Entropy (8bit):	7.958492929175523
Encrypted:	false
SSDEEP:	384:RhcI4qmQPxqbDqhatDjYbrV7Csd/QBwK/IMmUnW:8JSxqChah0b4sdKwK/IMtnW
MD5:	718F483DB5CC3E0820CC6DBB9341A145
SHA1:	625C63DD4C80F6B71E26FB67BA2D7F6762C79DF3
SHA-256:	B8A809F8E79D033F89CA49EAD080D23760A2FD98CF547535AF0FC47342C95338
SHA-512:	D7ECB1CF90532FF64E7D4CE9240B4012E3EFBF0AD7D09E7721E2A994FFB4F48B1BFE4E2077DD948ACB5576B9DEF0EA5A700852826063E035754A433FC934F878
Malicious:	false
URL:	https://tpc.googlesyndication.com/simgad/4139665402427409239/14763004658117789537?w=400&h=209&tw=1&q=75
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........( ..&&&'''&''&&&('&&'&&'&'&'&&&-&.&''/&'(&&&&('&&'..........."........................................Q........................!1.AQ.."aq2....BR....#3r..$4bs.....Sct....CD...%5T....................................9.......................!1..AQ."aq....2...BRr...3b..#..$............?...U...O6)JP.^.j/..:{.}.+...?.T/..i@)J..}..@k.I.r.p.(.g%s.?V....[z...d.Lr}F.a.m.C....G.=....H ..H..1[.x.e..Q.......l..,l>.5.G+...U..{..._......wJ...s....?P..&..u'..k..U.61..O.wC./-G.:.m.I.wN.[..... ...._/..BJ./O.d$..)[..G...(^3h.c.7.U.`hg..+J.5e..A)%.u.....V.j.0J.b...b....>..oU.D..o.2.o....=.~N.....OP...mT.o.D.....X.o.Z.P...FE.HE..]V..+JR..+z......P...j%}...kc...@J....._....B....YI...j`R..EG>"......M..zf...R.A........\|zP....V. ....mT..D...w.$./..?u3[../.X.G..%...&.$j(...ag...R.%.........Y._.r...R.....-l.@/.Q...y.....Z....y...._..aY.Q\|.....4...lu93.....lp..F.V{...../........)`e

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 43 x 36, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	791
Entropy (8bit):	6.9660914893509345
Encrypted:	false
SSDEEP:	12:6v/7BaOqa8lYeaqUq10c+54wEDJxeF4zT1Ry0IWNNsD0dnlBSH2Bo1+qkyc:QakVFy+PmLfNdNNsD0dlBFu/c
MD5:	D057503F43C87876F0304338BCD73A81
SHA1:	1DA076D924477C75320C4210159C8539B8F6D180
SHA-256:	DEE2273D2EFFA78AC26D52FCC0AB2E8F1B86D4C6DD4DD9AD4D132A4AA9A33C55
SHA-512:	A9F70620E101B08DB16F473CFA86CB294D86823A52971BC9E7C306E997C591D23A5C018978F8F984BFC53E01CAF1B1F41C2B1DB06F9A34E5D951D33D7B454AFD
Malicious:	false
Preview:	.PNG........IHDR...+...$.....'.3'....PLTE............................................................................................................$$$222@@@KKKWWWjjjqqqxxx....................................................................................................................................................n...\tRNS.............................. "$%&)+.035:=@BEJQTWY\^afsu}..................................w@.u...SIDATx^..[S.@..aW....x(.\......,..K..<.....F....t.{.3.....2.......]EmO..T....]@..bc.`..lX...!\..m.4...[...Y...X......U...}M{..6...s~@K<.....z...c.....:.,.:......b1.d.)b...........{.0YO...............6..4.w6R.T.,Z..A<.J..e.5..J..'.X..0.>..o....I...o.;.u_.W..w'..\|.d.p<~.\6G.{.Z'.w27....N.w....O..;.M}.%{..JM...%_0qr7d..^B...j..5...4Z.....IEND.B`.

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17095), with no line terminators
Category:	dropped
Size (bytes):	17095
Entropy (8bit):	5.43998968450795
Encrypted:	false
SSDEEP:	384:a9Usn6m9OgjiVGbCW0WBvRtqYCMkdE6jCZxzxXvd1CWgSFZ0Z:ap6COoiVGbCWzE+ZTfd1CWLFS
MD5:	8E99BDBFDD9E627259AD8115D1CADEC8
SHA1:	008EF4A704F832389CBFCEB135B3A722FCB5E1BC
SHA-256:	2BD27FB4CDD30B9B0C730E44A8EC482A49DBF95EAA5C3F399C816DFEF9990BEB
SHA-512:	80862B9498EFDF43BA2F1250B270F69325438240CD84F6686B1E0219F1B3FCE43163258FA7C23C05A1B0780CDC92115EA72886CBFA5C5A22BC21E818FACAE71C
Malicious:	false
Preview:	<!doctype html><html lang="en"><head><meta charset="UTF-8"><script>(()=>{var e={676:(e,t)=>{t.writeTag=function(e,t,n,r,i,o,a){var c=document,d=document.getElementsByTagName("script"),l=1;for(l=1;l<d.length;l++){if(d[d.length-l].src.indexOf("/adserv_")>0)break}var u=d[d.length-l].src.replace(/^[^?]+\??/,""),s=window.getCookie&&window.getCookie("TMEDIA")\|\|-1,m=window.getCookie&&window.getCookie("TMEDIAISP");-1!==s&&(u=u+"&dmsc="+s.substring(5,s.indexOf("/"))+"&dmsi="+escape(m));a=a\|\|"0";var p=/iphone\|ipad\|ipod\|android\|silk\|kindle fire/i.test(navigator.userAgent.toLowerCase()),h="https://secure.adnxs.com";(h+="/ttj?id="+i,n.indexOf(",")>-1)?h+="&promo_alignment=none&size="+n.substring(0,n.indexOf(","))+"&promo_sizes="+n.substring(n.indexOf(",")+1):h+="&size="+n;h+="&pt1="+e,h+="&pt2="+t,h+="&pt3="+a,h+="&rev="+a,h+="&position="+("ATF"===r?"above":"below"),p&&(h+="&st=mobile_web"),h+="&brlg="+(window.navigator.userLanguage\|\|window.navigator.language\|\|"").toLowerCase(),h+=o,h+="&"+u,h+="&c

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.215346826699106
Encrypted:	false
SSDEEP:	3:RFrXJFhXA8wq0FPIvn:jrX1A8FIIvn
MD5:	F6AB5FF81934FB35354C4C81A02D4843
SHA1:	A5DAFFB05D48FAEDD64A523AD5FABF80570D5A5E
SHA-256:	FCA34E38DDF5C8D31B91B369935B3CE6E1D2BF935CE3A595E2470DBD9A820FC1
SHA-512:	ED2E53B7F9BE4FF2445082E9B724A0E93FA751C3520CB9699E660C7E41ABA8BA2AA315C77E805E38B0559753E8EF04B3590AC7E1B3D229CE544B8605C7CA6065
Malicious:	false
URL:	https://mathblog.com/2WOFDurG0lJJ.js?ts=79188
Preview:	// this beacon is used by Presslabs for metric computations on mathblog.com.

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	5.183514857983959
Encrypted:	false
SSDEEP:	3:C/2A3njBlJQ3itoSypqPu8YNYMe:C/nXjBlJ9tSqrqhe
MD5:	B50D652D260AF3E801B8E24B567A7E1F
SHA1:	25A4884E1DE1AE8722C0E153840FA25AD29DC508
SHA-256:	1E2D2434F97633025721C0AD6147CEF94D877CE1C34CC3BF3B2D5F0BAB89A511
SHA-512:	463A406E74CCA47E023D7276B81501D1E96E6EC630D9DC6D686D5DB787A86AE510D6728CFE0B759685864FE1256D476FA62464EEC5039963E31D864F5F1B5A1E
Malicious:	false
URL:	https://gum.criteo.com/sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1---&j=window.advBidxc.mnetRtusId
Preview:	window.advBidxc.mnetRtusId({"status":"OK","userid":"Pdws0OdR4ZLFJGywxULsH5G_q7jZYwNP"});

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8688)
Category:	downloaded
Size (bytes):	8710
Entropy (8bit):	5.382317068022089
Encrypted:	false
SSDEEP:	192:BblSfub/hh+EpsR8yp57QctqKdH+LPQKQVyuVi9JknLxPcObQ70RLdYPg44H+:BaEuRdp57Qc9deLPQKQVy99CLNQIe
MD5:	25DE272975F8461C7A1620CE9685B4FA
SHA1:	947D1A933B41F9C0FB8F49FF7C7673AEE09C880A
SHA-256:	432D901EA96AC3BE844F2F177043FA0818E22AB8C8127939E2E86A919AE61102
SHA-512:	423EFE0136630EF74A514C087BE49AF5E49F2AB0E0F35B1930F30B154D6001DB0169FD1ADEAB048EBA42AF57CD73F56A6859BFFC7BF875960FB2505F335ABBD7
Malicious:	false
URL:	https://cdn.doubleverify.com/dvtp_src.js?ctx=750202&cmp=29001397&sid=5744950&plc=354148455&num=&adid=&advid=5677814&adsrv=1&btreg=574432668&btadsrv=doubleclick&crt=206429218&crtname=&chnl=&unit=&pid=&uid=&tagtype=&dvtagver=6.1.src
Preview:	/! v5125 6d78012f /.var __webpack_exports__={};(function(){function e(){try{return(new Date).getTime()}catch(e){return 0}}var t=e(),r={InjectTagError:{id:1,message:"InjectTagError"},LoadTagError:{id:2,message:"LoadTagError"},UnexpectedError:{id:128,message:"UnexpectedError"}},n=function(){},o=U(),i="undefined"==typeof window\|\|"function"!=typeof window.addEventListener,a=function(){var e,t;if(!i){try{M(e=x("about:blank")),t=!N(e)}catch(e){t=!0}try{e&&("function"==typeof e.remove&&e.remove(),e=null)}catch(e){}}return t}(),c=-1,d=function(){try{if(i)return!1;if("object"==typeof omidVerificationProperties&&"web"===omidVerificationProperties.injectionSource)return!0;for(var e=!1,t=window;!1===e&&t;)e=null!==t.document.querySelector("script[src*=omweb-v1]"),t=t===window.top?null:t.parent,c++;return e}catch(e){return!1}}(),u=-1,f=function(){try{if(i\|\|d)return!1;var e=!1,t=window;for(;!1===e&&t;)e=(r=t.omid3p)&&"function"==typeof r.registerSessionObserver&&"function"==typeof r.addEventListen

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2946)
Category:	downloaded
Size (bytes):	2981
Entropy (8bit):	5.174465669703351
Encrypted:	false
SSDEEP:	48:Q7A9/XN5NjJE2aAOuRUUKfTGwAuw5BJmVhl2qFqyvQyOw835uuPkSEwVYql+9y5l:931Yf1AJ5m/FqyLn8pu4Zl+9y5It4yO9
MD5:	492F2C1A7EA7EB83FE42E0FF7CB51AA2
SHA1:	DB36A77F6AAA2063BFBEC02C2C0E967438C5A245
SHA-256:	E174A58A503AB84B3D1B9DE12FD3895788204485170F1289E445F7B5B98EC789
SHA-512:	EEE6A1C268A519F4F281B2D76B5193BB068E94D1410372EF062587888589E139B20BB635E2331E97C857D7D835E9372F50822C5DAED29B139AB91FF5633C7A7F
Malicious:	false
URL:	https://cdn.mathblog.com/wp-includes/js/comment-reply.min.js
Preview:	/! This file is auto-generated /.window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:"wp-temp-form-div",parentIdFieldId:"comment_parent",postIdFieldId:"comment_post_ID"},e=v.MutationObserver\|\|v.WebKitMutationObserver\|\|v.MozMutationObserver,r="querySelector"in E&&"addEventListener"in v,n=!!E.documentElement.dataset;function t(){d(),e&&new e(o).observe(E.body,{childList:!0,subtree:!0})}function d(e){if(r&&(I=g(b.cancelReplyId),C=g(b.commentFormId),I)){I.addEventListener("touchstart",l),I.addEventListener("click",l);function t(e){if((e.metaKey\|\|e.ctrlKey)&&13===e.keyCode)return C.removeEventListener("keydown",t),e.preventDefault(),C.submit.click(),!1}C&&C.addEventListener("keydown",t);for(var n,d=function(e){var t=b.commentReplyClass;e&&e.childNodes\|\|(e=E);e=E.getElementsByClassName?e.getElementsByClassName(t):e.querySelectorA

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52990)
Category:	downloaded
Size (bytes):	53044
Entropy (8bit):	5.438374620694402
Encrypted:	false
SSDEEP:	768:Hcrbt0v6S3UbiINuGAIA0XieVpeB6ELQ1GHaLi9:HoBmM9e4E01GHa29
MD5:	0B6AA3AA07869D5163C8D489F7C66256
SHA1:	BD32C24DFC6C71AE54BF2E6473AD61FA6F81BE3B
SHA-256:	3D649C0B3E87FD6ABCB983656A0A1B3923A2A59885C3A30538641FD4F7126CBD
SHA-512:	D754CB423718F3BC335081D41A88386B58E2EB523635BD15773B43495064B52B0FBB9265DA8DD19E47A97CFAA1FABD40C73C36F9684F6C44F2A18E6502F44E88
Malicious:	false
URL:	https://acdn.adnxs.com/dmp/async_usersync.html
Preview:	<!DOCTYPE html>.<html>.<head>.</head>.<body>.<script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=function(t,e,n){a.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},a.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},a.t=function(t,e){if(1&e&&(t=a(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)a.d(n,i,function(e){return t[e]}.bind(null,i));return n},a.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return a.d(e,"a",e),e},a.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},a.p="./",a(a.s=114)}({1:functi

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 618x618, components 3
Category:	downloaded
Size (bytes):	21506
Entropy (8bit):	7.726243093383049
Encrypted:	false
SSDEEP:	384:ItH6jC6OO81erPGy1LcofV6st/wU3ve6wygk9ASgWZzSYNiWDyc1:nU1TOd9NtIU3e8RgWZzS3WD31
MD5:	1B9BACCA5136DA16635B8522BAC508AC
SHA1:	EBBAB2C299665F186715D803B12E91B676CDC9F7
SHA-256:	9280E489590B018547C549723C7B25B45F26384F9A5DE3F80E5E28069455D60A
SHA-512:	055AC4137AB60F9CDFF43079427CEA62CA97BD3095B03C0A0A6FE30085B31F3A8DC45D4A4EA4696817CD168BF7B25FCDE02CF63CCEEA9CBFEE8078BF7C32800A
Malicious:	false
URL:	https://encrypted-tbn3.gstatic.com/shopping?q=tbn:ANd9GcTQIvfEHMCOcxpqAum0sORuIQuk9K1_4xdnr0NMybIP1ax2VsezCk-d9TP4Pi8&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......j.j.."........................................[..........................!1.AQ."2Raq......#......$3BSTUbr.4DVs....5Cct....&6..E....%Fd...............................#........................!1.AQ2Ra.............?...@.A....$........................ ...@...@....................H...........................2.........@.A................A........... ...$.I.....$.........@.....0.....@.......@.A......b... ........................@...@....@ .........................@...@..@.......H ...t.i........................H.. ......P...@..............................@....A........t.i......@.H.. ...$...@.A..$.......C.2I......(.$. .. .9..$...H..@.I.......`@.. . .........(.H....D...4..E...@.........!.... .....!.'#$.'#$.'#$.....9. .NFA.S..... ....... ...... .. .$....@...@ .(.B..$h...... .P.. ..........@....@$.....@..........$0......A.... H.......... .H

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=545637763&val=4trFhcvjylTg&ev=2b54fb5c-44a3-088a-25af-cc01d824051c&pid=562539
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
URL:	https://tags.bluekai.com/site/5386?id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], progressive, precision 8, 1456x180, components 3
Category:	dropped
Size (bytes):	22333
Entropy (8bit):	7.948728861564215
Encrypted:	false
SSDEEP:	384:HinHUlGKKkC8ItfV5OSTe3meEfhOB+sRXYmPQ/Y34008ZsLWT:HiUlGhjt8W3hOE/u4csW
MD5:	FAE32CAE0B39A173D4552755EBD872E4
SHA1:	E9BAFC91D1169FFDD73E265BA97538B4E11D7570
SHA-256:	11360FAD1171340C5D1C0B0FED2CF928C5E29967CB728BCFFB3CEDE0B927C3C9
SHA-512:	C1DA8C5F988BE3ABAD76C23CD40D12DBCB0956AD62A2CE5FCA31E65993493AD1BFD9D4896DF49B652C6AB1444EDBC0B4847A49CAC00B65509379C7C01DB8D742
Malicious:	false
Preview:	......JFIF.............DExif..II.......i.........................(...2023:10:26 14:56:45....C....................................................................C................................................................................................................................................................].u...4\.A#.L..>m.V ....J9....2......~....#,.#\.Q.>.......J....d..v.Z....-..ZX................R..1 .ED.#.<8..HUU3N.{.53...h...&U...sHZ.#..z.y..\|.6..o0.$SB.4...9w.....k.....7\|.K.oMy..nf.k.......&....o^c.u...q.:..k..s......h....x..Z.,q.Nu+....K!+-./?G...r.h..].n.{<.q.q..#...AV......Y.b.X.J.Yd.[O..o.'.....0...<w_?......P....n.....W5l[+..D....$ ......H......1H.EE.H.41...%Z..Y..6..Y..H yAR.n..o....s:..~.=b.0......"...y.{.f.gZ&........{....q.\....'...rk+.S.......<.......ZW..1....U.]i..UJ.EXIZ.,%..jj.c.....:...11..,.h..Y.f&t.Z2...w.g..6.zdS..y>....._,.\|.)..\|...},o.......n..E!.Yde`$.I........ ...$.H$.T.....E*...h...XB..I.5f....r

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25642), with no line terminators
Category:	downloaded
Size (bytes):	25642
Entropy (8bit):	5.385018443296212
Encrypted:	false
SSDEEP:	768:q3RtjsnAbtoIAs4qU54PmFhO0EoIVdThRhqWJQQG5iu3jtBhNv:ns/0EoIDNJgz
MD5:	D11068163907663315607A1B6ADF7C4C
SHA1:	DD30889D49F94A7776D402429A95CD03E51924B0
SHA-256:	8DDAAE49B8A4A3E8BAAF129D356DCF3C128156DBFB7DF15A66CC377086BC5388
SHA-512:	480FFFA7B2177A3028B75868BE3E3C92BD9894CF0990CD8ECA6F1B12EDB3965E4E2187EF2E1E0973F86AB2ACB9C85CC7BE4320F3E076E161C9C44CD2D8E07B3E
Malicious:	false
URL:	https://scripts.mediavine.com/tags/9906/64ee526f93160b55eb66.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[9906],{8074:(t,e,i)=>{i.d(e,{Gl:()=>l,ZA:()=>s,b$:()=>h,bl:()=>r,cU:()=>n,rI:()=>a,ug:()=>o});var r=(t=>(t[t.VPAID_1_0=1]="VPAID_1_0",t[t.VPAID_2_0=2]="VPAID_2_0",t[t.MRAID_1_0=3]="MRAID_1_0",t[t.ORMMA=4]="ORMMA",t[t.MRAID_2_0=5]="MRAID_2_0",t[t.MRAID_3_0=6]="MRAID_3_0",t[t.OMID_1_0=7]="OMID_1_0",t[t.SIMID_1_0=8]="SIMID_1_0",t[t.SIMID_1_1=9]="SIMID_1_1",t))(r\|\|{}),n=(t=>(t[t.linear=1]="linear",t[t.nonlinear=2]="nonlinear",t))(n\|\|{}),s=(t=>(t[t.autoplaySoundOn=1]="autoplaySoundOn",t[t.autoplaySoundOff=2]="autoplaySoundOff",t[t.ctp=3]="ctp",t[t.mouseover=4]="mouseover",t[t.viewportSoundOn=5]="viewportSoundOn",t[t.viewportSoundOff=6]="viewportSoundOff",t))(s\|\|{}),o=(t=>(t[t.stream=1]="stream",t[t.banner=2]="banner",t[t.article=3]="article",t[t.feed=4]="feed",t[t.floating=5]="floating",t))(o\|\|{}),a=(t=>(t[t.instream=1]="instream",t[t.accompanyingContent=2]="accompanyingContent",t[t.interstitial=3]="interstitial",t[t.standalo

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.5238561897747243
Encrypted:	false
SSDEEP:	3:YBOHfBL1:YwT
MD5:	BAF901F279C03A8C930FBFBAF26A7BDE
SHA1:	204506CE3E90359BF322E0137BC7A16D5A90C89F
SHA-256:	CDB3C49DDFB2DFFBE1E06A026408758863DA8FD4FB0C88C997B029569334EEFC
SHA-512:	7C0434C5B355F12F166C51AC0A245B4245AB2215897A1AAB25E8BC1DCE13FFD29C6A946798A163CEAFA7899A156C657717392C945280D19FD4F1F1773F1BD4F3
Malicious:	false
Preview:	{"2023-12-12":{"687":40}}

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_cver=1&google_gid=CAESEFPCnVy-MdM24V1UiTwtzXI&google_hm=ZXjEurXK3YbtORulaCkY0QAAAnkAAAIB&google_nid=index&google_push=AXcoOmQVv-1iqxp4Oad_sJ3k5oVBpdXwVNjFtxAk4sNeME9jf1DMbpLep94Mp5rN4ra8RjY20UGlh0zNkMxM3eRlz0esMAkOrqKL
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35280)
Category:	downloaded
Size (bytes):	91698
Entropy (8bit):	5.590107580413913
Encrypted:	false
SSDEEP:	1536:sqDOoRwKPt0eAWttn5jYkuFuTHuFPSCTap0U:moRt3nNY5wm4
MD5:	4CB77A38F29CD3B18EDFD9533562D87D
SHA1:	D68FE5004C3902EF62D024279FEE3469EBD4185B
SHA-256:	C17826456CEFC11E1375FF8EE51AFB12C76568D03B113F6FDEB2BC98357001F1
SHA-512:	87D4B0BEAABA2E4A556AAC96ED1E5978872F027BCFDC67AF4BF8E4917E3180CFD9C6CC98E2B7288F8A661A2E40096B026FBF8DA342B9D90724F8C3A39035C434
Malicious:	false
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},fa={},u=function(a,b,c){if(!c\|\|null!=a){c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4187)
Category:	downloaded
Size (bytes):	60120
Entropy (8bit):	5.595654434054277
Encrypted:	false
SSDEEP:	1536:GfHLHqZvYRQcydqUY+0wbpCNK9vEqKe5DLPL9ggRZdiusMATHjgt+jDmJnCERdd+:2HLHqZvAhCq3+0wbpGK9vEqKe5DLPLBK
MD5:	A52E2250ACB213C9EA444007984F63B8
SHA1:	9590E73CF55A6223B2253A6214F11B50651F5D03
SHA-256:	8B84C6B9C7125998812DBFFDD50828F8A3856897C13258AFB77220B7322D67D7
SHA-512:	4D5977EE699C6B85DEEF6364FB79D7857210D808EB5A76E36B3D969ACC629121F1E71F1DE8968524A5832DBB2CEBDE15F5D43B4696C0FC5D817FDAA3896A2CDB
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/4207599684547219402/index.js
Preview:	(function (cjs, an) {..var p; // shortcut to reference prototypes.var lib={};var ss={};var img={};.lib.ssMetadata = [];...(lib.AnMovieClip = function(){..this.actionFrames = [];..this.ignorePause = false;..this.gotoAndPlay = function(positionOrLabel){...cjs.MovieClip.prototype.gotoAndPlay.call(this,positionOrLabel);..}..this.play = function(){...cjs.MovieClip.prototype.play.call(this);..}..this.gotoAndStop = function(positionOrLabel){...cjs.MovieClip.prototype.gotoAndStop.call(this,positionOrLabel);..}..this.stop = function(){...cjs.MovieClip.prototype.stop.call(this);..}.}).prototype = p = new cjs.MovieClip();.// symbols:....(lib.bg = function() {..this.initialize(img.bg);.}).prototype = p = new cjs.Bitmap();.p.nominalBounds = new cjs.Rectangle(0,0,600,1200);...(lib.cta = function() {..this.initialize(img.cta);.}).prototype = p = new cjs.Bitmap();.p.nominalBounds = new cjs.Rectangle(0,0,600,1200);...(lib.cy = function() {..this.initialize(img.cy);.}).prototype = p = new cjs.Bitmap();.

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	440
Entropy (8bit):	5.890318938704006
Encrypted:	false
SSDEEP:	12:6v/7MKQkiUOs0s1b/qgvZAzTIuZsosxVh/M:fVsVh/qgvyzThsoQ8
MD5:	34CB7EA0E3FE637A33E31E8B74A0850E
SHA1:	29176B9ABBA5DF1189C1A6E6A695F3152DD48D32
SHA-256:	C99DE94CB887E8C3236DD934C1A675EBD453FC8872A7291639D81D07E331FE48
SHA-512:	2597E629F60613FDD220AF44E52EA94AC3F62C6C1EEC2709BEC10DC9A9196833F668F9762C466C9999BA905E4ABDB469FD32365C854C39C5F9C2667D970A498A
Malicious:	false
URL:	https://interactiveds.com.au/IDSau/wp-content/themes/twentyeleven/images/search.png
Preview:	.PNG........IHDR..............W.?....PLTE..................................................................................................................................................................F.m%...6tRNS.................. "#$&(,.0239:<ABEFHIKLPPQTWY[\\]^_`a........IDAT......BP...#D...(.h0....d...C.....o."!..D.r ......z...Lt...JZ.9..wT..CpxEe..B.Y...nQ..Ci..F..xr.u...5a.."..-..........C.$Sr....7...Nz..9....IEND.B`.

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2818), with no line terminators
Category:	downloaded
Size (bytes):	2818
Entropy (8bit):	5.650905162693185
Encrypted:	false
SSDEEP:	48:CfOlaiUpGBlMJOB0edCKAHVTg77+ysGJdNa0BlsC8t5nC5tq:Cf4aic3sdCb47FsyyC78tetq
MD5:	85CDBA238725CD9E4765F636F3E76F30
SHA1:	0A52BE633D149BD97FB81B64A9CF606599B6AC2E
SHA-256:	3D706F9D85A4FFAA0677B03488A24DA37A1CBFF3C707A4B8A1775DED75FB6427
SHA-512:	82166A1BA8422CD0EA485C3E956BFA45DC5AAD505E686EC6FE7277459C90FBBBBB852C169347731E2654ECA437E90AB65CBCBAA202B23693D9A77962050EF70A
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=66226892&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?v

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8838)
Category:	downloaded
Size (bytes):	8895
Entropy (8bit):	5.1996684005721825
Encrypted:	false
SSDEEP:	192:o3dlypTmDGw0x6llT9xBX3U3ZkIMI9c8DuhdvhQ:oChmjlZTxcZOIO8F
MD5:	B3190890002BCE0FCAF10A33C1B63A2D
SHA1:	33771456769F98FB046F948B0B9D498ECD1E6930
SHA-256:	B4208C430FB204FC4903653C1C36F9832E2C3BFB742A6828E96878E328D8E26E
SHA-512:	526D1EFB6905015E917808A10F07F81A8C4CCB7F8396C0BD0E23743432CCCBE219705B10CF95EA0A475D59B4AB569A4D99044EF95458AE26AAAC56AD25FD837C
Malicious:	false
URL:	https://ap.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702
Preview:	/* sovrn_stndalne_beacon v0.0.1 .Updated : 2023-07-31 */.window.sovrn=window.sovrn\|\|{},sovrn.auction=sovrn.auction\|\|{};let beaconFlag=!1,cmpVersion=0;sovrn.auction={doNotTrack:function(n,t){n=n\|\|navigator,t=t\|\|window;var e=sovrn.auction.readCookie("tracking_optout");return"yes"===n.doNotTrack\|\|"1"===n.doNotTrack\|\|"1"===n.msDoNotTrack\|\|"1"===t.doNotTrack\|\|"1"===e},readCookie:function(n){for(var t=n+"=",e=document.cookie.split(";"),o=0;o<e.length;o++){for(var a=e[o];" "===a.charAt(0);)a=a.substring(1,a.length);if(0===a.indexOf(t))return a.substring(t.length,a.length)}return null},sendBeacon:function(){sovrn.auction.beaconConfig=sovrn.auction.getParams(sovrn.auction.getScriptTag());try{var n;if(beaconFlag)return!1;"sovrn_beacon",(n=sovrn.auction.createiFrame("sovrn_beacon",1,1)).src=sovrn.auction.getBeaconURL(),document.body.appendChild(n),beaconFlag=!0}catch(n){return!1}return!0},getParams:function(n){var t,e,o=n.getAttribute("id"),a=document.getElementById(o);return null!=a&&(currentTag

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1456 x 180, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	20470
Entropy (8bit):	7.9772229769135885
Encrypted:	false
SSDEEP:	384:SR37Zd0VArMfSiCfBQrcPp30mPJv62lm8WY057Z02w4QdgE5:SpZdaAAq2MpjZ62k8WFa2w4Q6+
MD5:	4E46CB2EC72EF06E907D1A19B0D4DCBC
SHA1:	E4ED6CD69DA8EF079BCD2B9D49339A2258FBD804
SHA-256:	10A2B484FBEC67138C8FD82CCA3557B5312472D4236E58A15B5D8EC6D7972B6E
SHA-512:	0ED57ADDC3730FDAB3942912B9D0538D1AE3E4D5B9C67B6C73D1652E7D5E1CE685308D6D341A4D5556F625B88187949EA9BFA3E05AD9543F9C5A201EC795DE78
Malicious:	false
Preview:	.PNG........IHDR.............r..8....PLTE...........................=HH.....................9FF....................................?KJ...............5BB0==CNN......8HH;??=DD+76FINGLL......TW]kos......]dp...GLTaht......9;A.DCvryY]hz.....~.....HLU...148$%(...JMSosz.nn...<>CZ_i......:;;>>>-1816>777))('+1EEE......TTT...)-4...AAA..._gwOOO%(....###"%8<Fv..5:CIII%%%^esku.nx.!! hr.,,+.... %333.....dm~...:?I[cq......JP[000.......z..go....q\|....\|..aj{XXX.....Zan........LLL......>CL[[[.........AFP.....___t..~........SZgW^k...CIScccFLWPWdNT`...ciwfm{jjj.........www}}}kr.......gggnnn......sss..................t\|....}.................z.........sy...................uH..J..YdG.eG.SSeb^0 .i+(..y.Z.fB...NtRNS............)..#......08..gL.A..zU...]r....E...ug....]..u...............v.....L.IDATx...=..`..a.m.:AGp.~(Dt..`.C .)i..-.3..x...........................................................4.EY.......M.pZ.v..i.._.YQ..4..m.../.a...1...Zb..s..4.i......:.u..&O..{w..D..p.;

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1147)
Category:	downloaded
Size (bytes):	1215
Entropy (8bit):	5.482473075299188
Encrypted:	false
SSDEEP:	24:2eo9uNoM8r8LxIL3bnNzH9MbjMjJzJticYmRVf:2eCuNoM8R7bnNzCHMjDImRx
MD5:	CB501DCC2D8B5A200D61F158C5C77B0E
SHA1:	FBDB356774013F0794F5F18B0C41F6076E0276F4
SHA-256:	B69FD5C4EC1B79B8542F57EC7A2D78CF38FD14B151B7D1FCED729C080F385F70
SHA-512:	E256C0CB2A958F1044C745D76DDADE348123E39A5A17FE54F87D526DA8BDF8D6820FB52482AC85A4F5B3EE6784474494902C48C9F17E53EAF8C7338C2C4F29D7
Malicious:	false
URL:	https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=
Preview:	<html>.<head><title>Pixels</title></head>.<body>..<img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9"><img src="https://dm-us.hybrid.ai/match?id=412&gdpr=0"><img src="https://t.adx.opera.com/pub/sync?pubid=pub9322105895424"><img src="https://cookies.nextmillmedia.com/sync?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D557617007%26val%3D%5BNMUID%5D"><img src="https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=3"><img src="https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fu.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537106470%26val%3D[sas_uid]"><img src="https://bh.contextweb.com/bh/rtset?pid=562539&ev=2b54fb5c-44a3-088a-25af-cc01d824051c&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D545637763%26val%3D%%VGUID%%"><img src="https://us-u.openx.net/w/1.0/cm?id=2b29b5e1-7836-48c4-a896-43668f76f459&r=https://dpm.demdex.net/ibs

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2674
Entropy (8bit):	5.406005055247683
Encrypted:	false
SSDEEP:	48:kHbL4zWGO5bBHGOox1GOGU9dNbFGOFgr51jGO+o26dGOUj5MCGOSy9DOGOGvW:I4pEBmbxkhYDb0Ib1xGDyPFvW
MD5:	0FB32A497A82A201CB0809A95029184D
SHA1:	520F4D46C552976EA0A22A15B9C78053535C6F2E
SHA-256:	B53200377D05D8E2CA257F4EDA1E4770774734AEA45D9705D534F474991F35A4
SHA-512:	F9ACDF07CE6B85FA79CB5293C72D4FDD07F91FCC00A37CB0DFF45FBCD53F3F7FEBF3A8D9E576FF1DD66754C9C2FEEDD6950967DEF316C21A4513BC2DDE9E915E
Malicious:	false
URL:	https://rtb.gumgum.com/usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=0&gdpr_consent=&us_privacy=" style="display:none;"/>.<img src="https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D" style="display:none;"/>.<img src="https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=" style="display:none;"/>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyYi0xZmQzZWQzYTIzN2I=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:none;"></iframe>.<iframe src="https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fu

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/4ac1ed76-b196-aea8-5c9f-f2fc8e6bce0d?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8475
Entropy (8bit):	4.815706423582232
Encrypted:	false
SSDEEP:	192:Qapkxmi83QDRG2tDcJphZccwZ025ljNXHAN3ZhClf2CcL:QaHioQDRxSJpfO0clJXAJClC
MD5:	60320AB513144B28A8734AC8124B8D14
SHA1:	FB21185F0B96A91650819647A49B2ABE73DA93F2
SHA-256:	80D96F20D9BD725CC314B80C9966CAD13D32C6664ABF3EEA1A9F86842B7D5E5B
SHA-512:	3E013C95C4B3CC6FAF10BDA622587A1DC45C9AA0AE031D10B80C183D495E00D54273B74494A0915BD1C268D1F6DA452247A7831140D31FB4090E466F77119563
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/themes/mts_schema/js/customscript.js
Preview:	jQuery.fn.exists = function(callback) {. var args = [].slice.call(arguments, 1);. if (this.length) {. callback.call(this, args);. }. return this;.};../----------------------------------------------------./ Show/hide Scroll to top./--------------------------------------------------/.jQuery(document).ready(function($) {..//move-to-top arrow..jQuery("body").prepend("<a id='move-to-top' class='animate ' href='#blog'><i class='fa fa-angle-double-up'></i></a>");...var scrollDes = 'html,body';../Opera does a strange thing if we use 'html' and 'body' together so my solution is to do the UA sniffing thing/..if(navigator.userAgent.match(/opera/i)){...scrollDes = 'html';..}..//show ,hide..jQuery(window).scroll(function () {...if (jQuery(this).scrollTop() > 160) {....jQuery('#move-to-top').addClass('filling').removeClass('hiding');...} else {....jQuery('#move-to-top').removeClass('filling').addClass('hiding');...}..});.});.../----------------------------------------------------./ Ma

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 782x442, components 3
Category:	downloaded
Size (bytes):	14395
Entropy (8bit):	7.8170002791605935
Encrypted:	false
SSDEEP:	192:yfMUOlwNQS38NktCNyj+J6fkxaxixPY9FhC35Hi97s8nU0HYz1O5guIZenWYKSML:+oGHsCtjjgMmIFU5ipHBhKSTpOi5O3z
MD5:	73B85473A13FCF73F7767AFB4D29FECA
SHA1:	85A86B84F8A50559DCD35E6F62E0540291DC1671
SHA-256:	6F918E479D2FA725AE3B5B278363AD28E31C811573C4D7744F7628FBEC56D51B
SHA-512:	2584E326A28ADF4A267B0D5FEA000A140DB7844A693321691E7E81671390DA40FB7C52694A1154AF703EC395C5CD1B9DC201B2B4D0E28114A44FFEFD27C6FC7C
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcR5dZgxJ7Gd_yXb34L1UdQ27Fhauppk7bjU-LjmhIygOfPIgZP1F0IHtrAh7w&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777..........."........................................J.......................!1..A."2q..3Qa...#...BRr.$%4b...5cst..&6CSd...................................."......................1.A.!Q."Ra............?..0.$ .B.!........`.`X%.C..b.<.@C..B.`.......G....L.&.H..X"@...B.0...H.H...'.......-./f.o...V~..x.....wY.$."Y<Oi...TA..L.!.....T..\...\..aUL.d..+......aT..z.T.Q",SP.d....-.j-...SZ..iG,..<.M.h....O.c...W...5..r.......,./.-..)......4z8l.G....3..K..cV...\|...2...k@"......A."....J....:..W..P_}.4u.e.(hbC.....@...d$L....1\L..h.E..(.......A....`...`.Q.`.4......!..x..@0. K..H.5....L...`.... ....X....X..A .,...A.H.".......,..X......`....,..Z.........,..G.......3....".6 ..Lbe.e2,.......(....l.dY6...k+....1......{..........&.Z...c.....[C....-.7.d....R.r....Z.U.k.C....5....9'......p..TU.....k$...#.. .8.......

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	359
Entropy (8bit):	4.303670588180171
Encrypted:	false
SSDEEP:	6:SJL/B9pX9D90lESaKSoET4ImRKXIAcAifi8FtUSFLbF/hViXwGb:61X9D9HdKoT4sXIZFtjJhViPb
MD5:	85E198B701A5ADF4685113436597BB98
SHA1:	4C8302FD62281E494772A95C183CC04694773CA0
SHA-256:	8C4FC04634A28970E4A08A3F3A9E5B605FE4BAFBC4A91BA48ECD48A486A61825
SHA-512:	7B4984D844C9F518519F05179A6D559197D2106DBA1354B237EE674FBB33949DA167A6B11641D19C62B65C0659A266FD000060844E7239EFD731A6E1626FE114
Malicious:	false
URL:	https://scripts.mediavine.com/sync/check
Preview:	. <html>. <body>. <script>. document.cookie = 's=1;SameSite=None;Secure';. (function() {. if (!window.parent) return;. var msg = /s=1/.test(document.cookie) ? '3pc.supported' : '3pc.unsupported';. window.parent.postMessage(msg, '*');. })();. </script>. </body>. </html>

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2015
Entropy (8bit):	7.83912812483207
Encrypted:	false
SSDEEP:	48:ePN+5TRX/xKs4s9k/+o1U0CkhnMB5PlW9Ug9bR61V:eMJ6sq//U0BhnMDNw9NcV
MD5:	197418B5B27995869A1DACF196494212
SHA1:	07FCEC763A26210D15CF71A60F3605765042421B
SHA-256:	06213EBC42B4FE409727BF1D58DB15EB7B6D7950A378BD677BC36A24A7A9F213
SHA-512:	1517101083C0B766370AB16AD2187256D57A1CFA20BDBBC1D5355D8B1D71D6987C6F3B1ABE31281750E5D15FC9F8F437DAF740856999A63AF8619C2E72365194
Malicious:	false
URL:	https://secure.gravatar.com/avatar/6351d5c8c991067a7c217f9548f3760e?s=80&d=identicon&r=g
Preview:	.PNG........IHDR...P...P............pHYs..........+......IDATx.._h[U....5..K.G..._.\..a.e.n.>.7aU((.......".a..e.`(.}p.7..]1Rt...)....e).4..5.5.}._.....'wk..<...............\|....8.P..#]ZM1...f...Z.ej.J9?web...?\|=~.v..].."\|9.\......_.aq<..^S...#..bk-..%....D.-ak-.X .!..l.)P\|$.=..>.%...)}D....G..PU......J.Gh.PQ.4}D..P.>B+.....W[...G......>..R..>B-...Y.>.B...JN...r.k.o.......6J!..D...uC.+7r....B2......6J.tvR"Pj....G/...r.@......O./......=.F.}.#]...C......"...A.....E?ai.......W.....#y.`w9p.. ..[..../,.(N.T.!.X.......#.$J......).#..+5.....#...),.$.Z....JK.8}j...Dq.....c.G..JK!..E.!.(N....^y.I...R...#..).v!.G>.7$....C.`[E.0rm..m...$1..C..a..\.Gt..!.Hs..$.$...$.ap...^.\.&...0~~.{l.%..l..#\.n......o....[\.y.p7{..1.g..0.D...l......O.W..].n.8...o.F&.F&...q........{.{...n..>.r.L.x.ZK..7at.t....X....>....z7......8v8...a.......^..L......F..{as.2....b.......o.S.).G..Z4.u.pj.....W\.`.@.J..a+..N.e...sr.J......q..z......Wj."s.l.8Bn.Mn%D,..r....M.`.I.P....6EyJ..j..

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpmt9r_1tz", last modified: Thu May 27 18:30:51 2021, max compression, original size modulo 2^32 24615
Category:	downloaded
Size (bytes):	7927
Entropy (8bit):	7.971132676007268
Encrypted:	false
SSDEEP:	192:9Kc5LTj0P5wffE5IkNpgSuBytYo5x17NS4UkRDS8hO86A8PE:9H+RwfpkNPV/T17NcwDSVFA8PE
MD5:	DF5542B88BC0E368C6999754A5B9E2BA
SHA1:	54F17142FAEB7C882FEE3BF67D537733E75E43AE
SHA-256:	B82DA9703A35C5436F9E47711F5B95D5357F02D590CB39DBA99355B9B073561F
SHA-512:	3BF0A63824E0D30C5A71CAE83DCEEE6E2A587FC5B9B7E81943E42DC448F9654998DA35A0BDC309B40D7D3BCFC3C95AC3D3322D1394B21542578FB2BA69EADC28
Malicious:	false
URL:	https://oa.openxcdn.net/esp.js
Preview:	....[.`..tmpmt9r_1tz..<.{.6..E.ueb..V.GJ....d7....mOQ}..IlhR%!;....73.H...t..].........7Q2Mo.....l.Ld.&.dw.a...]10.;....h.Q2f...,..'>,.L.....(.....~...K..(....N.0.....)..3.7q.=....k.]..g.$..wja....2/.K.^.\."&..Y...,].L.R.;...D.^..1.B.I.....(...{.t.y...sv{u.....dz&.(....^o..m9P7^..y.NW.p..uv.`et3.{.......{..se.......f....~.o...r.3'....^5R...4.4r.L.R........KlA=..<.W.t..W..0.G.PNt..,.,.\.N.X0Xi...r.0......../.2f.,A.%-L..lQA.4...dd.Kp't..\.picItCM.e...'.-...&1.R....2p...u..........F`.....i.+..H..../.%...Ec7d\|....F1..d.$.._...!."..i"..]1....r.e"O.k\|..HpqXQ.e.\...a..<..l.....0.&n:z..-{..T.0.^.\...{..r...i.9_q'....`.e..F.....j..4..V0V....a..\|b..x..U}.p....UJ.:.. ..E.&k.,h....1P.Uje.~@..4H.H...4[......8<.Wa~.L^..kO..B#KIQ....[...m.V.z...`.&.h..o.H.k..$.....r.Vqg.4.l. +j..._...^OTd...0. %.C./.Fu5.V.......M....0.w.%..{../.....+2=.a.K...bk... &+.Z0...._.(.g..B.{..e.Dy'....m'[%.v!e.L.e,$X+.A`...}.AF..C..#E-s%."..)h... .....z....1p..i.q....9......%..W

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537072979&val=ViN9mkBO1Rd9xZ5
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
URL:	https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
URL:	https://mathblog.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	79088
Entropy (8bit):	7.62925437526816
Encrypted:	false
SSDEEP:	1536:ijLjDlngW/CAI+HZpfB6gz4Daa/R2p/1PviCdzjRl7+AUFy1EmKUA23:cvD1gWKwZppq3R21tiCdzjRlaAuPmKJA
MD5:	64232028E6A966393125C6656FC6C888
SHA1:	5009475437C204CB68035A96496A55518416E817
SHA-256:	87A92E159459B46D503D7CA9301E076E886BF1EB91ABAAE349F8B6A69DEB2571
SHA-512:	2CBD3C27F22486C2BB2521D158C2C414588EAD3769E8EA414255A3374118FAA87319E846578D6010D3761088FD00C3499DD4BE402B697CD389546957AD0EEB46
Malicious:	false
Preview:	.PNG........IHDR..............!......pHYs...........~... .IDATx.....$U}8.W....,.r# ........x..>...(A....Q#.h4^.B%.}....x!".".....]._......L.tUWU...)g..........{..d#@.5....m..Y.../Ny.Y.~.d....<-.4/..YJ...E..?..;..x....... @.@...E.7.U..u.........^.............^....!~.~......tu..j......F.@.....6....0..Z.qn7.o...o../...o.?......n#@....... @`....qM.W...W........N..~F..H\|.......V.;Gh.#...n.vY\|..s\|..S..S..s.8V...0v...... @.........^........%......q.Hp...6..F( .5B\|U.............~...1.HT.=..6.... @....5.(Fq........?.D........m..T .U...S FUm.-.w.}..].j<o..&@.......h....D..{..?Fk]..j....H`...D...HVm.C...C......{..... @....... 0^...[EB.;......Hj.q.......$..o...D...Ki.NJ.FS..{..*...!...... @...................7..#.U... 0C....B9m\|."a5/Z_L.<(.Cb.`...@...... @.....f#PL3<'..........O...S.H`M.....D...E1.......xu..}...h9..... @....%....=...=...\|!..DB+... p......~..@<.p..?..pX...c...... @.......R..Hd}>.X_....v....@..$....b.\ FYu..bd.....=c.. @....... @...

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2015
Entropy (8bit):	7.83912812483207
Encrypted:	false
SSDEEP:	48:ePN+5TRX/xKs4s9k/+o1U0CkhnMB5PlW9Ug9bR61V:eMJ6sq//U0BhnMDNw9NcV
MD5:	197418B5B27995869A1DACF196494212
SHA1:	07FCEC763A26210D15CF71A60F3605765042421B
SHA-256:	06213EBC42B4FE409727BF1D58DB15EB7B6D7950A378BD677BC36A24A7A9F213
SHA-512:	1517101083C0B766370AB16AD2187256D57A1CFA20BDBBC1D5355D8B1D71D6987C6F3B1ABE31281750E5D15FC9F8F437DAF740856999A63AF8619C2E72365194
Malicious:	false
Preview:	.PNG........IHDR...P...P............pHYs..........+......IDATx.._h[U....5..K.G..._.\..a.e.n.>.7aU((.......".a..e.`(.}p.7..]1Rt...)....e).4..5.5.}._.....'wk..<...............\|....8.P..#]ZM1...f...Z.ej.J9?web...?\|=~.v..].."\|9.\......_.aq<..^S...#..bk-..%....D.-ak-.X .!..l.)P\|$.=..>.%...)}D....G..PU......J.Gh.PQ.4}D..P.>B+.....W[...G......>..R..>B-...Y.>.B...JN...r.k.o.......6J!..D...uC.+7r....B2......6J.tvR"Pj....G/...r.@......O./......=.F.}.#]...C......"...A.....E?ai.......W.....#y.`w9p.. ..[..../,.(N.T.!.X.......#.$J......).#..+5.....#...),.$.Z....JK.8}j...Dq.....c.G..JK!..E.!.(N....^y.I...R...#..).v!.G>.7$....C.`[E.0rm..m...$1..C..a..\.Gt..!.Hs..$.$...$.ap...^.\.&...0~~.{l.%..l..#\.n......o....[\.y.p7{..1.g..0.D...l......O.W..].n.8...o.F&.F&...q........{.{...n..>.r.L.x.ZK..7at.t....X....>....z7......8v8...a.......^..L......F..{as.2....b.......o.S.).G..Z4.u.pj.....W\.`.@.J..a+..N.e...sr.J......q..z......Wj."s.l.8Bn.Mn%D,..r....M.`.I.P....6EyJ..j..

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://eu-u.openx.net/w/1.0/sd?id=537113484&val=8152669554817989381
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17484), with no line terminators
Category:	downloaded
Size (bytes):	17484
Entropy (8bit):	5.223369162348979
Encrypted:	false
SSDEEP:	384:8Vrn5Fru8dqCDCl8J2RfyoJaOjtofZk1kC4cSWDTkZJwkXI/:8pa8dqCDCiJ+qooOKhIkCHSWDTWp4/
MD5:	230FE9426CA729314526F167679DA3C0
SHA1:	9F438FCC78C9C2405A962A9808FC5B7E1791C7D3
SHA-256:	27961AB8C37CDDAD89230364167C048C6377A80E38542A5FFBCA600FAF4098EA
SHA-512:	9699E84143E68BEE6B8B7C6A07F25BF2188658C47AF5284607F93135331FB929CE953956D9C6236A44B1CE4DB3564A97F568D7CCA6E9F6EE5E80EB9C8470D32E
Malicious:	false
URL:	https://pghub.io/js/pandg-sdk.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=0)}([function(t,e,n){"use strict";n.r(e);var r,o,a,i,u,c=Object({name:"P&G",pixelUrl:"https:/

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (625), with no line terminators
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	5.469943017692108
Encrypted:	false
SSDEEP:	12:C3HE4PVhH3pMG0R1jMBeVhH3hyIwCpThs13ZFChI1PkDp:C049xaRiaxNtC1JMyKp
MD5:	B855BA73A6C92FCBD5DBE8362391F631
SHA1:	0DDA4652B067B62B90FCEFEFC37398F92F87A2F3
SHA-256:	2DCE9784FBA3E77AFF2A5DA438111BAA68B489EDAC38C7895D318323B8200654
SHA-512:	E5B1B6C3DBF0B93C8A5B17D2F7D386CB74A5F33AA615F5770688C8012C44AB940E65ADB8DEF9015FCCB320FCE3FF32708911BE7B547F096FCA943B80C72C4847
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=15579515&p=137711&s=137812&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1456 x 180, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	20470
Entropy (8bit):	7.9772229769135885
Encrypted:	false
SSDEEP:	384:SR37Zd0VArMfSiCfBQrcPp30mPJv62lm8WY057Z02w4QdgE5:SpZdaAAq2MpjZ62k8WFa2w4Q6+
MD5:	4E46CB2EC72EF06E907D1A19B0D4DCBC
SHA1:	E4ED6CD69DA8EF079BCD2B9D49339A2258FBD804
SHA-256:	10A2B484FBEC67138C8FD82CCA3557B5312472D4236E58A15B5D8EC6D7972B6E
SHA-512:	0ED57ADDC3730FDAB3942912B9D0538D1AE3E4D5B9C67B6C73D1652E7D5E1CE685308D6D341A4D5556F625B88187949EA9BFA3E05AD9543F9C5A201EC795DE78
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/3291718278215255336/images/cl.png?1699399357903
Preview:	.PNG........IHDR.............r..8....PLTE...........................=HH.....................9FF....................................?KJ...............5BB0==CNN......8HH;??=DD+76FINGLL......TW]kos......]dp...GLTaht......9;A.DCvryY]hz.....~.....HLU...148$%(...JMSosz.nn...<>CZ_i......:;;>>>-1816>777))('+1EEE......TTT...)-4...AAA..._gwOOO%(....###"%8<Fv..5:CIII%%%^esku.nx.!! hr.,,+.... %333.....dm~...:?I[cq......JP[000.......z..go....q\|....\|..aj{XXX.....Zan........LLL......>CL[[[.........AFP.....___t..~........SZgW^k...CIScccFLWPWdNT`...ciwfm{jjj.........www}}}kr.......gggnnn......sss..................t\|....}.................z.........sy...................uH..J..YdG.eG.SSeb^0 .i+(..y.Z.fB...NtRNS............)..#......08..gL.A..zU...]r....E...ug....]..u...............v.....L.IDATx...=..`..a.m.:AGp.~(Dt..`.C .)i..-.3..x...........................................................4.EY.......M.pZ.v..i.._.YQ..4..m.../.a...1...Zb..s..4.i......:.u..&O..{w..D..p.;

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	143
Entropy (8bit):	5.079318363208902
Encrypted:	false
SSDEEP:	3:PIy9JL/ZSGKHjJMzVJu+1vK3VYrSLIzECAXhxMAFjWAEtv0Gb:TJL/sGeMRJVSOGLIoDXhxVFjWAEd0Gb
MD5:	E4E31B474D3E0B577B3C8856E91F8659
SHA1:	A81311F7FCFA9B6B23A24D4E5C976D5F75B1B9B7
SHA-256:	18088C10E79C926292732AF98A0CE470E90F3FBCBA4BB4896AB3310C2D94E421
SHA-512:	A07961EB39C4CD4E39EE19E2C675E64E5BA5367DAA18E2F76A23772ABD62F46B002E6BE8FB0F35A70616941178FACC8DF579C4A68E5811B74313C12806AAFAE3
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
Preview:	<!DOCTYPE HTML PUBLIC>.<html>. <head>. <meta http-equiv="refresh" content="0;url=https://www.google.com/pagead/drt/ui" />. </head>.</html>

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (625), with no line terminators
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	5.469943017692108
Encrypted:	false
SSDEEP:	12:C3HE4PVhH3pMG0R1jMBeVhH3hyIwCpThs13ZFChI1PkDp:C049xaRiaxNtC1JMyKp
MD5:	B855BA73A6C92FCBD5DBE8362391F631
SHA1:	0DDA4652B067B62B90FCEFEFC37398F92F87A2F3
SHA-256:	2DCE9784FBA3E77AFF2A5DA438111BAA68B489EDAC38C7895D318323B8200654
SHA-512:	E5B1B6C3DBF0B93C8A5B17D2F7D386CB74A5F33AA615F5770688C8012C44AB940E65ADB8DEF9015FCCB320FCE3FF32708911BE7B547F096FCA943B80C72C4847
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=40260786&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 238, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	23383
Entropy (8bit):	7.9687985369445355
Encrypted:	false
SSDEEP:	384:8RamXAdpDtXmOd7mGae1Z67GWrX1mHMKMB+DeP0AnacGJqqqgfX62mHtJna:rgsvWOdyZe1YyWj1EtqPlCqU62CLa
MD5:	9FDA4BCA54D2D78D32DF54AFA99982B3
SHA1:	EA65A6D9FECF79E465F207EC59EC2F7CBE048507
SHA-256:	4EF93C353D5EF892EF9008651E0ED578759C0C309AF07A282FA5576BC273317A
SHA-512:	78F1B7483D2D2CECB986A0A8AB5C660907B820343ECA9652B47CEA7B18B8E19240655FC732351BDCF9FC4BD2B4FC1782C95388E4CDB6E28C8A5EEF8F074EEC3D
Malicious:	false
URL:	https://mathblog.com/images/math-books.png
Preview:	.PNG........IHDR.............'u.....tEXtSoftware.Adobe ImageReadyq.e<....PLTE467lno......i......&%&............t...n........um.........DFG[ekO40...iG8.u......gWtPE.XI......UVX..l3-.....n#.<BD...........................gx.) ....T[aLRV...tk...I%..qW...rdX.2(P..FLP9;=...TC@.F=...d../02............../((........YSD++-....\|`........]N...E;<...0,/......d^^610.....~.....z... !...#..[_].........OMPMNK@?7............'-*..............................4w....YmIDATx.}.C.G..n..jP.,.;...........&b......"..[..W..s.......}.D......\fvG./.......9.....7....e_4/../.<...&....v..n.._vZm...l.'.......7$....W.M'.....Z..^G.u...AgO..O.v.z..N...d...3......A.......M.e.-..7.G...E.~....`.v.....h.O-....o.s.o.lB.v......./..Av.h..sA{.}.C.v..-a....Y."^...5...m@..s.....E.x.~.p.. J.n....!.N..T...#.o...._t..xC`/.._..w..@.4-.i........5......W. ].T.X."Q...[....N..o.v.,4-.....D...lw...../...[VO...._..$..8...r<..{u!.k.&..7.o...-..j.....R7.Vo....m.....V.X7$.&...V.....9.t.

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1545), with no line terminators
Category:	downloaded
Size (bytes):	1545
Entropy (8bit):	5.497041533207216
Encrypted:	false
SSDEEP:	24:2KPPtHGuadP1GYcT1nGS6Q1QX0q/Fyx3yVAuN9dIJIta6OfJCYh4v/HuIugHINY:26PtUt+ThGS68Qkuyx3+3N7I1fQYyH
MD5:	BC589D627705654BD4ADB9C66E5EC0B2
SHA1:	6E9742676FBDD95FDF21861E84C90A21FA001FEA
SHA-256:	531736A43C86549B383741362F2322444F6259C9C47059D485BCE32E12E0619B
SHA-512:	74BBEB7003DE74D192850419CE6136F45BFDA9C98E0D31B837A108D92C8DE0C35696092D09D49F62FB6C1F17A72622A6D10ECC24EA23E0EFEA1533079BB37C99
Malicious:	false
URL:	https://tps.doubleverify.com/visit.js?gdpr=&gdpr_consent=&flvr=0&ttmms=1085&ttfrms=96&brid=3&brver=109.0.0.0&bridua=3&bds=1&tstype=128&eparams=DC4FC%3Dl9EEADTbpTauTau%3E2E93%3D%408%5D4%40%3ETauU2%3F4r92%3A%3Fl9EEADTbpTauTau%3E2E93%3D%408%5D4%40%3ETar9EEADTbpTauTaueh7224gdg4d5c55%6076d%60e45_b2f77d2c%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3ETar9EEADTbpTauTaueh7224gdg4d5c55%6076d%60e45_b2f77d2c%5DD2767C2%3E6%5D8%40%408%3D6DJ%3F5%3A42E%3A%40%3F%5D4%40%3E&srcurlD=0&aUrlD=0&ssl=https:&dfs=2522&ddur=1469&uid=1702413636290260&jsCallback=dvCallback_1702413636290498&dvtagver=6.1.src&navUa=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F109.0.0.0%20Safari%2F537.36&htmlmsging=1&chro=1&hist=1&winh=600&winw=300&wouh=0&wouw=0&scah=984&scaw=1280&jsver=5125&tgjsver=5125&lvvn=28&m1=15&refD=2&referrer=https%3A%2F%2F69faac858c5d4dd1fe516cd03a7ff5a4.safeframe.googlesyndication.com%2Fsafeframe%2F1-0-40%2Fhtml%2Fcontainer.html&sfe=1&fcifrms=17&brh=1&dvp_epl=330&noc=4&nav_pltfrm=Win32&ctx=750202&cmp=29001397&sid=5744950&plc=353807570&crt=206432296&btreg=574509829&btadsrv=doubleclick&adsrv=1&advid=5677814&errorURL=https://tps.doubleverify.com/visit.jpg&mib=0&dvp_rcp=2&dvp_htec=2&dvp_seem=2&dvp_tuk=1&dvp_sukv=588158660.9481436&ee_dp_sukv=588158660.9481436&dvp_tukv=20089614906.551212&ee_dp_tukv=20089614906.551212&dvp_strhd=0.30000000004656613&dvpx_strhd=0.30000000004656613&dvp_tuid=1016947925882&jurtd=1965401667
Preview:	try{var dv_win = window._dv_win \|\| window.parent._dv_win; dv_win['dvCallback_1702413636290498']($dv,window,'a5d596b854ba49ce89abe4a90929feac','tpsc-ue1.doubleverify.com',{"ee":{"cvs":{"size":60,"dur":1000,"cons":1}}});}catch(e){try{var image=window.document.createElement('img');image.src=('https://tps.doubleverify.com/visit.jpg'\|\|(window.location.protocol+'//tps30.doubleverify.com/visit.jpg'))+'?ctx=818052&cmp=1619415&dvtagver=6.1.src&dvp_cbError='+encodeURIComponent(e.message)}catch(e){}}var dvObj=$dv;var impId='a5d596b854ba49ce89abe4a90929feac';var dup='';dvObj.pubSub.subscribe('ImpressionServed',impId,'ResearchIPv6FromAkamai',function(){ var tagObj = dvObj.tags[impId]; var serverName = tagObj['ServerPublicDns'].substr(0, tagObj['ServerPublicDns'].indexOf('.')); var tpsServerUrl = 'https://cdn.doubleverify.com/redirect/?host=' + serverName + '&param=akipv6&impid=' + impId + '&dup=' + dup + '&eoid=1000'; dvObj.domUtilities.addImage(tpsServerUrl, null, true);});$dv.tags[$uid].s

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
URL:	https://sync.srv.stackadapt.com/sync?nid=20&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14061
Entropy (8bit):	5.6096980977443165
Encrypted:	false
SSDEEP:	192:o/y/XMYmiG9Ir5zEwTNRhiZqxyHFU1/s3jZi5aTAGoEbIqehlZN+yc4:hncpIPkCT
MD5:	2371135568EEF24255D4BFF01EC173E9
SHA1:	70AD97570DF72685D5F947395A4B95B230B7B1E6
SHA-256:	AADE7746342F608807B7EB107059C842FE200E1FF09E146DB822250055CECAED
SHA-512:	D557E663F1ED55445C4E212D3F863A432819541E44F1FBD4E36C7A1DFD85B8A44E25F4DBA3329F57C3424EDEA5011028278A0DDD49EF1A25093543021072A5E6
Malicious:	false
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0964-0965, U+0980-09FE, U+1CF7, U+1CFA, U+200C-200D, U+20B9, U+25CC;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPj8UvaYr.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	190700
Entropy (8bit):	5.551184377204865
Encrypted:	false
SSDEEP:	3072:c/dZAlCIWYb1jyhbypDWMxMT6/cA9DfFWkPp9D4n:AfIHJmPT6/cA9DfYsM
MD5:	80F1D55A22F04D7DFFEC401D29715DDD
SHA1:	1A44E33CE0C066785F5B3ABF1FEB6D65AAAE5577
SHA-256:	22C60D3D4FF64FDFAAA47E9F74F37116A4ADCF9DF027F5AD667721BCCB8797F6
SHA-512:	5ED80888ABFA3FA00C78752BAAC9BE2B3435794D7FF7B63717C8D7940C62B7420F5565E2F431ACAFE31ECDFB02DBF4A333C1565058AF548F03D07C4DDE78D9CD
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=UA-192905992-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-192905992-1","tag_id":9},{"function":"__rep","vtp_containerId":"UA-192905992-1","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-LYGYJBC3GR"]],"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-192905992-1","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1"

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	125232
Entropy (8bit):	5.986713120877673
Encrypted:	false
SSDEEP:	768:oEWc59UreQNosZrliyNdOP72YK72YQ74272YwlUV/Wi9UreQNo6LStZgUXSgU4UJ:LjsZ1NdOPapan42arUJv6LSDSYrQ4Sz3
MD5:	A1DB399279EB3D0EE755B20B0852B75B
SHA1:	1C11140EBEFE31CB645BAB05FDAF33175DF1D179
SHA-256:	C554DB0777E928D97760D798AF0FA406262BAF14AA48BBFF6C9AC8975722CE79
SHA-512:	AFD652AF6485291616E0C5A76D36D560F3652C93C1D1960A85B977A51C9DACEB46ADC0A49CF908835C49FBE7524FC7F4BCDC37E191CFB06A023B59E09623F24B
Malicious:	false
Preview:	{"/1030006/mathblog/sticky_sidebar":["html",0,0,null,1,600,300,0,1,null,null,null,1,null,[88032331476],[69942876],[29955756],[299148516],[99284],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CPeFg_7gioMDFWnx4wcdwmYIAQ",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-sin

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3863)
Category:	downloaded
Size (bytes):	4318
Entropy (8bit):	5.235114017166525
Encrypted:	false
SSDEEP:	96:n/0LcUnCK4rKqtdArPQtIofoat7jkFrUyGEGg4oRttfPULU:/02KvhL+HtXWoNng4oRttfPULU
MD5:	84AAE84A660AFB0FACEEFAD04E2DB517
SHA1:	717EFD3847228926907E1B1CF98AE566F30CD4FB
SHA-256:	830D83E7DB0B07CB6EE90A4D62C1C7DB0559ABD2CE8ECFB95F66D569B3A60029
SHA-512:	E45F10653A9DCA23EDF794F58307A7A274EB45B61282F9E218B367D838E896F4062358A2F8CF1346BA5A5F09D0684BC5E08C5912DBA51B5960156E591A6593C3
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/themes/mts_schema/js/layzr.min.js
Preview:	/!. Layzr.js 2.0.4 - A small, fast, and modern library for lazy loading images.. * Copyright (c) 2016 Michael Cavalea - http://callmecavs.github.io/layzr.js/. * License: GPL-3.0. */.!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{var t;t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this,t.Layzr=e()}}(function(){var e;return function t(e,n,r){function o(f,u){if(!n[f]){if(!e[f]){var s="function"==typeof require&&require;if(!u&&s)return s(f,!0);if(i)return i(f,!0);var c=new Error("Cannot find module '"+f+"'");throw c.code="MODULE_NOT_FOUND",c}var d=n[f]={exports:{}};e[f][0].call(d.exports,function(t){var n=e[f][1][t];return o(n?n:t)},d,d.exports,t,e,n,r)}return n[f].exports}for(var i="function"==typeof require&&require,f=0;f<r.length;f++)o(r[f]);return o}({1:[function(t,n,r){(function(o){!function(t){if("object"==typeof r&&"undefin

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8688)
Category:	downloaded
Size (bytes):	8710
Entropy (8bit):	5.382317068022089
Encrypted:	false
SSDEEP:	192:BblSfub/hh+EpsR8yp57QctqKdH+LPQKQVyuVi9JknLxPcObQ70RLdYPg44H+:BaEuRdp57Qc9deLPQKQVy99CLNQIe
MD5:	25DE272975F8461C7A1620CE9685B4FA
SHA1:	947D1A933B41F9C0FB8F49FF7C7673AEE09C880A
SHA-256:	432D901EA96AC3BE844F2F177043FA0818E22AB8C8127939E2E86A919AE61102
SHA-512:	423EFE0136630EF74A514C087BE49AF5E49F2AB0E0F35B1930F30B154D6001DB0169FD1ADEAB048EBA42AF57CD73F56A6859BFFC7BF875960FB2505F335ABBD7
Malicious:	false
URL:	https://cdn.doubleverify.com/dvtp_src.js?ctx=750202&cmp=29001397&sid=5744950&plc=353807570&num=&adid=&advid=5677814&adsrv=1&btreg=574509829&btadsrv=doubleclick&crt=206432296&crtname=&chnl=&unit=&pid=&uid=&tagtype=&dvtagver=6.1.src
Preview:	/! v5125 6d78012f /.var __webpack_exports__={};(function(){function e(){try{return(new Date).getTime()}catch(e){return 0}}var t=e(),r={InjectTagError:{id:1,message:"InjectTagError"},LoadTagError:{id:2,message:"LoadTagError"},UnexpectedError:{id:128,message:"UnexpectedError"}},n=function(){},o=U(),i="undefined"==typeof window\|\|"function"!=typeof window.addEventListener,a=function(){var e,t;if(!i){try{M(e=x("about:blank")),t=!N(e)}catch(e){t=!0}try{e&&("function"==typeof e.remove&&e.remove(),e=null)}catch(e){}}return t}(),c=-1,d=function(){try{if(i)return!1;if("object"==typeof omidVerificationProperties&&"web"===omidVerificationProperties.injectionSource)return!0;for(var e=!1,t=window;!1===e&&t;)e=null!==t.document.querySelector("script[src*=omweb-v1]"),t=t===window.top?null:t.parent,c++;return e}catch(e){return!1}}(),u=-1,f=function(){try{if(i\|\|d)return!1;var e=!1,t=window;for(;!1===e&&t;)e=(r=t.omid3p)&&"function"==typeof r.registerSessionObserver&&"function"==typeof r.addEventListen

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	26228
Entropy (8bit):	3.808040201786027
Encrypted:	false
SSDEEP:	384:ADXKGgKPNTnJ3UQunqPWh7TU8ezb+0Hck3yg1ZUikwaXilAEqFGxZuLX2:6rnJ3UQHF8gHVCilAEqF08C
MD5:	D5201A2D6830A6670969ED5A460D5627
SHA1:	529933821DEEA37BAA701A4B71604F926731AF0C
SHA-256:	352E40C680E63173AAA8D4DC720255BC1FA5D53A79F75D631FED45722C5B2CC3
SHA-512:	5A15A7702A00E132634E60DA3A9A205A51BF2448ACB58E3AE30FEB9A0EC92B64319B8FB0488884F091BAF04DA08C2854F6ADB7B9AC79D287365D6853C825F5B6
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/plugins/wp-review-pro/assets/js/jquery.knob.min.js
Preview:	/!jQuery Knob/./*. Downward compatible, touchable dial. . Version: 1.2.12. * Requires: jQuery v1.7+. . Copyright (c) 2012 Anthony Terrien. * Under MIT License (http://www.opensource.org/licenses/mit-license.php). . Thanks to vor, eskimoblood, spiffistan, FabrizioC. /.(function (factory) {. if (typeof exports === 'object') {. // CommonJS. module.exports = factory(require('jquery'));. } else if (typeof define === 'function' && define.amd) {. // AMD. Register as an anonymous module.. define(['jquery'], factory);. } else {. // Browser globals. factory(jQuery);. }.}(function ($) {.. /. Kontrol library. /. "use strict";.. /. Definition of globals and core. /. var k = {}, // kontrol. max = Math.max,. min = Math.min;.. k.c = {};. k.c.d = $(document);. k.c.t = function (e) {. return e.originalEvent.touches.length - 1;. };.. /. Kontrol Object.

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1273)
Category:	downloaded
Size (bytes):	1341
Entropy (8bit):	5.571466591194258
Encrypted:	false
SSDEEP:	24:2eo9uNoM8rt2RSUsSj+tEIfiWfwpK2/KzN9ID8OCFsTBhzBf:2eCuNoM8Z7Us7fio6cnvFsBxBf
MD5:	2D3D57C7E491BBCD542791D017844C59
SHA1:	75472DB1F5A7CEFEBACD90F11777DDE4A1227A64
SHA-256:	5B613D5960CF3FFC2FAC0C9C9F298659B2DA7B13F2FA91BB97DA5240180A35BB
SHA-512:	73C4BFF99DF49E8C1A2CA6C4182470D559716716F1117A0051B4EA219F6CE4A4D9EEE788E6CF4411263810DD0BED2B292C9C63EF9834EF8DAF86E08E28FC6A20
Malicious:	false
URL:	https://u.openx.net/w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=
Preview:	<html>.<head><title>Pixels</title></head>.<body>..<img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9"><img src="https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=f0c208bb-f950-06a8-3e6f-2503e69ff72d"><img src="https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D"><img src="https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID"><img src="https://ad.turn.com/r/cs?pid=9&gdpr=0"><img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/4ac1ed76-b196-aea8-5c9f-f2fc8e6bce0d?gdpr=0"><img src="https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=86d0f74f-3d90-871b-ad

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1456 x 180, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1556
Entropy (8bit):	7.253345873542578
Encrypted:	false
SSDEEP:	24:Zq8tZiWDDmOl44ftBsBs0HWUwU8sBZU9k+6ZlSgf08U2lsRaLzQT6Fs4O7FcfJ:ZqtWPY41KK02TUZ/03AoD27vm4O7FcR
MD5:	B11F3A9CB7EA1D53C2B5AA5558F36E9D
SHA1:	692625040ACDC578AF61C6F18CABE00CB9013C62
SHA-256:	B367411CA1761032463D89483025D5B02B96C80EB6DE73643835FB2BDEB3207A
SHA-512:	4034389EC886F8F9B5140C757EADA2C0E7B74CF759DFD2A1116B050924129AF4D44CD86A38BD826C83BDEC34BBCC20F0ED086095880D90B3DBF95AE7424964D1
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/3291718278215255336/images/cta.png?1699399357903
Preview:	.PNG........IHDR.............r..8...3PLTE..............mt..:...........FP..........~..[c.o.4....tRNS.@..f....iTXtXML:com.adobe.xmp.....<?xpacket begin="."?><r:RDF xmlns:r="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><r:Description xmlns:x="http://ns.adobe.com/xap/1.0/"><x:CreateDate>2023-10-26T14:56:45-00:00</x:CreateDate></r:Description></r:RDF><?xpacket end="r"?>........IDATx.........................................................................`.........._.9....................................e.....(...P.+..\V.@..8.rYq.....e.....(...P.+..\V.@..8.rYq.....e.....(...P.+...o/..P.Est....._...... L....@..v...o.CD...-~..>.Z........"HK.{{.@Y...32.......Cd..5=.y.....0.D.7..!....9.6...`HF....Y.~L.<..[Z:....8\Q.`.Q.P...a..[.....y..Z.W.-...&..r.`.Q..B_....4....=r..+v...F.wp~.W.r.u....,...&.~..1...;0..h..Ik..X..%.u..`.R.'..l"...T.-Z.[.u. Z........u.Z..#..5.6.u...^Bs})..m......3.Y...[{.....q.a...ch!!...^...j.....<.g...A...T...e......&......y.64..`.....1Gbk......

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	5.287698118276452
Encrypted:	false
SSDEEP:	48:bFj15XHuJcXl2E9R2jc2u8aYlPFs3v0YxnHS:FrVl2Emjc2u8bl9sfO
MD5:	391C73545274E78E6615C6449FF6FF1D
SHA1:	C9D581335ABDBFD51679827E8B24F9896CA1DA16
SHA-256:	41D2526E9C4595FC1FC747555BDA18A041033A863A9B2ED180E7B5836918FACD
SHA-512:	843D8CC8703AA9808F7D9807AB4CB24795279A015F1EEB2632C0A289C0427157FEDE3BB988FF857DC994BAD22EC5CA83654B6FBF0FA24390E14816F66072ECAB
Malicious:	false
URL:	https://tpc.googlesyndication.com/pagead/js/r20231207/r20110914/client/load_preloaded_resource_fy2021.js
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&"26"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);"application/xhtml+xml"===l.contentType&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(0<a.length&&!(.01<Math.random())){a=(a=h(document.currentScript))&&"true"===a.getAttribute("data-jc-rcd")?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x1200, components 3
Category:	dropped
Size (bytes):	24690
Entropy (8bit):	7.658984602965332
Encrypted:	false
SSDEEP:	768:Rh1M1pZMxtAqW75Hz95Q62hi2VbhW/oYHI:RhC1puXAqO/B2E2Vg/oyI
MD5:	173CF305E43A0C6110B2BF3F38190E4C
SHA1:	57987D3A935ECDFA9EA6059BC9BE348C9B01360E
SHA-256:	D51AABA2B7984372E30C81723BC2785DE05BA4B34399F17DB3A6C3DBFED4BB43
SHA-512:	A25575AA15415200CD1F9515F25D19F236D47DC7ED5F0C8937DF39E60255415092A6456765D56EADC24CA2BB93231982E9A08143E9762B9EB06155861E71C972
Malicious:	false
Preview:	......Exif..II*.................Ducky............. http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:349C28216EF211EE9197F387ECC8D9F0" xmpMM:InstanceID="xmp.iid:349C28206EF211EE9197F387ECC8D9F0" xmp:CreatorTool="Adobe Photoshop 2024 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="54645C84F3F372B4C7189714A6F4EAF8" stRef:documentID="54645C84F3F372B4C7189714A6F4EAF8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................$..$.#.#.+####+9111119B<<<<<<BBBBBBBBBBBBBBBBBBBBBBBBBBBBB.......#..#2#.#2A2((2ABA=1=ABBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB.

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	872
Entropy (8bit):	5.2842636248306984
Encrypted:	false
SSDEEP:	12:kxPw9uRFNBgHEdQ3+sUZ1lzN9bWJa+sUU1XuzU8K+sUQPbFqH7BMk:kC9uZBH6wbWKjGnAEb
MD5:	C8EABA3F4864C298B6C7F0A09B90436B
SHA1:	6301B53264CC7D06197A6B0904FDBA4E45F123DC
SHA-256:	651B24CDC931BC3427C1E47F81E0E6B45D67585FEFFFF3474D6C1E5244945EF6
SHA-512:	0103FF7C88E866DBF74B341580F9E273E8A16980E64B8746C247013CB10C26C51B0664043FDBDB2F869539BF445344539F9715B6CB28A94CA0E865D193FAF475
Malicious:	false
URL:	https://ssbsync.smartadserver.com/api/sync?callerId=8
Preview:	<html><head></head><body><img src="//exchange.mediavine.com/usersync/redirect?partner=smartmedia&partnerId=2527372694113908282&gdpr=0&gdpr_consent=" />.<img src="https://a.audrte.com/get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent=" />.<img src="https://dis.criteo.com/dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=0&gdpr_consent=" />.<img src="https://sync.adotmob.com/cookie/smart?r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D66%26partneruserid%3D%7Bamob_user_id%7D&gdpr=0&gdpr_consent=" />.<img src="https://cms.quantserve.com/pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent=" />.</body></html>.

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 789

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], progressive, precision 8, 1456x180, components 3
Category:	downloaded
Size (bytes):	22333
Entropy (8bit):	7.948728861564215
Encrypted:	false
SSDEEP:	384:HinHUlGKKkC8ItfV5OSTe3meEfhOB+sRXYmPQ/Y34008ZsLWT:HiUlGhjt8W3hOE/u4csW
MD5:	FAE32CAE0B39A173D4552755EBD872E4
SHA1:	E9BAFC91D1169FFDD73E265BA97538B4E11D7570
SHA-256:	11360FAD1171340C5D1C0B0FED2CF928C5E29967CB728BCFFB3CEDE0B927C3C9
SHA-512:	C1DA8C5F988BE3ABAD76C23CD40D12DBCB0956AD62A2CE5FCA31E65993493AD1BFD9D4896DF49B652C6AB1444EDBC0B4847A49CAC00B65509379C7C01DB8D742
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/3291718278215255336/images/bg.jpg?1699399357903
Preview:	......JFIF.............DExif..II.......i.........................(...2023:10:26 14:56:45....C....................................................................C................................................................................................................................................................].u...4\.A#.L..>m.V ....J9....2......~....#,.#\.Q.>.......J....d..v.Z....-..ZX................R..1 .ED.#.<8..HUU3N.{.53...h...&U...sHZ.#..z.y..\|.6..o0.$SB.4...9w.....k.....7\|.K.oMy..nf.k.......&....o^c.u...q.:..k..s......h....x..Z.,q.Nu+....K!+-./?G...r.h..].n.{<.q.q..#...AV......Y.b.X.J.Yd.[O..o.'.....0...<w_?......P....n.....W5l[+..D....$ ......H......1H.EE.H.41...%Z..Y..6..Y..H yAR.n..o....s:..~.=b.0......"...y.{.f.gZ&........{....q.\....'...rk+.S.......<.......ZW..1....U.]i..UJ.EXIZ.,%..jj.c.....:...11..,.h..Y.f&t.Z2...w.g..6.zdS..y>....._,.\|.)..\|...},o.......n..E!.Yde`$.I........ ...$.H$.T.....E*...h...XB..I.5f....r

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2897)
Category:	downloaded
Size (bytes):	11264
Entropy (8bit):	5.312435330995533
Encrypted:	false
SSDEEP:	192:ojQJmSicf4frtcXeobGw+hrkiFhFCgggmE3a3jrH3RVUJ/EXTBMm:V0Sdz9+hr2gB+6/Ejym
MD5:	ACF0EEA73DC3935EB4AB2BFAB62ED2F2
SHA1:	E79B401E7D50ED2AD4EAC853766321F140D32DBF
SHA-256:	712BF11A3755C81FA1CE57249E7A61F6845B843B84AEA09889A11478515234CA
SHA-512:	3A757AEFB08D464210889E0D72594F13F2645647E9F63BE35045B28016A5D165D98EBD43C65AE652E3EABDFF5093755831B9901D74DB9CD9A50C6A63C8F683CB
Malicious:	false
URL:	https://pagead2.googlesyndication.com/pagead/js/r20231207/r20110914/elements/html/omrhp.js
Preview:	(function(){function k(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var m="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function n(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var aa=n(this);function ba(a,b){if(b)a:{var c=aa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&m(c,a,{configurable:!0,writable:!0,value:b})}} .function p(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:k(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function q(a){for(var b,c=[];!(b=

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	150
Entropy (8bit):	4.792110645783077
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KHMRWCbBK6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiqjWCbBKj
MD5:	A66DEB29B08318DD4C56AD248A4DB347
SHA1:	F6211C5303D9D2DF09AA01C9067BF6D82262D5C6
SHA-256:	107CAAEA1D8003AB61CAFF8D78E706313D854E9BCB1B6C3DD853ED48BD83AC02
SHA-512:	D6E6828A06DB3F76C8015E6B8E7B513C63C59F641375362394FB1C0EDE26D44733425BDB411BE2B13ED4E38AD58B143A8BE53BDEA61AA07A62F71AE224849587
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /bidRequest/</pre>.</body>.</html>.

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
URL:	https://sync.targeting.unrulymedia.com/csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://u.openx.net/w/1.0/sd?id=559757357&val=954ec39a421b96a73142&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5908
Entropy (8bit):	5.013574897268915
Encrypted:	false
SSDEEP:	96:V0UcFeOgUy0xTjZD7SaJd5wXCXzUcwXqn7xnCoe/KUUcSepB:VJOgUdxTjZD7SaJd5wrAVe/KnepB
MD5:	5EE675AFBE61FEB729E6CBE78AD7B58C
SHA1:	8B6360A6BBE8A13DBA337D2831FD09EEF729EB01
SHA-256:	C207BD82A7804C83A03365145221AA699E09A034B14E34A5EE4CD83B09101006
SHA-512:	6DF551A786A5AF4CBDF596C50ADEFBBD2BC4B22A58FA4379247FD0B36E2E5629EA95D8BCE35DB7E0597E5ACE1D0B8EE9D887D27BEE26CA6A8D4DE3DA3B4CBE0D
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/themes/mts_schema/css/magnific-popup.css
Preview:	.mfp-bg{top:0;left:0;width:100%;height:100%;z-index:1042;overflow:hidden;position:fixed;background:#0b0b0b;opacity:0.8;filter:alpha(opacity=80);}..mfp-wrap{top:0;left:0;width:100%;height:100%;z-index:1043;position:fixed;outline:none!important;-webkit-backface-visibility:hidden;}..mfp-container{text-align:center;position:absolute;width:100%;height:100%;left:0;top:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;padding:0 8px;}..mfp-container:before{content:'';display:inline-block;height:100%;vertical-align:middle;}..mfp-content{position:relative;display:inline-block;vertical-align:middle;text-align:left;z-index:1045;margin:0 auto;}..mfp-inline-holder .mfp-content,.mfp-ajax-holder .mfp-content{width:100%;cursor:auto;}..mfp-ajax-cur{cursor:progress;}..mfp-zoom-out-cur,.mfp-zoom-out-cur .mfp-image-holder .mfp-close{cursor:zoom-out;}..mfp-zoom{cursor:zoom-in;}..mfp-auto-cursor .mfp-content{cursor:auto;}..mfp-close,.mfp-arrow,.mfp-preloader,.mfp-counter{-webki

Chrome Cache Entry: 797

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_push=AXcoOmTmixh0MCaAmkBPl0U09GCspfj2pl3hnK_9eBTprDfGTKGXgo2lFp7mDUmnYwvacBGquna7v1Pd2mFntlOkICmUBKN5J2Y&google_hm=Hz32hLZHBFKxs3xrQUqrw0Qb
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45280)
Category:	downloaded
Size (bytes):	61996
Entropy (8bit):	5.446406097047045
Encrypted:	false
SSDEEP:	1536:AsUMLrnJsZf5Z8/qzyt2dTJhmeJkd6EE4Yf:ofZz6QTfmen4Yf
MD5:	C28D251FE59FAF0180AA8BEF58D504D3
SHA1:	53411A834A031DD79323A75099E5844A1FFCB913
SHA-256:	554901B18578B893505E0DDA39D4CBDCB3AB0C30271CD519CFF2972A74D21A23
SHA-512:	A0B9D0294FFBD727EB948737C47EF124C2B610F9583230E10EAA238B6DA56619F2F1681D10B6221DC7F61A5DAC06C526B54E26E06451FE986C62BF1D95C6BC30
Malicious:	false
URL:	https://scripts.mediavine.com/tags/math-blog.js
Preview:	window.$adManagementConfig = window.$adManagementConfig \|\| {};. window.$adManagementConfig.web = window.$adManagementConfig.web \|\| {};. window.$adManagementConfig.web.cmp_version = "13adaa586e1080440be72fa0a37b1cb5ff0595a8";. window.$adManagementConfig.web.model = {"offering":{"id":"1","name":"Mediavine Ad Management","gam_network_code":"1030006","offering_code":"mediavine"},"gdpr":"0","bidRequests":{"leaderboard_atf":[{"bidder":"amazon"},{"bidder":"indexExchange","size":[728,90],"params":{"size":[728,90],"siteId":"179864"}},{"bidder":"indexExchange","size":[970,250],"params":{"size":[970,250],"siteId":"179864"}},{"bidder":"indexExchange","size":[970,90],"params":{"size":[970,90],"siteId":"179864"}},{"bidder":"pubmatic","params":{"publisherId":"157108","adSlot":"leaderboard_atf","bcat":[]}},{"bidder":"rubicon","params":{"accountId":"17404","siteId":"168624","zoneId":"812708","inventory":{"category":["education"]}}},{"bidder":"triplelift","params":{"inventoryCode":"Mediavine_ro

Chrome Cache Entry: 799

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1456 x 180, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1556
Entropy (8bit):	7.253345873542578
Encrypted:	false
SSDEEP:	24:Zq8tZiWDDmOl44ftBsBs0HWUwU8sBZU9k+6ZlSgf08U2lsRaLzQT6Fs4O7FcfJ:ZqtWPY41KK02TUZ/03AoD27vm4O7FcR
MD5:	B11F3A9CB7EA1D53C2B5AA5558F36E9D
SHA1:	692625040ACDC578AF61C6F18CABE00CB9013C62
SHA-256:	B367411CA1761032463D89483025D5B02B96C80EB6DE73643835FB2BDEB3207A
SHA-512:	4034389EC886F8F9B5140C757EADA2C0E7B74CF759DFD2A1116B050924129AF4D44CD86A38BD826C83BDEC34BBCC20F0ED086095880D90B3DBF95AE7424964D1
Malicious:	false
Preview:	.PNG........IHDR.............r..8...3PLTE..............mt..:...........FP..........~..[c.o.4....tRNS.@..f....iTXtXML:com.adobe.xmp.....<?xpacket begin="."?><r:RDF xmlns:r="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><r:Description xmlns:x="http://ns.adobe.com/xap/1.0/"><x:CreateDate>2023-10-26T14:56:45-00:00</x:CreateDate></r:Description></r:RDF><?xpacket end="r"?>........IDATx.........................................................................`.........._.9....................................e.....(...P.+..\V.@..8.rYq.....e.....(...P.+..\V.@..8.rYq.....e.....(...P.+...o/..P.Est....._...... L....@..v...o.CD...-~..>.Z........"HK.{{.@Y...32.......Cd..5=.y.....0.D.7..!....9.6...`HF....Y.~L.<..[Z:....8\Q.`.Q.P...a..[.....y..Z.W.-...&..r.`.Q..B_....4....=r..+v...F.wp~.W.r.u....,...&.~..1...;0..h..Ik..X..%.u..`.R.'..l"...T.-Z.[.u. Z........u.Z..#..5.6.u...^Bs})..m......3.Y...[{.....q.a...ch!!...^...j.....<.g...A...T...e......&......y.64..`.....1Gbk......

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%2522%253A%252264%2522%252C%2522brands%2522%253A%255B%257B%2522brand%2522%253A%2522Not_A%2BBrand%2522%252C%2522version%2522%253A%252299%2522%257D%252C%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522109%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522109%2522%257D%255D%252C%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Not_A%2BBrand%2522%252C%2522version%2522%253A%252299.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522109.0.5414.120%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522109.0.5414.120%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%25220.1.0%2522%257D
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1162x700, components 3
Category:	downloaded
Size (bytes):	23258
Entropy (8bit):	7.595427984668704
Encrypted:	false
SSDEEP:	384:Y25SpTooSJHGTM7q4g+jbeCDlzqMuXFCM5e9lgRcYZudvwTWkNUXLl:PSCoIHQaqses+X0lz5dYTZGl
MD5:	8A5252CA346FAE606D20218914AD42E1
SHA1:	DA4CB82F5A695DD304BE36D1BB61B6D99A305D92
SHA-256:	55B981D9725165BC8C6C429A834432BC8C331FBAFD73E647B12E63EE5DA7C567
SHA-512:	9C2C6F3F97E713259173A338D8BC03F0AD26815558F2630C5ABAEA883731A604475D61DC03F8F8093C0CED5E73A18158FEF44FE9B2D4F545B9E052625EC8281A
Malicious:	false
URL:	https://encrypted-tbn2.gstatic.com/shopping?q=tbn:ANd9GcRBou1usDyoqryZV8P64vbAW4OOS-0qXG_IFObbeb7K6kugcRDpDdylfuTqrQ&usqp=CAI
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777..........."........................................C........................!.1A.."Qaq.2.#BR...b...$3C...Sr.%4cs...5................................+......................!..1.."AQ.23#$4qBCa............?..(.Y... ...... ................B......(.(.....".*....@. "..(.. .P.@.@EI.Q...I........@....P......I ...@..... @.......@.......E..@@...@$.@.DP.P.@..........h.....T.....@.`...4.......O.4.....@w.....^..D.B.............j~...&...;..@w.......j~p.j~....w.'...S..;..D..].....;..4i{....@M.........w...........`J.......^..C..4...w......C..4.......!.s.N..A@.....A4......w...."......;....@....~....w..'.....'.....w........................@4......hEE..XE..v. .......J..u.P....A@A@@...........4....O................................_..;N.,.^...F6.D-k6v\|.N.?.l......G[......b...1...[DM.;.....NukX..~.y.?M.>...m.h..H....-}....5..Y....y.w...>...{.u..LDn

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1560
Entropy (8bit):	7.782642217459844
Encrypted:	false
SSDEEP:	24:8kadhKd8PGR+r5QlZL0adbcsnxulQg1Pmksavlrs1CixAuvYhqJsN15fXHX/L:Paq8PUzl2YcseQ2Qav1tixAWJsz5HPL
MD5:	940D4D7FA143913C835E638B0CC8CE3D
SHA1:	A58A74A2DF30A28FC594CAF9F9FA9CC15E7C281E
SHA-256:	BFC81B7858ECC9AFF22B9BBCFA5FAF4E499A22AB8CF8F1559BD34E37D863B8E1
SHA-512:	9D01B54EE0F9B7BBE5642BF6087399C28DCC5CC5E66739D65B4FBA9881D5951581D8B32E4B7032C7334044A9F6D5F3F752ADA56CEF8D564C35F5BE607A9B0243
Malicious:	false
Preview:	.PNG........IHDR...P...P............pHYs..........+......IDATx..Oh.G......v.ZFi.........C!.1..........K/..b.!..\r.-.`.........MD...TT..6.n..(...ofv..w.Q.Y3.y^..o..u]..Z_D...l756/lW4'...(...6..:j.....3.156.m.u.X.\|.]...7.....v.`.Z.?.......h.cm{...E.V..Z.j}.k.K....I....K.d................/..I...O,..Om.D...3........)ra...$...;HYp~...0)...............).....hu6..].............2...g.a..v..V..g....c.=u}..I..P....h..a..A...F.....J.}."@Y......"p^..J.}.PT...3...Dj.h.G.b01..'.........wK_`..Hh^...L2...~?.x.y..W......../.^M.q!...0.K.s...w.....>.U.........C.....G._..}..6~.......{...v.%.5.&...g..........p\;.N..9........s....>@p..u......f.".......>..0..... >.e.T..@...t.&...yc.2....a.<. .X..#.W..3..w.1.;c1\.u..7^.vT.'.....%w&.l.1...X.........8.......~...a..d3..3...k.......v=.1..q...p.w......$2.Q.n.b........{W...H....\8aU.{f..wZ+h..r...R..W.....)....0~....0....f,...Y.J.-.>.(..^+......r....j......r..*R.?(u..I2u'..q.L&b..u.wQ.N.3.........#....3.

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2329
Entropy (8bit):	5.176349791129733
Encrypted:	false
SSDEEP:	48:fm1v4RRObr68go7AwFDdVRMWKMW/BeMW+Z58Z5RMW45G5bBvtSz:u1gWbG8R3FDRa5eKEROsbBq
MD5:	7C8F28A101499DB27DB6DF56E3D954C6
SHA1:	BD3FC8C9535377653DDADF113FE60B40AD578C44
SHA-256:	9C5FB5A14C290AB74DB8841B9AB4263B17E9BD2E628A9EDDC150DEB5BABCC348
SHA-512:	7748CD26BE740652C59A784920B7D6762998BAC232840B1E836E326632F610B68B43ADE43604B05FEED30C2E3540C8B2DBF5DA70FFA1F5CFBAB66BD8B9EDB386
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/plugins/wp-table-reloaded/css/datatables.css?ver=1.9.4
Preview:	/************************************************.. This CSS file belongs to WP-Table Reloaded! .. DO NOT make any changes here, but in the .. "Custom CSS" textarea in the "Plugin Options"! ..************************************************/.....wp-table-reloaded .sorting {...background: #E6EEEE url(../img/bg.gif) no-repeat center right;...cursor: pointer;..}...wp-table-reloaded .sorting_asc {...background: #8DBDD8 url(../img/asc.gif) no-repeat center right;..}.....wp-table-reloaded .sorting_desc {...background: #8DBDD8 url(../img/desc.gif) no-repeat center right;..}.....dataTables_wrapper {.. position: relative;.. zoom: 1;...clear: both;..}.....dataTables_wrapper .wp-table-reloaded {.. clear: both;..}.....dataTables_processing {...position: absolute;...top: 0px;...left: 50%;...width: 250px;...margin-left: -125px;...border: 1px solid #ddd;...text-align: center;...color: #999;...font-size: 11px;...padding: 2px 0;..}.....dataTables_length {...width: 50%;...float

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (684), with no line terminators
Category:	downloaded
Size (bytes):	684
Entropy (8bit):	5.129386370605473
Encrypted:	false
SSDEEP:	12:kxP4L8BMfF6R7lWGnWUB6Ax8KBG/9/fSWGQL8BM4FoCpbqWGYsH8KBG6FkKOWQ:kDBB5wGnW7fKBG/rGVB7FokGfcKBG6F+
MD5:	9077A089BD8437E4483223CEB46883F2
SHA1:	C26032C78B4E50E345BFBD74E07AE1A75FD1C243
SHA-256:	68E12A98552E1D10D74C35C38A6324B2FFC6E1B552CA386894875EE9B60EA169
SHA-512:	120B49DD554D78048663C84074E01AE7E279EF04513B8717B625DE67FEDC336851065145AEE038C35A3307F138947A0521799FCC0632F465DC6C08901188745E
Malicious:	false
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CMnoyAIQ2OLLAhjdqNfbATAB&v=APEucNXkdLsyAAaKZ_xLurlfSp3mg_ouUOK7ELhrkZLJ4eAaGFSVy0R-c7WptUB_HnTmHXalcvcOUkMj6UKZnSpwsi95cfRioAHJDuHpgZeJt7sctMU2uOo
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=lkqd_dbm&google_cm&gdpr=0" style="display:none;"/><img src="https://cs.lkqd.net/cs?partnerId=59&redirect=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dlkqd_dbm%26google_hm%3D%24%24rawlkqduserid%7Cbase64%24%24" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&gdpr=0&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D" style="display:none;"/></body></html>

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7806)
Category:	downloaded
Size (bytes):	7853
Entropy (8bit):	5.652566244914738
Encrypted:	false
SSDEEP:	192:1HUPwUvxBVQRorDo1o29j+D0d0hoeOoeETe2oEQooQoXoewoTrdIiYfozoNoZtGB:SPDvxBVQRono1o29j+D0OhoNoS2ozotP
MD5:	D7FF0F4EF590B94BD79FC9B61A13EF4E
SHA1:	C234BC9D8600A9CB99F40B838FF420ED6184B480
SHA-256:	5C7987D2F26CA9BF8254DF658877B74005F2E90D3F477EACC606E011341D8082
SHA-512:	A8CD89F56737E81BC76C1D6B179B2D6B1C8C4C5337A88DD09611301D1C0D06EB3D6FDAA957CF263C617B89C39EB280936534AD32094210FBA092842444E401C2
Malicious:	false
URL:	https://cti.w55c.net/ct/cms-2-rubicon.min.js
Preview:	var DATAXU=function(){var c="wfivefivec",u="match",e=function(e){for(var c in e)this[c]=e[c];this.excludedExchanges=e.excludedExchanges\|\|[],this.excludedExchanges.push("PRIVATE")};e.prototype={daysToLive:30};var s=[new e({vendor_id:0,cookieSuffix:"google",url:"pm.w55c.net/m.gif?rurl=//cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=_wfivefivec64esc_&google_cm"}),new e({vendor_id:385,cookieSuffix:"bluekai",url:"tags.bluekai.com/site/2964?id={w55c}",excludedExchanges:["GOOGLE","GOOGLE_CONTENTNETWORK"]}),new e({vendor_id:10,cookieSuffix:"casale",url:"dsum-sec.casalemedia.com/rum?cm_dsp_id=47&external_user_id={w55c}&gdpr={gdpr}&gdpr_consent={gdpr_consent}&expiration={epocexpiration}",excludedExchanges:["GOOGLE","GOOGLE_CONTENTNETWORK","YAHOO"]}),new e({vendor_id:97,cookieSuffix:"liveramp",url:"idsync.rlcdn.com/385636.gif?partner_uid={w55c}",excludedExchanges:["GOOGLE","GOOGLE_CONTENTNETWORK","YAHOO"]}),new e({vendor_id:52,cookieSuffix:"rubicon",url:"pixel.rubiconproject.com/tap.php

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2706
Entropy (8bit):	7.8766682278267295
Encrypted:	false
SSDEEP:	48:WoLPwaWA+iNn6OrNlvVK8b9JSWlsWe+kCGWfZD/mezrTVTQYD:Wmwa7uMkW2JCZD/mMVTQs
MD5:	8E7D991AB0E094FEBB581BE9B473BED0
SHA1:	4F1264F8104E5CC3218A8CA69536CEEE99058B7B
SHA-256:	ABD4A4F94EF0E4072A7977AC3D9B034055399E87D3697E9E290175C0235D7812
SHA-512:	06065574BC7C5C04D9D583A8D096259EF3643C130542D73EB18DA90A647C8BF86BAAB68928C7D3F824BF1E5B40A9BB2954CCB7CDAA619DC88BDAED724A5BE1F3
Malicious:	false
Preview:	.PNG........IHDR...P...P............pHYs..........+.....DIDATx..Ol.....o.k..?..,..@0.qS).RZ..H....D9...Co...=E.z...C......'PD.pp.....&6.......].o........fg.y3."u.'{..7.....w.I....@..."r.h..o8....?..A9:......4.T..#.HCy.N<...{..T...i; ...a.@..../........ .......B.9...w_.1.5..-..)...{.......C...:9..\..21@?8"..........{`\[....'..X...r..`......M=.......d...2.z../.dl.,p^../B...U..... ........]x..........`.h]^..5-Hn.<...z..'..M.:.d)...M8.=....\.Ui@.+....TP..2>...>........W^...t.;....>....z.yAJ.... .}4.......Q..^.....}D~.z....s.M. ............wa.b...(..@...B]H..}Da..)..hb.T...Wq\..>o....p.M~..\..yo.....-8....i.....9.nq.M"yo?.......l.....7S?~.{e....l)7=.....}\m...h....g.........+0..B;...W.@.).>.TP.......0.."...c]j..........~.KvUG..`\[..G...S..(G.q......H.......X.@....>w@...u.QR.....ox/.A..gU.h_....f..s.......D.R1...h`.C\........>_1A..G.y.y..Y....B..h.[.\.:9.......r...Az.G..UiPAz].u_..Y..@..0)8.d.....}Q....$.JR%.$.tO!%8"IHI_.\..?..,...K.X..w

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5399
Entropy (8bit):	7.945888170602499
Encrypted:	false
SSDEEP:	96:CZhfz15wtmgNBl0Ru4aZFLFCAQB3gGzmFkL7LnUEgnse2Gou6VY:kFz15LgrORutFLFCAQBwGGOz2nse2jVY
MD5:	13937A29C3669B3901B210B74D0F62BB
SHA1:	9055DACA52EACDD03709F1B7B8071E433F61F36E
SHA-256:	58283E02B752D05BEFB55DAFD51A43DFA0658763A759FD59EED0D8340DE4E307
SHA-512:	ECB9B7B2B7ECE4426ECE86D8A7172C4926AE610D44FB7E65FF24F692E7E3F1DE594FB27ECFD1460441025797AD82CF19A941E6B87EE6695312275F9BF18681E3
Malicious:	false
URL:	https://secure.gravatar.com/avatar/f7f6fb5e9a83603612b1e39a984cb981?s=100&d=identicon&r=g
Preview:	.PNG........IHDR...d...d.....p.T....pHYs..........+......IDATx..]yp.W..u.u.O9.).v.L6..@......!.90...a.`...7;;..%.$....V..p.....I...."1.*.3..2P....$5\.d[.e...!?........?..._..{..~.{.'.}d...d......=....qY.......tW..ZC..Gz,..p.N.._E.0...1..Oq8.[p/_.L.y~.7'f.....z..l....g...qh.....\|..3..x...\1....p,......%...1.6.s..s.....:......m%B$....@.K.q".J."./.........;..../.p.....&.+.s.j<.Z.B.8i_.W..b..s-....4t.}i......,88gb...itE/.L.k.M#..7./].Wye,).K......^...G{.s...K..!.q.0vey.#T............0.mwb....CP.:...O.z.u.. .w.O....\|.U....l.b....=..A.P.c.c.t..g...Qp..J..'r.x.0.kbE!_.j../...Xh?...#HzS.+.G`..$.5.#r.].s(....=....O...q...._...zIC...6.P..%....pK.ch...~.y\.%..G.8.z?..i...k6....}5n.I.iX].h.=.I.+.g.{. <..-]...!K.r1....S....i......a.....\|q.e.....\|q%j.Va.?......]^&c...9...NK..x.P.... .p$.>B$..E>....s.......Z...H.cK....U.=.f.-5H..=.U.jl.].+..X.AC..]Qc.V..apG..."A.....M...I.p2.L.x....h....4...#r.......u.-..J\.......!$H.\|...;R.jj.....pL.W.E.0.,........f..kI..1....`.

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4567
Entropy (8bit):	5.060293627364066
Encrypted:	false
SSDEEP:	48:iwVtM9AHd5VnHr98RFV0Q4B/K513EyF2kjY/HVRTcY+xJMnEjVqVeQsfmRw2TwUx:iZidjnL98RnM4bZ2zYpynE5hORHTv+4
MD5:	FFFC3B3E31AD805C31025EAF94CF5B26
SHA1:	28CB9192F8671A4A6689889F367F42F18F6F686C
SHA-256:	4592AB53FC987C5A9AF4D27E21519CE9709890CBF2212FE75A020F65988AAFE8
SHA-512:	03C5FC41B71FF9E1085B8618566E182867E1070C026228241948D9703F42748D4B72D4FF53F4B192C15309801B90EAEC8D6CFAAC11C82F586F584B82E864CC16
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/plugins/wp-review-pro/assets/js/main.js
Preview:	/. Plugin Name: WP Review Pro.* Plugin URI: http://mythemeshop.com/plugins/wp-review-pro/.* Description: Create reviews! Choose from Stars, Percentages, Circles or Points for review scores. Supports Retina Display, WPMU & Unlimited Color Schemes..* Author: MyThemesShop.* Author URI: http://mythemeshop.com/./.jQuery(document).ready(function($) {....$('.wp-review-comment-field.allowed-to-rate a').on('click', function() {...var $this = $(this),....$elem = $this.closest('.wp-review-comment-field');...if ($elem.hasClass('allowed-to-rate')) {....$elem.removeClass('has-not-rated-yet');....$elem.find('.review-result').css('width', parseInt($this.data('input-value'))20+'%');....$elem.find('.wp_review_comment_rating').val($this.data('input-value'));...}..});....// animate..if ($('.review-wrapper').length) {...$('.review-wrapper').wpr_appear().on('wpr_appear', function(event) {.. // this element is now inside browser viewport.. var $this = $(this);.. if ($this.hasClass('delay-a

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
URL:	https://www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 500, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	27175
Entropy (8bit):	7.9867326276261705
Encrypted:	false
SSDEEP:	384:vPICw74+aC/2mpwVREyqqtBzlmF/KZl46k/4zjNcJvjjd6CzMZkv/bNYe:4Cw8GisQjlmFyZl43/4z5c5j0CzMOv/X
MD5:	771D40B3AFAF8D70E7068D1BB1AAC2C9
SHA1:	CB10EDBA3689407DEA5DDEB70B9D0E4D5B45892A
SHA-256:	9421F3014E1EDE1C6D4A9A5EDB4BA638AB3CE0C8A05404FA478771C2FE7EC9E6
SHA-512:	3C6A75C8F31ED3FA4E485E7E24056D1A1B9AEC3193F746C95EDB27EC9295F6A5A479B79CAE656823FEA00E19DD239ECCC54ABEFD8B324727F6CE1EB617D1DA30
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/3291718278215255336/images/glow.png?1699399357903
Preview:	.PNG........IHDR...X..........~N.....PLTE...............~......tRNS.\$..I:.S....iTXtXML:com.adobe.xmp.....<?xpacket begin="."?><r:RDF xmlns:r="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><r:Description xmlns:x="http://ns.adobe.com/xap/1.0/"><x:CreateDate>2020-09-19T14:19:05-00:00</x:CreateDate></r:Description></r:RDF><?xpacket end="r"?>..X...h.IDATx..\.u.0....&.6.s6p...l..H.I.m{n.....(.B$....Cj..~..!..E..U.>.L...A........'2_.A?.....v./........v.....,.#.j`G.I......;Xv.+ ...../.P..Y..)......@....m.O..........P...w.S.Q.4".,.G....?.K.BD/..y.>.h..&...Q.q.........a..C.U.!...6.N....V.L....J.\.z...,......c.#.V....W`!....`.....8.1.Z .o5...J.]...l#..C....j.w5.j..dO.g.R_l..E...5..T.7{...>...)..%...T.&)R..B..3...C..Bq.<P..I./+V....)u.%.D\|& ..Z..ca.0.YW.Z....@.ud/.v.4.........WRd...R..U.^....g...n...b.I..F.......I..C._....x!/...C..,...lx$T=.&.<.g..8...(Z....;..$jN.....,.f...k....."..J..l.N=....\L.....V...`1.Q.xe..e.#.y...$e...1+.;=.Y).K....M.).=..4....TeW..nj.....,

Chrome Cache Entry: 813

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-ChQ5jR3pFCZi2owOrhSFd0VRMplMYe3QldVbJ723rBhOksmFcvxBTYxNGF0ce8Plv-JI0z9iTiLU78xRR4nYVdVh4FltLHCAGimBVSfRZzfEx4Ml4
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 814

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14814)
Category:	downloaded
Size (bytes):	14931
Entropy (8bit):	5.302387391074923
Encrypted:	false
SSDEEP:	384:nrJ8mveR3bwIcLxjNvLL2zOc55uem5mJJMzKREiQz3y5:m2Wbw3LzvLL2zP55uh5mnPCiQe5
MD5:	6029AB56E19EB94B90DEEB7CFBCC2AF7
SHA1:	1949B275934521063F838EDA4F974935F57F8A30
SHA-256:	B53B6AD23B258CE11EED97786741510819A369348AFCF1260856FE3041FC33DE
SHA-512:	1CFD0B7306EC4546F206B3FDFDFBBAF95FD9B2619096279D60822EBA21CE9145F02B7E37753BB1E9AE450FC14DDE73626EFA08A6A54B801D52FEFEC681E0AC1F
Malicious:	false
URL:	https://cdn.ampproject.org/rtv/012310301456000/v0/amp-ad-exit-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-ad-exit",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:e}=Array,{hasOwnProperty:i,toString:r}=Object.prototype;function s(t){const n=Object.getOwnPropertyDescriptor(t,"message");if(null!=n&&n.writable)return t;const{message:e,stack:i}=t,r=new Error(e);for(const n in t)r[n]=t[n];return r.stack=i,r}function o(t){let n=null,e="";for(const t of arguments)t instanceof Error&&!n?n=s(t):(e&&(e+=" "),e+=t);return n?e&&(n.message=e+": "+n.message):n=new Error(e),n}function c(t){var n,e;null===(n=(e=self).__AMP_REPORT_ERROR)\|\|void 0===n\|\|n.call(e,t)}function u(t){return JSON.parse(t)}var l=/(?:^[#?]?\|&)([^=&]+)(?:=([^&]*))?/g;function a(t,n=""){try{return decodeURIComponent(t)}catch(t){return n}}function f(t){const{location:n}=t\|\|self;return function(t){const n=function(t){const n=Object.create(null);return n}();if(!t)return n;let e;for(;e=l.exec(t);){const t=a(e[1],e[1]),i=e[2]?a(e[2].replace(/\+/g," "),e[2]):"";n[t]=i}return n}(

Chrome Cache Entry: 815

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?id=537116306&val=R35CA9_10D97F8E3_7A5609BE
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 816

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2692), with no line terminators
Category:	downloaded
Size (bytes):	2692
Entropy (8bit):	5.707712109245242
Encrypted:	false
SSDEEP:	48:C2BqUCundXd2BqY2Bqhybj/5CS22S51gGahydNnq/5q:C2BqUCun5d2BqY2Bqhybj5P22S5114yP
MD5:	3556AFCE80C25B59FB2DA16CC8DA861F
SHA1:	DE61AB4369E672E030E98B571D6DBA2C3D442AF7
SHA-256:	509B257E41C8DF034E01368EB31FF0851C745F01F52BA51C19F82037CF28C8FB
SHA-512:	1EF557D6107398ED130B64D94A5006CA2DF81EADA4F4E6B96CAB316D1C48A210337797D5129116F1AE79CFEFED230159C14A271B27186E6500BF589FCB7521AA
Malicious:	false
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=68913394&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=rkqMPRCWRZqwkSut1QCfUg%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx AE4A8C3D-1096-459A-B091-2BADD5009F52&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=AE4A8C3D-1096-459A-B091-2BADD5009F52&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=QUU0QThDM0QtMTA5Ni00NTlBLUIwOTEtMkJBREQ1MDA5RjUy&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pu

Chrome Cache Entry: 817

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 818

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODE1MjY2OTU1NDgxNzk4OTM4MQ&google_push=AXcoOmTNdrdX0hYNjh7c4KjxmH-URiNlWl24f2m5pl719bowU6SFBqXHt9mhAbGdqCQ_eE4n18Fmxh5kaT5VKkZ4Z0XRwr5ve-E
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 819

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16198
Entropy (8bit):	6.016895501494641
Encrypted:	false
SSDEEP:	384:A3z5BfKv7h5bbSA2utV2dMJDcjOEaWi5sp1x+hG75T5EdQ:A3zffK11bH3+da4CTEOhGZ5EdQ
MD5:	239AA2EB8703DA82250900E66946CAD6
SHA1:	F85109A8DA1C7E38835769A5B22D866204DBB612
SHA-256:	7A43CECAECAC6F8860533A4737376D262CDFD4FEA198F7C161ECFB18BE04F19A
SHA-512:	56D5A46D9B036C8349B57A39081F72FF24CE0A51C88618FD0F9269A71302AA3E0D6B41B60E67F41AE3A3DC5554967192235B8ED29B4538806C8194D6F14BA38C
Malicious:	false
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=m202312060101&st=env
Preview:	{"sodar_query_id":"JsV4ZYzyM5n1xtYP196eoAg","injector_basename":"sodar2","bg_hash_basename":"Dtt_-LR3WxpzwV0Gscftq1A_D1owstvxoTnWWhwY4Ow","bg_binary":"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

Chrome Cache Entry: 820

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16870), with no line terminators
Category:	downloaded
Size (bytes):	16870
Entropy (8bit):	5.373771555030537
Encrypted:	false
SSDEEP:	384:rnRXiktSp8jO9Id7xQhW9Pq0j7ttruRIYJIrArFN2ERjFp7nvnIHxfAq0CXLiB9V:rnRXikspUOmd7xQA9PqU7tE1IkPlq0CQ
MD5:	AA545FB67161AD96C80D379857C85600
SHA1:	40A606A056575B4E356E24DACAA44E2486F2D798
SHA-256:	86A22B15CFF06669977AB3C29B500E4467685BDCDF6144504F6525E4BBFA1F1D
SHA-512:	C690AFD2C999704C6A2E8609E802DCD09EC15DA8A366CFCD295EF68F5D0E43FC585035BD57A4775D24652F69F9F4B70A0C97848593212601FEF5301975F2F04A
Malicious:	false
URL:	https://scripts.mediavine.com/tags/8110/556de08893caa29c9302.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[8110],{7475:(e,t,i)=>{i.d(t,{CP:()=>v});var s=i(6039),n=i(5077),o=i(5914),r=i(6497),a=(e,t,i)=>new Promise(((s,n)=>{var o=e=>{try{a(i.next(e))}catch(e){n(e)}},r=e=>{try{a(i.throw(e))}catch(e){n(e)}},a=e=>e.done?s(e.value):Promise.resolve(e.value).then(o,r);a((i=i.apply(e,t)).next())}));class d{static retrieveGeo(){return a(this,null,(function(){return d.geo\|\|(d.geo=yield l()),d.geo}))}}const l=()=>a(void 0,null,(function(){const e=`${window.$adManagementConfig.web.model.launcherUrl}/flooring/countryLookup`;let t;try{t=yield r.Z.fetchJson(e)}catch(e){return{country_code:"US",state:o.y.CA}}return t.geo}));var c=i(6091),h=i(9860),u=i(3583);const p={1:1.05,2:.95},b=p[window.$adManagementConfig.web.model.offering.id]\|\|p[1],m=window.$adManagementConfig.web.model,g={[n.D.banner]:m.bannerDiscrepancies,[n.D.native]:m.bannerDiscrepancies,[n.D.outstream]:m.outstreamDiscrepancies,[n.D.video]:m.videoDiscrepancies},f={rubicon:.865};

Chrome Cache Entry: 821

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14749)
Category:	downloaded
Size (bytes):	15060
Entropy (8bit):	5.413894550985734
Encrypted:	false
SSDEEP:	384:rtdmJ/L5CyoathaNyvh9z2KfKW8KPKH76xKIQNvG6eSKIO6CLJD9KvMS:XCLIZathpw76Gzl8Dy
MD5:	C230C26E60EF320C511A76366004F297
SHA1:	20A6D7FA64BA9746D9FB1C5B92A21C006400FE70
SHA-256:	16B1965919373FECD13455A5AEB9278934D63073FB07A1B5479C93A6EAF4889F
SHA-512:	56933F636FFF170BDAD14B31A1E29DB7EC68913462586661AEDCE7CDA9FB5AC3F648D7C9F1D32F73359D741AAC5D072D10E6C4F47198E3373AEE50F9B289B4C3
Malicious:	false
URL:	https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=mathblog.com&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	<!DOCTYPE html>.<html>.<head>. <script type="text/javascript">. window.CONFIG_CSM_DOMAIN_NAME = "csm.va.us.criteo.net";. window.CONFIG_CSM_RATIO = 100;. window.GUM_DOMAIN = "gum.criteo.com";. </script>. <script type="text/javascript">. !function(){"use strict";var i=function(t,n){return(i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,n){t.__proto__=n}\|\|function(t,n){for(var e in n)n.hasOwnProperty(e)&&(t[e]=n[e])})(t,n)};function t(t,n){function e(){this.constructor=t}i(t,n),t.prototype=null===n?Object.create(n):(e.prototype=n.prototype,new e)}var n=function(){return(n=Object.assign\|\|function(t){for(var n,e=1,i=arguments.length;e<i;e++)for(var o in n=arguments[e])Object.prototype.hasOwnProperty.call(n,o)&&(t[o]=n[o]);return t}).apply(this,arguments)};function e(r,s,a,l){return new(a=a\|\|Promise)(function(t,n){function e(t){try{o(l.next(t))}catch(t){n(t)}}function i(t){try{o(l.throw(t))}catch(t){n(t)}}function o(n){n.done?t(n.value

Chrome Cache Entry: 822

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
URL:	https://mwzeom.zeotap.com/mw?google_gid=CAESEEXGtlFexyf217S5NTCGoG0&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=d42897f0-a063-4fda-61c7-d26e083018c0&reqId=5fbdcb44-72f5-48d1-760d-8a08aed6c5f8&zcluid=872da16551953746&zdid=1332
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 823

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cjp&google_hm=k-_s_sbectXCl5NbsUxOmWvuZclHwU5wAX5_2bWA&google_push=AXcoOmTSiWcA6bpwufRZGEceXeQdSW7ZMtWUvE_H3G6lrhD5-q1wqSCu2AmgtwGPy4aO1ob21qKtJ7rzm2k6kIt_zo_j_xrcSL8I
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 824

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODE1MjY2OTU1NDgxNzk4OTM4MQ&google_push=AXcoOmS0U17fB1ynTaPgBYTLKOhrEfgwSfQUU05LJUqwG9GdErBEN99JTV33UdtlsdnRtmsEA848lNmeqA3E4Tqt5rzSVY2eKzK3
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 825

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	197955
Entropy (8bit):	5.856398695179995
Encrypted:	false
SSDEEP:	6144:XrCKnSJ5c4tIzT/Rv4aV58AxmCu+qo3Rn:VnSjNGzjRn588m4xn
MD5:	9BCA19A2514A8DCD5BD69846F07B4D50
SHA1:	494EDB9D1AC96B7E5B6854D2A5812A4082C1D50D
SHA-256:	7C33E394C1D7CD92284FEEDBAB9AB97A6DAA479776BC151644CD4541547828A7
SHA-512:	D64CB0D2FBB733D48E3A31903A2867D9D4A9CD72492A7E0CBB6959751B22227A95BD58DCF8993FAA03AFD1EEB8D6F67C2E81ABEB3099B66C8CFD15298C9BEDD9
Malicious:	false
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2014244732259650&correlator=902088258581561&eid=31077976%2C31080122%2C31080115&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&us_privacy=1---&iu_parts=1030006%3A1037824%2Cmathblog%2Cinterstitial&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=1x1&ifi=2&sfv=1-0-40&fsbs=1&ists=1&fas=8&eri=5&sc=1&cookie=ID%3D70f210562803e33e%3AT%3D1702413502%3ART%3D1702413502%3AS%3DALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ&cdm=mathblog.com&gpic=UID%3D00000da8e52e5ed8%3AT%3D1702413502%3ART%3D1702413502%3AS%3DALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A&abxe=1&dt=1702413608159&adxs=-9&adys=-9&biw=1263&bih=913&scr_x=0&scr_y=0&btvi=-1&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=4&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMC4xLjAiLCJ4ODYiLCIiLCIxMDkuMC41NDE0LjEyMCIsbnVsbCwwLG51bGwsIjY0IixbWyJOb3RfQSBCcmFuZCIsIjk5LjAuMC4wIl0sWyJHb29nbGUgQ2hyb21lIiwiMTA5LjAuNTQxNC4xMjAiXSxbIkNocm9taXVtIiwiMTA5LjAuNTQxNC4xMjAiXV0sMF0.&url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&loc=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&vis=1&psz=0x-1&msz=0x-1&fws=2&ohw=0&ga_vid=1980800170.1702413486&ga_sid=1702413606&ga_hid=1969482089&ga_fc=true&a3p=EhsKDDMzYWNyb3NzLmNvbRjQtYj-xTFIAFICCGQSiwEKCmFtYXpvbi5jb20SdDdib0RSZ2lKRkR5SWIwcmhJL0IyNnFpb3N5WmJIc2pEbnIwZXREM3h4MFl6V0tMazdGMVdYSlBNdEtPZEg3bFlkTkdrVTdlWHcramRoL2cxNUs3SnpNL2s1cUFNazViYWJTUXlhWFdlcnpFNGw2WHg1Ylk9GOa-iP7FMUgAEhgKCXlhaG9vLmNvbRjQtYj-xTFIAFICCGQSFwoIcnRiaG91c2UY0LWI_sUxSABSAghkEj4KBW9wZW54EixleUpwSWpvaVJHRnhNR0UwYVRsQmVGa3pibWw2YUVaU2MzZDFVVDA5SW4wPRiAx4j-xTFIABIdCg5lc3AuY3JpdGVvLmNvbRjQtYj-xTFIAFICCGQ.&dlt=1702413595236&idt=7356&ppid=6111c3f0e29bb55dcd4030d89a5b2298b74b6ad4e27ce0bbfc93f4e34f6fe609&prev_scp=sales_cat%3D596%252C597%252C631%252C599%252C602%26sales_safety%3DGGT0%26sales_kw%3Dpolynomial%2520root-finding%252Calgorithm%252Cpolynomial%2520root%252Cvalue%252Cequation%252Csolution%252Cinterval%252Cstage%252Cproblem%252Cfunction%252Cfield%252Ccase%252Copposite%2520sign%252Ctechnique%252Canalytical%2520method%26partnerLift%3DconversantE0M2%26hb_bid%3Dno_bid%26slot_id%3Dinterstitial_desktop%26hb_bidder%3Dno_bidder_0%26hb_count%3D0%26hb_pool%3D0%26hb_pmp%3D0%26UR%3D46%26URP%3D144%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dinterstitial_desktop%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.46%26ccpa%3D1---%26timeout%3Dinterstitial_lazy_d_1701%26gid%3D0%26inview%3D0%26grow_state%3D1%263pc%3D1%26illr%3D0%26gpp%3D0-0-0%26pps%3D687&cust_params=site%3Dmath-blog%26path%3D%252Fpolynomial-root-finding-with-the-jenkin%26secure%3D1%26sessiondepth%3D3%26optout%3D%26categories%3Deducation%26generator%3Dweb%26bucket%3D23%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D2%26day%3D12%26month%3D12%26hour%3D20%26wrapper_group%3D2.94.20-tooDense-beta-control%26wswy%3D0%26sessionId%3D1980800170%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26s2sVersion%3Dproduction&adks=2966916392&frm=20
Preview:	{"/1030006/mathblog/interstitial":["html",0,0,null,0,913,1263,0,1,null,null,1,1,null,[138326953274],[5581006250],[29955756],[299148516],null,null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CJDK9fPgioMDFf_9lAkdCj0DDg",null,null,null,null,null,null,null,null,null,null,null,null,null,[null,null,null,null,"ca-pub-1601477034266482",8,null,null,null,null,1263,913,[["i-fvs","true"],["stop_word","ad choices;adchoices;advertise;cart;checkout;conditions;contact;copyright;desktop;disclaimer;faq;help;log in;log off;log on;log out;login;logoff;logon;logout;member;menu;policy;privacy;register;registration;setting;sign in;sign out;sign up;signin;signout;signup;site map;terms;top;install"],["qid","CJDK9fPgioMDFf_9lAkdCj0DDg"],["numMessages","3"]],60,[1,2]],"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html ><head><link href='//fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap' rel='stylesheet' type='text/css'><style>*

Chrome Cache Entry: 826

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65439)
Category:	downloaded
Size (bytes):	276088
Entropy (8bit):	5.291677645460308
Encrypted:	false
SSDEEP:	3072:Yj8TLIIS5i1WMh4DdYPJ0AJjtjI5RpBtEQyxqdt3Y0Bl3B/JuC:Y8S5KWMh4DuPJ0Yjt05RrtXZ3Y0BFBl
MD5:	CCFAF15C322E197D2E6D0D6BD5642ADC
SHA1:	B615E13DAC050BCAB935439A6799459F2E9D0AD0
SHA-256:	DD0464C1B94D39E8958BA7A4C594CEC1C1625EC4C5C154AA9FFC51DE38E04DA6
SHA-512:	C97C984E5FDEFA2F44F0EED34EBFF2DCDC7A7E08C2BBE7F504274A38EFAFD0DD1C5B5269E4588ECCFBDA5A73CB9E7B4A1E873371539684CD088F45CFC12412B5
Malicious:	false
URL:	https://c.amazon-adsystem.com/aax2/apstag.js
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v23.1129.2055 - 2023-11-29 20:55:07 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};var e,n,o,r,i=function(){return i=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},i.apply(this,arguments)};function a(t,e,n,o){var r,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,n,o);else for(var u=t.length-1;u>=0;u--)(r=t[u])&&(a=(i<3?r(a):i>3?r(e,n,a):r(e,n))\|\|a);return i>3&&a&&Object.defineProperty(e,n,a),a}function u(t,e,n,o){return new(n\|\|(n=Promise))((function(r,i){function a(t){try{c(o.next(t))}catch(t){i(t)}}function u(t){try{c(o.th

Chrome Cache Entry: 827

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (12605), with no line terminators
Category:	downloaded
Size (bytes):	12605
Entropy (8bit):	5.536174236584562
Encrypted:	false
SSDEEP:	192:Rf3B5Xof6h8BrGohbWWnnITRBLTPUONbbsyQ60XjiIT8Mq8pYb:Rf3B5XI+80YCzLTsONbbsyl0XWQYb
MD5:	3D56023AEA9E5EDEFDD89225B0FE8C6A
SHA1:	A118F704A8D266225A90BAB9A7D81E3E8AC8933D
SHA-256:	ABD3328D01E4D867F4F56D97288FE35E273103F3CEF7D6785D3F550C738DBD49
SHA-512:	129280022AED99BE3808603C5871DACDEB62A5B897D53F3929EEEF8B917B11829B2405CC6E14E64309ABFFCFA5DB95FB8C2CE7FB34E503233B36B8BD03AEB232
Malicious:	false
URL:	https://scripts.mediavine.com/tags/prebid/535ecb08db948da2040c.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[9598],{9379:(e,t,i)=>{i.r(t),i.d(t,{S2SAdapter:()=>F});var a=i(2845),n=i(5990),s=i(3528),r=(e=>(e.https="https:",e.http="http:",e))(r\|\|{});var o=i(9879),d=i(5077),c=i(2946),l=i(5595),p=Object.defineProperty,m=Object.getOwnPropertySymbols,u=Object.prototype.hasOwnProperty,v=Object.prototype.propertyIsEnumerable,g=(e,t,i)=>t in e?p(e,t,{enumerable:!0,configurable:!0,writable:!0,value:i}):e[t]=i,h=(e,t)=>{for(var i in t\|\|(t={}))u.call(t,i)&&g(e,i,t[i]);if(m)for(var i of m(t))v.call(t,i)&&g(e,i,t[i]);return e};const w=(0,l.DY)("test","nativeTestAd"),I=(0,l.DY)("test","nativeTestVideoAd"),b={};const T=(e,t)=>{const i=e.bidId;return{id:i,mediaType:d.D.native,bidder:"rubicon",seatbid:[{bid:[{id:"12345",impid:i,price:10.5,unadjustedPrice:10.5,nurl:"http://placehold.it/1x1?nurl",adm:t,h:1,w:1,exp:300,crid:"12345",cid:"12345"}]}]}},D=(e=[])=>({assets:[...e,{id:4,data:{value:"Sponsor"}},{id:21,data:{value:"pubnation.com"}},{id:1,ti

Chrome Cache Entry: 828

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65463)
Category:	downloaded
Size (bytes):	170821
Entropy (8bit):	5.517998178433232
Encrypted:	false
SSDEEP:	3072:BYsOucdQ0NYhimelV6cvyHnacOdsuNu/Xm+CangnS3fwot9xarK7gGFSFADKPBSO:BYsOuqQ0NYfUV6cvyHnacOdZNu/W+CBV
MD5:	D35A69857307873C3479A28976F0F3E3
SHA1:	7601276E9B3CE69C4D015ABA10D411032635B2DF
SHA-256:	171548DC3BA932B546AB82A6CD2F38F12F98B8600AF901E10E24A48D01BC2EF8
SHA-512:	77A5F93E3CFACF5D1ABAB2071D7D501A1F964F72CD9852ED9A56D19EA430A0C8A5E1780D9CCABBC26F8A4E9414781E7C4A3F3B3BA71F520C2A94D7E9DEF01953
Malicious:	false
URL:	https://scripts.mediavine.com/tags/2.94.20/wrapper.min.js?bust=-1144372150
Preview:	/! For license information please see wrapper.min.js.LICENSE.txt /.(()=>{var e,t,n,i,r={5001:e=>{"use strict";function t(e,t){t=t\|\|{};this._capacity=t.capacity,this._head=0,this._tail=0,Array.isArray(e)?this._fromArray(e):(this._capacityMask=3,this._list=new Array(4))}t.prototype.peekAt=function(e){var t=e;if(t===(0\|t)){var n=this.size();if(!(t>=n\|\|t<-n))return t<0&&(t+=n),t=this._head+t&this._capacityMask,this._list[t]}},t.prototype.get=function(e){return this.peekAt(e)},t.prototype.peek=function(){if(this._head!==this._tail)return this._list[this._head]},t.prototype.peekFront=function(){return this.peek()},t.prototype.peekBack=function(){return this.peekAt(-1)},Object.defineProperty(t.prototype,"length",{get:function(){return this.size()}}),t.prototype.size=function(){return this._head===this._tail?0:this._head<this._tail?this._tail-this._head:this._capacityMask+1-(this._head-this._tail)},t.prototype.unshift=function(e){if(0===arguments.length)return this.size();var t=this._list.le

Chrome Cache Entry: 829

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 830

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5021)
Category:	downloaded
Size (bytes):	5139
Entropy (8bit):	5.207850479567536
Encrypted:	false
SSDEEP:	96:oIvllJxvYaYpoVGe5QYqMvs5PPm2nrH8PQJ+9ixh3oyfqRVnKBRxk5REWS:rbvApkGaQnymPmsH49ixvfqzn15REWS
MD5:	DD59FEDB150C363F59D7E58BF77CA1AB
SHA1:	1DCB32609736A7B3F724A7798023F7861253AAB6
SHA-256:	516F5E4C2DC5C69F3E1707E76695F866F8E62468ACA15C1A9DDB165EB684F6F0
SHA-512:	B74ECF2D67EB939DBBE09C9BD09E419ADD91E447D78A97F3344D2850A2BED69FC7CBAE1CA807E03BFC0E63B91CEB624D37BEF979CBF5382EDE534E8A60747667
Malicious:	false
URL:	https://cdn.ampproject.org/rtv/012310301456000/v0/amp-fit-text-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-fit-text",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:i}=Array,{hasOwnProperty:e,toString:o}=Object.prototype;function r(t){const n=parseFloat(t);return"number"==typeof(i=n)&&isFinite(i)?n:void 0;var i}var s=["Webkit","webkit","Moz","moz","ms","O","o"];function l(t){const n=t.replace(/[A-Z]/g,(t=>"-"+t.toLowerCase()));return s.some((t=>n.startsWith(t+"-")))?`-${n}`:n}function c(t,i,e){if(i.startsWith("--"))return i;n\|\|(n=Object.create(null));let o=n[i];if(!o\|\|e){if(o=i,void 0===t[i]){const n=function(t){return t.charAt(0).toUpperCase()+t.slice(1)}(i),e=function(t,n){for(let i=0;i<s.length;i++){const e=s[i]+n;if(void 0!==t[e])return e}return""}(t,n);void 0!==t[e]&&(o=e)}e\|\|(n[i]=o)}return o}function f(t,n,i,e,o){const r=c(t.style,n,o);if(!r)return;const s=e?i+e:i;t.style.setProperty(l(r),s)}function u(t){return`${t}px`}function a(t){return CSS.escape(t)}var h="i-amphtml-fit-text-measurer",m="i-amphtml-fit-text-content",

Chrome Cache Entry: 831

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8715), with no line terminators
Category:	downloaded
Size (bytes):	8715
Entropy (8bit):	5.474228770102523
Encrypted:	false
SSDEEP:	192:M3OG6v3O2h4x32waY8CqE2zUdZhQPKwKsQMoWwXzwNajwAs9X61pMEORnEu43Obe:c63ha3cY8CqLzUdZhKKwOsYEEOREu8u8
MD5:	F40F4D01EF9B51C20EC8C7147C8A3A48
SHA1:	E367278BAB49C2C3EA28C226D5679A9548326531
SHA-256:	BFFD40C34C352DE3D7EE5948E4F642BDD1DF9C0A3DFC9C89E21DB2F721B530D0
SHA-512:	2F70872285E1E6D528FBA53FCBDAD80724AA2AAFF87764037E1394829432902173CA0A9D796480989B2699F20172A2C75E6FD4402EA3D5526B83C295A05A35E0
Malicious:	false
URL:	https://scripts.mediavine.com/tags/gpp/069f9a5460cbf1555200.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[999,6600],{6500:(t,e,s)=>{s.r(e),s.d(e,{GPP:()=>V});var i=s(8473),o=s(3583),n=s(6643),a=s(4441),p=s(3528),c=s(2932),l=s(6921),r=(t,e,s)=>new Promise(((i,o)=>{var n=t=>{try{p(s.next(t))}catch(t){o(t)}},a=t=>{try{p(s.throw(t))}catch(t){o(t)}},p=t=>t.done?i(t.value):Promise.resolve(t.value).then(n,a);p((s=s.apply(t,e)).next())}));let u,P;function d(){return r(this,null,(function*(){if(!P){const{GDPR:t}=yield Promise.all([s.e(1011),s.e(8262)]).then(s.bind(s,1353));P=new t}return P}))}var A=(t=>(t.US="US",t.EU="EU",t))(A\|\|{}),g=(t=>(t[t.TCFEUV2=2]="TCFEUV2",t[t.TCFCAV1=5]="TCFCAV1",t[t.USPV1=6]="USPV1",t[t.USPNATV1=7]="USPNATV1",t[t.USPCAV1=8]="USPCAV1",t[t.USPVAV1=9]="USPVAV1",t[t.USPCOV1=10]="USPCOV1",t[t.USPUTV1=11]="USPUTV1",t[t.USPCTV1=12]="USPCTV1",t))(g\|\|{}),S=s(9399);const h=new Map;h.set("US",A.US);for(const t in S.g)h.set(t,A.EU);var m=(t=>(t.NOT_APPLICABLE="BqgAAAAAAgA",t.APPLIES="BqgAAAAAAgA",t.NOTIFIED="BVQqAAAAA

Chrome Cache Entry: 832

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://u.openx.net/w/1.0/sd?id=540394477&val=2527372694113908282&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 833

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 834

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8730), with no line terminators
Category:	downloaded
Size (bytes):	8730
Entropy (8bit):	5.235882231057153
Encrypted:	false
SSDEEP:	192:rVHDI927Zb4i5I9g4pN+vLFDGIR0gZ5b+3+RqI8g/KR8UUD1iAwLJpeFOV:9Q218xug6JH3R8gxvwR
MD5:	C46E30DE24D0F12167E302E9E32FF4A5
SHA1:	C5BBB002C712492D85053A44D08D372CF8ED63BC
SHA-256:	C7F6468C8AC1542980B2D5F637FA933D7D00D2C6FF6690E34505D2AED0C0E23A
SHA-512:	2AAC92DD988CF1F75B38807ADC4B0892BE262876045E8C93EB432A1BF3FD5A90CF1E3F4DBED2774B08315B98F3F13549B019F3AC1E76064D7A6EF4997F852D2F
Malicious:	false
URL:	https://connectid.analytics.yahoo.com/connectId-gpt.js
Preview:	(()=>{var t={404:(t,e)=>{!function(t){var e={};function n(o){if(e[o])return e[o].exports;var r=e[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=t,n.c=e,n.d=function(t,e,o){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:o})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var o=Object.create(null);if(n.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)n.d(o,r,function(e){return t[e]}.bind(null,r));return o},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=2)}([function(t,e,n){var o=n(3);t.exports=function(t,e,n){return(e=o

Chrome Cache Entry: 835

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4320)
Category:	downloaded
Size (bytes):	4321
Entropy (8bit):	5.408252556402253
Encrypted:	false
SSDEEP:	96:EdphI+rvyMW026p4cHFpd9z9UC5H2zSwJN9QOcjxd3W:4/rW026p4cHFpd9zJASyNaTdm
MD5:	77FF4EDE4693897337A38594321529A3
SHA1:	968E57B7B4229F70A6901D1B3F7D7C3F9300502E
SHA-256:	84E5AA85594B35C4B60787F4A97E2E1EB369DACBE23D8154F61F60BB0343D465
SHA-512:	66C9E1B08C5846044B6014A15249ED5C5A420A11C1765978642F132C6F9275852AB9700EEA3B3E524E5EF96E1A56C92E3FAFBF13E71F5F82633502CCF71764BD
Malicious:	false
URL:	https://sb.scorecardresearch.com/internal-cs/27053452/beacon.js
Preview:	var COMSCORE=function(e){function n(e,n,r){-1==e.indexOf("?")&&(e+="?");var t=!1;(-1!=e.indexOf("&")\|\|e.length-1>e.indexOf("?"))&&(t=!0);for(var a=0;a<n.length;++a){var i=n[a];for(var c in i)t&&(e+="&"),t=!0,e+=c+"="+o(i[c]+"")}return e=function(e,n){if(e.length>n){var r=e.substring(0,n-8).lastIndexOf("&");e=(e=e.substring(0,r)+"&ns_cut="+o(e.substring(r+1))).substring(0,n)}return e}(e,r),e}function r(e,n){for(var r in n)e[r]=n[r]}var o="undefined"!=typeof encodeURIComponent?encodeURIComponent:escape,t="undefined"!=typeof decodeURIComponent?decodeURIComponent:unescape;function a(e,n,o,a){var i=[{},{cs_it:o,cv:"4.0.0+2301240627",ns__t:+new Date,ns_c:a?a.characterSet:""},{}];for(var c in window!=window.top&&(i[1]["ns_if"]=1),a&&(i[2]={c7:a.URL,c8:a.title,c9:a.referrer}),e){var f=e[c];"string"!=typeof f&&"number"!=typeof f\|\|("c1"==c\|\|"c2"==c?i[0][c]=f:i[1][c]=f)}if(!i[0]["c2"])return!1;if(i[0]["c1"]\|\|(i[0]["c1"]=2),n.url_append){var u=function(e){for(var n={},r=e.split("&"),o=0;o<r.length

Chrome Cache Entry: 836

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
URL:	https://bpi.rtactivate.com/tag/?id=20909&user_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 837

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6865
Entropy (8bit):	4.919837869231804
Encrypted:	false
SSDEEP:	192:YHSGsjyiR9V/uDCkTeU2IPBDlMa+h69ZOZ5ZXZ9ZbZiZsZ+3ZUE5oMYta8Qi8:3c3gr1vJE647
MD5:	AF2F05994DCA1E2CD8E89DC7E69EAD86
SHA1:	14E4F04AD653047D3AADDFA245942B1F7CB5EA43
SHA-256:	75733CAFD48E07301F03016226717E3F1EDE55CD522926FE8BB78098F9CDA70B
SHA-512:	68DB0CA06DA8C74A2EC4832DC5C95335F356169A71FD5236FDC1E08AB67F1DD4C4F95C04E68BEBA590C18F8C8229E7B19A751D88A54C415192478BCA016AE029
Malicious:	false
Preview:	{"productionVersion":"2.94.20","videoVersion":"9.1.10","ampVersion":"3.0.0","betas":[{"trafficPercentage":2,"version":"2.94.20-ab"},{"trafficPercentage":4,"version":"2.94.20-remLexiconId"},{"modelRequirement":{"modelProperty":"enable_grow_slidebar","modelValue":true},"trafficPercentage":10,"version":"2.94.19-slidebarRevAB"},{"trafficPercentage":8,"version":"2.94.12"},{"trafficPercentage":2,"version":"2.94.20-1510-1523-imp"},{"trafficPercentage":16,"version":"2.94.20-growSmartLock.2"},{"trafficPercentage":8,"version":"2.94.20-tooDense"}],"videoBetas":[{"trafficPercentage":8,"version":"9.1.10-ab"}],"ampBetas":[],"s2sBetas":[{"trafficPercentage":4,"version":"s2s-ab-test2"},{"trafficPercentage":0,"version":"node20"},{"trafficPercentage":4,"version":"ADT-1304-Adhesion2Nativo"},{"trafficPercentage":4,"version":"ADT-1532-NewBidderPtrn"},{"trafficPercentage":2,"version":"heimdall-s2sStagingEnv"},{"trafficPercentage":4,"version":"ADT-1591-CanonicalUrl"},{"trafficPercentage":4,"version":"ADT-158

Chrome Cache Entry: 838

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=VmlOOW1rQk8xUmQ5eFo1&google_gid=CAESEMGa8_lDPgEhdzWBcQgeXns&google_cver=1&google_push=AXcoOmQyCI2_46bKneXmQ0PypwJXrLUdUcaOG63RqnwUSbuQOCRmNPwVZtpIXht2_VQ25gObLB87X6MJo0LhKM5eQQDUOmC-d4M
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 839

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 840

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (27357)
Category:	downloaded
Size (bytes):	38952
Entropy (8bit):	5.469708068473705
Encrypted:	false
SSDEEP:	768:ec6/xevMLL4tYKBaMtCGsOlBS1+2Rfz4wDQjZvy/OQWwY4RXrqt:eLxevCqBHtCGhBSI29DQjZK/OQWwY4RY
MD5:	C00A58B18F4ED4BD1EB082619652F83C
SHA1:	D10FD61E59A61BFF96C373485B672B2221E8B149
SHA-256:	03B7F5ECAF6868FB05D983618CF739010980620364CB22FC458FBF788BAB30E6
SHA-512:	14685DD29308BDAFBC66E9A6CB4B0E0B946E2351AB0ED90A2D031CAA3337F6E702BBD30E8A08A5B7E161D12DE902D7E3FCD47C7F078E3B17F80C0BB8669D1959
Malicious:	false
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=10&cv=31&https=1&cid=8CUG3CC31&prvid=2034%2C2033%2C2031%2C2030%2C2074%2C394%2C2029%2C2028%2C2027%2C2104%2C159%2C2026%2C3038%2C2025%2C2069%2C117%2C238%2C359%2C239%2C437%2C97%2C99%2C59%2C2045%2C3057%2C3012%2C2043%2C2087%2C3011%2C3010%2C2041%2C201%2C3007%2C246%2C521%2C126%2C203%2C446%2C326%2C208%2C251%2C175%2C450%2C2009%2C178%2C255%2C3018%2C3017%2C455%2C214%2C3016%2C3015%2C336%2C413%2C3014%2C3058%2C337%2C338%2C339%2C77%2C38%2C182%2C141%2C222%2C102%2C345%2C226%2C468%2C80%2C108%2C229%2C109%2C41%2C508&itype=MEDIAVINE&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1&uspstring=1---
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":138,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":"e","coc":"NA"},"cs":"10","lookup":{"ppt":{"name":"ppt","time":350,"cookie":"data-p","urls":[{"type":"iframe","url":"https:\/\/bh.contextweb.com\/bh\/rtset?pid=560210&ev=1&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D10%26vsid%3D%3Cvsid%3E%26type%3Dppt%26refUrl%3D%3CrefUrl%3E%26vid%3D%3Cvid%3E%26axid_e%3D<axid_e>%26ovsid%3D%25%25VGUID%25%25","eu_url":null}],"pvid":28,"isBl":0,"g":1,"cocs":0},"son":{"name":"son","time":28,"cookie":"data-so","urls":[{"type":"img","url":"https:\/\/sync.go.sonobi.com\/us?https:\/\/contextual.media.net\/cksync.php?cs=10&vsid=<vsid>&type=son&refUrl=<refUrl>&vid=<vid>&axid_e=<axid_e>&ovsid=[UID]","eu_url":null}],"pvid":35,"isBl":0,"g":1,"cocs":0},"bdt":{"name":"bdt","time":364,"cookie":"data-b","urls":[{"type":"img","

Chrome Cache Entry: 841

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 842

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://u.openx.net/w/1.0/sd?gdpr=&gdpr_consent=&id=559546607&val=OPUb5d1f3b8746f478f8bbe11a7db7b8734
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 843

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2502
Entropy (8bit):	7.885521295962446
Encrypted:	false
SSDEEP:	48:kfcMDcv54meKZVcvTOodUWfYKESWX7OI40t+34oXROODmtnt31tN+kniLDX9:kRwRPVsqCUctWX6IHg3jEODmtntl+Fh
MD5:	FF862C0E7A4755ADF3682DA543BCE1E4
SHA1:	9DB9B9C9BB176AEE7F639F5F4A4CD702105358B6
SHA-256:	36133CA07927C88A7CC578FDDBAED3C668AB75087834D0CA13DCA5DE4EC856C1
SHA-512:	F7BD41F50C64D5DFC88989D0DDEE4C2CE816A08DC7410E5176C9386052791C04991022D406ED15BD0B6CA8C1E1ED83CD2E3B37C0F601DE26646F0FC49FCA0E6F
Malicious:	false
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/en.png
Preview:	.PNG........IHDR................W....IDATh..go.I....&s..g....I.8...6Yd0".(..#.."..d.t&.x.q6.8.7...'...u......wX.!.C........O.>.e....I....2.,.,....A.....,tV....m...6..SR....'.JKKi..l..<0=.={x........::}.4M.0....C.;w.......)==]y..Ky..?6..\.z..r..w...r'C5.:....a..z.....k.}....6y.d...1..x...5.........H...EDD....p.i..}...\|....Y.....<..{.;.V.9..t...\.hm..Z.y..]........C.u..#F......,x..-[.5x.....5..I.N.....&Xx...6....;......z..?.....n..N.u}...>}..7..\|:~.8..q...U[[K.z..v..@.^.t...k.*++..X..........\...L;..t.........%%%Qyy9{..]...n7......u.X....,x#.....m...F}...[.n).....G..U.x\\|.(l..r..IZ.f..'._UU._?h..g.RZZ..5<..3.z.jZ.v-.C.D...799..........TQQ...r.....u.VZ.b..:t..4...!.A......5..k.5;X....:p.......y..E.=...,v.Vj....=z4..;...1c.p..;.}....Pc.......i...Ba..;v.....}.v.4...yn.c`....C.xO.......4./l.....5..f.a.]n.]....=...8(.....X..Bs...a..z+P...........>.\..".mX(3.(/...W.......S.......<..jYY...U+.1;;...._..F...D.~....y.fo.QSS.}.......

Chrome Cache Entry: 844

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	56691
Entropy (8bit):	5.972335930781856
Encrypted:	false
SSDEEP:	768:AWO9UreQN0gS/sQGaNOUu/kBLUjmUjzoUjp0+l0+yUlnOUlnW074r0+iN+karEJJ:A18IB+Z0+l0+J4r0+It
MD5:	89E43B45E0E50423C91CB38065FECF13
SHA1:	D4FF73151AEC1037278CE6A2CC2CB11DABAB5940
SHA-256:	48321CB9B518877AA653E14582AE4B550BD586ABF845694C46460A592AA1D1B7
SHA-512:	89DE79791B63C6BFC3DD92A9952E37331D08F4929A5D9DDAB2739A4D144E2CE901B6B6D54569E58679554E2A0655C7F88EC94939D90D256D060B10575C6ACAC2
Malicious:	false
Preview:	{"/1030006/mathblog/adhesion":["html",0,0,null,0,90,970,0,1,null,null,null,1,null,[107212704516],[179384556],[29955756],[299148516],[98686],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CLCX4v3gioMDFSHI4wcd2kEGaA",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-singledo

Chrome Cache Entry: 845

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11133), with no line terminators
Category:	downloaded
Size (bytes):	11133
Entropy (8bit):	5.366169238631385
Encrypted:	false
SSDEEP:	192:mWSaUW2mZbvlxF6VADoa04tE2xuLvOcLCB5S3p3ihG7eMN3BPxJMQFMvxGDAuAek:pDUWZZ3o004tEqavOcGB5SgYXfJs5GDe
MD5:	6C0679C196E9E87D82DB5358EF210B4C
SHA1:	E505AFF93EF2CE77FF6A6F76D843D30B02D7D97E
SHA-256:	F6CFE89B284E6A2100A86B8D6B0E52B76B85CC62622A40D63E929F328D883A6A
SHA-512:	A3403C543D44AB5B6556D281354EDA3F49661DA38335EEBEA16F2DF9AE60C98B7D2090678D5911FEA2B680BB87EA9C0C89D3A13906A5C82B0A55C0CDB668500F
Malicious:	false
URL:	https://cdn-ima.33across.com/ob.js
Preview:	(()=>{var e={193:(e,t,n)=>{const{Ajax:s}=n(262),a="https://lexicon.33across.com/v1/envelope",o="ima",r={GDPR:e=>{let{consentString:t}=e;return{gdpr_consent:t}},CCPA:e=>{let{consentString:t}=e;return{us_privacy:t}},GPP:e=>{let{consentString:t,applicableSections:n=[]}=e;return{gpp:t,gpp_sid:encodeURIComponent(n.join(","))}}};e.exports=class{#e;#t;#n;#s=[];#a=[];#o;#r;#i;#c;constructor(e){let{pid:t,apiUrl:n=a,src:r=o,regs:i={}}=e,{ajax:c=s,consentDataHandler:l={consentData:Promise.resolve([])},localStorageId:p}=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};this.#e=t,this.#t=n,this.#n=c,this.#o=l,this.#r=r,this.#i=p,this.#c=i}#l(e){const t=JSON.parse(e);return t.succeeded?t.data.envelope?t.data.envelope:"":(this.#i.clear(),"")}async#p(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:this.#o.consentData;const t=await this.#d(e);return t?(this.#i.setId(t),this.#h(t)):this.#s}async#d(e){try{const t=await this.#n({url:this.#t,params:this.#u({allConsentData:await e}),o

Chrome Cache Entry: 846

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvLXpwzAZ4rHgSLF7aFMW_SgEvCHSAJk4HyOaHqZ54qFZRETFvRnDAHEHpPw9L0UNKTu1yiNOukuSEanZWVbWmKJkvsTKJhTH7gOQCWVln5u-DLAX9DM8NI9GlEhqBxfRJ8ADDWYvWu9yG11wrwR7rBoU6rOHSS5AC0AqEMDFI1lexTPiK44qs_&sai=AMfl-YRHjzVG9eYP9_tzkRPcBT6Xwg1_Zz2w5Ric6bPt0xAGmyxbz5PFkUvL5WcSfZMjHx6RPzUcBgeRss2pgi4olW3iIbdjWVb_ynq_C2KOy1gnPIOWbxsnUUvBc5M5uJDcGXFIDcu3ltzmXJPsXaw&sig=Cg0ArKJSzEX3VV1Gnj9DEAE&cid=CAQSTQAvHhf_SH0o2i6SBWRbNsBmlkfex4-ZiMMqeGou1rTk9TKS-c-ukbsharSSDNQX2clJDSAmrg2SnwbNZ85LYQmpeUoain__0zhQQYd2GAE&id=ampim&o=130,823&d=970,90&ss=1280,1024&bs=1280,913&mcvt=1381&mtos=0,0,1381,1381,1381&tos=0,0,1381,0,0&tfs=7299&tls=8680&g=100&h=100&tt=8680&r=v&avms=ampa&uap=Windows&uapv=0.1.0&uaa=x86&uam=&uafv=109.0.5414.120&uab=64&uafvl=%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 847

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 848

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 849

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.482798063070384
Encrypted:	false
SSDEEP:	24:YkVk3bePIpNVebkPPIpknzhcPUbPf5OtZtI0IUYSCWSV/kOFW+kJ:YekbVrtuaES/tFW+8
MD5:	2853BA3BD67140A18CC172D9B3179308
SHA1:	5AF388B7E5EAC519370D7E908660DCAEFDC01FFE
SHA-256:	694688617A12BAB0ED05B367AFFB8263180A74F8CDDD9092DA47968A341CD30E
SHA-512:	14E6C78403010BCA873EBE9AE3071B34AE4A17183B35E1232ACAD6A083EA99DD666A2D16F67DC35EAF5E279FCC512049013F984C62153A212CC519990450CF85
Malicious:	false
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=1888519017850258&correlator=376471234407412&eid=31080122%2C31080129%2C31080130&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&us_privacy=1---&iu_parts=1030006%3A1037824%2Cmathblog%2Cinterstitial&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=1x1&ifi=1&sfv=1-0-40&fsbs=1&ists=1&fas=8&eri=5&sc=1&cookie_enabled=1&abxe=1&dt=1702413500656&adxs=-9&adys=-9&biw=1263&bih=913&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=4&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMC4xLjAiLCJ4ODYiLCIiLCIxMDkuMC41NDE0LjEyMCIsbnVsbCwwLG51bGwsIjY0IixbWyJOb3RfQSBCcmFuZCIsIjk5LjAuMC4wIl0sWyJHb29nbGUgQ2hyb21lIiwiMTA5LjAuNTQxNC4xMjAiXSxbIkNocm9taXVtIiwiMTA5LjAuNTQxNC4xMjAiXV0sMF0.&url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&vis=1&psz=0x-1&msz=0x-1&fws=2&ohw=0&ga_vid=1980800170.1702413486&ga_sid=1702413501&ga_hid=276195404&ga_fc=true&a3p=EhgKCXlhaG9vLmNvbRjsgYL-xTFIAFICCGQSFwoIcnRiaG91c2UY7IGC_sUxSABSAghkEhsKDDMzYWNyb3NzLmNvbRjsgYL-xTFIAFICCGQSHQoOZXNwLmNyaXRlby5jb20Y7IGC_sUxSABSAghkEhQKBW9wZW54GOyBgv7FMUgAUgIIZA..&dlt=1702413482346&idt=16228&ppid=6111c3f0e29bb55dcd4030d89a5b2298b74b6ad4e27ce0bbfc93f4e34f6fe609&prev_scp=sales_cat%3D596%252C597%252C631%252C599%252C602%26sales_safety%3DGGT0%26sales_kw%3Dpolynomial%2520root-finding%252Calgorithm%252Cpolynomial%2520root%252Cvalue%252Cequation%252Csolution%252Cinterval%252Cstage%252Cproblem%252Cfunction%252Cfield%252Ccase%252Copposite%2520sign%252Ctechnique%252Canalytical%2520method%26partnerLift%3DverizonE1M1%2CebOff%26hb_bid%3Dno_bid%26slot_id%3Dinterstitial_desktop%26hb_bidder%3Dno_bidder_0%26hb_count%3D0%26hb_pool%3D0%26hb_pmp%3D0%26UR%3D46%26URP%3D144%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dinterstitial_desktop%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.46%26ccpa%3D1---%26timeout%3Dinterstitial_lazy_d_1701%26gid%3D0%26inview%3D0%26grow_state%3D1%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pps%3D687&cust_params=site%3Dmath-blog%26path%3D%252Fpolynomial-root-finding-with-the-jenkin%26secure%3D1%26sessiondepth%3D1%26optout%3D%26categories%3Deducation%26generator%3Dweb%26bucket%3D33%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D2%26day%3D12%26month%3D12%26hour%3D20%26wrapper_group%3D2.94.20-tooDense-beta-control%26wswy%3D0%26sessionId%3D1980800170%26groupm%3D1%26browser%3DChrome%26os%3DWindows&adks=2966916392&frm=20
Preview:	{"/1030006/mathblog/interstitial":["html",0,0,null,0,0,0,1,0,null,null,null,null,[["ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ",1736109502,"/","mathblog.com",1],["UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A",1736109502,"/","mathblog.com",2]],null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGskvHKqPyIj2EXC3MbUfEezm4uCT49KsXKJFYgvykvk5","CNKQxsDgioMDFdbs4wcdn7YHgw",null,null,null,null,null,null,null,null,null,null,null,null,null,[null,null,null,null,"ca-pub-9299107390287692",8,null,null,null,null,0,0,[["i-fvs","true"],["stop_word","ad choices;adchoices;advertise;cart;checkout;conditions;contact;copyright;desktop;disclaimer;faq;help;log in;log off;log on;log out;login;logoff;logon;logout;member;menu;policy;privacy;register;registration;setting;sign in;sign out;sign up;signin;signout;signup;site map;terms;top;install"],["qid","CNKQxsDgioMDFdbs4wcdn7YHgw"],["numMessag

Chrome Cache Entry: 850

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 851

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1612
Entropy (8bit):	5.4290245036155325
Encrypted:	false
SSDEEP:	48:7OLURRVc+o3OLUlN0oPOCLo5RVc+o3OCLYN0oD:7OLUbVc+o3OLUlN7OCLYVc+o3OCLYNn
MD5:	1E117929CD9109A611778691986CBFB1
SHA1:	8A707220714E2C393D7C24498D7258578D7582D0
SHA-256:	39DF2D4184C59CD83E66C5F28446BA1F61724D208F4657A9062117A57F8D1F07
SHA-512:	7E6A9F658E492DF1CC35E0C98996ED76BB580E060943A27CF838C4D5D80BF70601420DEDCD7A85F4A59E09B90FF54A7EB5333FFA4F96AA2BF3264DD8E7E576B4
Malicious:	false
URL:	https://fonts.googleapis.com/css?family=Libre+Baskerville:normal\|Libre+Baskerville:700&subset=latin
Preview:	/* latin-ext /.@font-face {. font-family: 'Libre Baskerville';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNXaxMICA.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Libre Baskerville';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Libre Baskerville';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/librebaskerville/v14/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qv

Chrome Cache Entry: 852

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.710053939084934
Encrypted:	false
SSDEEP:	3:YxhAjDPGgInWDcEWXpACNNpAcANQDxPBaelWV4:YnQugInirWXpAWAcANQtP4CWq
MD5:	26AB606325FF54BC817AA8DCCBB3A99B
SHA1:	CDB967C012D5300BE6120D92832C176775BF83C0
SHA-256:	B2AB25A3B9A1E28DC9E96F8E3F1DAB743411EF5C5CE6C2DEE529BF897FFF2840
SHA-512:	FDE17DB348CBF24B5024E02E17AFF7C9612450E2B7AB8C255227F67120EC533F9BA6333154B80D6FD073DC3C6D37F6C199BD50C82330A615A7A83CA1C9B0DE64
Malicious:	false
Preview:	{"TDID":"3311a7f3-c44c-4d38-8196-dca4c2b0f8ec","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2023-11-12T20:38:17"}

Chrome Cache Entry: 853

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	574
Entropy (8bit):	7.40620234406171
Encrypted:	false
SSDEEP:	12:6v/77eUXpSV8BktM/1hn8E2176owqmVYdsgwZOM9:dUXUqSSdhnP2175K4sgwgM9
MD5:	FC14B666887D1EDCB67BEB9AEB36667B
SHA1:	7285646C7E8A39425AD20BA7B8F7ED81D7D4523B
SHA-256:	C46984040948CD91A49D685F4D79D48398A3B44B92D4FCD1ADB7A20547B62CA1
SHA-512:	FACC7AA515ED483796E28C320BF0D173C834D09F4044717F1652C83E84391E670A6522492D64C64B16E2FC4B271EBAC07B7128755984B9C4EA55BDEBA95CA8E3
Malicious:	false
Preview:	.PNG........IHDR..............D.,....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2....IDAT8.c....f...t..M.........\K.V...[b.cB....?+...........{.r....d..... ...m...q=~..0C...4...;..Ir.}...x{.Y.8..o.H....\|.>.C....`.N1.?#...m.....%h....&}.^.&..x..YG."...o.....k.m..{.3Ej..a."5...4......S$.0.ug}./<Rc```x...k..Gjv...2000p.0.NQ...S....O...._x......o......../....n.##./.\....C.....\|uW.**r...ba.....V....3M..a3...a.........s.=.y.....<....}a^a```...<.T.".......[..._.."......IEND.B`.

Chrome Cache Entry: 854

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 855

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEBbc3Ulb89MYktvFpUDZ7SE&google_cver=1&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 856

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4187)
Category:	downloaded
Size (bytes):	63492
Entropy (8bit):	5.5585818568895355
Encrypted:	false
SSDEEP:	1536:G/HavMgGrumr7OZqB8eZE+4wReyoOE+Kz5DLP2xuCRbNicf3UkNcnk60w89WenC4:uHavMgGt70qQ+4wReyoOE+Kz5DLP2hRL
MD5:	484782B4A41284C2EC9801038A8AB2DC
SHA1:	296319DF0E4D14A73BCBAB53E3E66C5D915DA567
SHA-256:	FD81700751CCCDA5A42F1AAAE58FADC81F23D2E45C9A4F6FCC3290FF38B776B1
SHA-512:	35513BA1508DEBD2A1D10037877EDB73D0E215611CBFA96CE912353378C585DB4C0AA789C0BFDD1F2493D37CA0250F19BBCC3D786FF075692925ED53CADBEA1D
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/3291718278215255336/index.js?1699399357907
Preview:	(function (cjs, an) {..var p; // shortcut to reference prototypes.var lib={};var ss={};var img={};.lib.ssMetadata = [];...(lib.AnMovieClip = function(){..this.actionFrames = [];..this.ignorePause = false;..this.gotoAndPlay = function(positionOrLabel){...cjs.MovieClip.prototype.gotoAndPlay.call(this,positionOrLabel);..}..this.play = function(){...cjs.MovieClip.prototype.play.call(this);..}..this.gotoAndStop = function(positionOrLabel){...cjs.MovieClip.prototype.gotoAndStop.call(this,positionOrLabel);..}..this.stop = function(){...cjs.MovieClip.prototype.stop.call(this);..}.}).prototype = p = new cjs.MovieClip();.// symbols:....(lib.bg = function() {..this.initialize(img.bg);.}).prototype = p = new cjs.Bitmap();.p.nominalBounds = new cjs.Rectangle(0,0,1456,180);...(lib.cl = function() {..this.initialize(img.cl);.}).prototype = p = new cjs.Bitmap();.p.nominalBounds = new cjs.Rectangle(0,0,1456,180);...(lib.cta = function() {..this.initialize(img.cta);.}).prototype = p = new cjs.Bitmap();.

Chrome Cache Entry: 857

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 858

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 859

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
URL:	https://interactiveds.com.au/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 860

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=rkqMPRCWRZqwkSut1QCfUg%3D%3D&google_redir=https%3A%2F%2Fimage8.pubmatic.com%2FAdServer%2FImgSync%3Fsec%3D1%26p%3D156578%26mpc%3D4%26fp%3D1%26pu%3Dhttps%253A%252F%252Fimage4.pubmatic.com%252FAdServer%252FSPug%253Fp%253D156578%2526sc%253D1&google_push=AXcoOmSDU0aQBzLDmZzR5__EMa8CUEGMXEWP1aXKf1gYt6WuNRhtf0Nrf9BwZ9Q0lLoyaO2_YWq3GgMQlhKBgEmOy-SugJXk12ld
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 861

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 862

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 7 x 7, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.649860198034585
Encrypted:	false
SSDEEP:	3:yionv//thPly4tJRHPTrAbDjp:6v/lhP/5PfEDjp
MD5:	4C3AD797D1D966477C8D8AFB841B2B08
SHA1:	6A9BD02402E3279E6A4A5564C751CEED1EB0CB5A
SHA-256:	E5766694458AF1AF1833514EB4C2948BD9E9CC2082A4C02281B8668F386C1F41
SHA-512:	230BEB786350393A17BC2AF380C5E4450FB6F4F2CE6DBE9C3FF188A7F16AA4D9B94E9F16AD164ABA1E7B1115491425FB856F9EEF4496275C47E15A2FEE33ABBF
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/themes/mts_schema/images/pattern13.png
Preview:	.PNG........IHDR.............n[.X....IDATx.c..V.E...I......B%Q.v....IEND.B`.

Chrome Cache Entry: 863

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (880)
Category:	dropped
Size (bytes):	899
Entropy (8bit):	5.302798185814102
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT79+THal1o/bvbUfNcL5Y2PqjRMZ/xT+IBbRT79+THw13bvbUucL5+:WDlf8EgCobT8u8aYEgWbTybaRKO+kFlb
MD5:	749181F29AB91A3711E8B5757E7F9951
SHA1:	5582E50799F0F215EF76B7445FEFD660BC79EEFC
SHA-256:	EE5394C77349E007AC892A1921F0D2B0A5D22EE73D8F7A198B842CFA9EC12837
SHA-512:	A8920C18CAC1E4D7E09018B3920998D3B966A0429FC2EE69E1EFB655C02D71B2DA66E05C55BF99FE287B5C165859E56F2BAB9870AC94B6DE2BC60E1B48F5A012
Malicious:	false
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JPmtEELNDOixxtS1omRLsJAAAAGMX8J90wEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCbF1iR","size":"300x250","crid":"503415726","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"sidebar_btf","amznp":"1uktatc","mediaType":"d","amznbid":"104jv28"},{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JNv3Wl2oiCqLVGUomKag_UUAAAGMX8J90wEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICBJx0pP","size":"300x250","crid":"503415726","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"content_btf","amznp":"1uktatc","mediaType":"d","amznbid":"104jv28"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"1"})

Chrome Cache Entry: 864

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3671
Entropy (8bit):	5.502375741147008
Encrypted:	false
SSDEEP:	96:GYOLVFZvOLr9OLfOL0Vc+oxOLQNJYOgzFZvOgM9OgGOgNVc+oxOgENn:G1Qroa+FQy5MzoZCk
MD5:	6A8FCA566B42DB680ADA8C02B0460BAB
SHA1:	7698EB2AF0E4ED31454251A732EF0B0485DA0016
SHA-256:	4681D619F677C1B314814309A6F00A5E0EC3F12968E807EE71DEF1CF42BD7808
SHA-512:	BA2A4BFB90D4DA8FAAEBEA34A1B945E296D79D4F8DD38DA102903DBE0B6F118181613C3E963CC93F6743757BA992E161FC888CC266CC62CEB3EF13750BACA848
Malicious:	false
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%20Display%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvr9oS_a.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv39oS_a.woff2) format('woff2');. unicode-range: U+0370-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Display';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDvH9oS_a.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-

Chrome Cache Entry: 865

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 866

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 618x618, components 3
Category:	dropped
Size (bytes):	21506
Entropy (8bit):	7.726243093383049
Encrypted:	false
SSDEEP:	384:ItH6jC6OO81erPGy1LcofV6st/wU3ve6wygk9ASgWZzSYNiWDyc1:nU1TOd9NtIU3e8RgWZzS3WD31
MD5:	1B9BACCA5136DA16635B8522BAC508AC
SHA1:	EBBAB2C299665F186715D803B12E91B676CDC9F7
SHA-256:	9280E489590B018547C549723C7B25B45F26384F9A5DE3F80E5E28069455D60A
SHA-512:	055AC4137AB60F9CDFF43079427CEA62CA97BD3095B03C0A0A6FE30085B31F3A8DC45D4A4EA4696817CD168BF7B25FCDE02CF63CCEEA9CBFEE8078BF7C32800A
Malicious:	false
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......j.j.."........................................[..........................!1.AQ."2Raq......#......$3BSTUbr.4DVs....5Cct....&6..E....%Fd...............................#........................!1.AQ2Ra.............?...@.A....$........................ ...@...@....................H...........................2.........@.A................A........... ...$.I.....$.........@.....0.....@.......@.A......b... ........................@...@....@ .........................@...@..@.......H ...t.i........................H.. ......P...@..............................@....A........t.i......@.H.. ...$...@.A..$.......C.2I......(.$. .. .9..$...H..@.I.......`@.. . .........(.H....D...4..E...@.........!.... .....!.'#$.'#$.'#$.....9. .NFA.S..... ....... ...... .. .$....@...@ .(.B..$h...... .P.. ..........@....@$.....@..........$0......A.... H.......... .H

Chrome Cache Entry: 867

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.215346826699106
Encrypted:	false
SSDEEP:	3:RFrXJFhXA8wq0FPIvn:jrX1A8FIIvn
MD5:	F6AB5FF81934FB35354C4C81A02D4843
SHA1:	A5DAFFB05D48FAEDD64A523AD5FABF80570D5A5E
SHA-256:	FCA34E38DDF5C8D31B91B369935B3CE6E1D2BF935CE3A595E2470DBD9A820FC1
SHA-512:	ED2E53B7F9BE4FF2445082E9B724A0E93FA751C3520CB9699E660C7E41ABA8BA2AA315C77E805E38B0559753E8EF04B3590AC7E1B3D229CE544B8605C7CA6065
Malicious:	false
URL:	https://mathblog.com/2WOFDurG0lJJ.js?ts=86748
Preview:	// this beacon is used by Presslabs for metric computations on mathblog.com.

Chrome Cache Entry: 868

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 869

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (34759), with no line terminators
Category:	downloaded
Size (bytes):	34761
Entropy (8bit):	5.022119071162762
Encrypted:	false
SSDEEP:	768:kHOnj3nNzyqVu3zFFb8yOyw+OwhyESNwb618jrq8Xwzk6dfMxU5prnIsENROSIt:VKbbZrZ8zx
MD5:	E778AC862012DBE08CA0D19E5C2F804F
SHA1:	F2BE01D8F77F85DC7CBF1EC8A4740C0F1B00DF8B
SHA-256:	53D0F64DC3C17B2C56283967C6E2D8D37632A7235B847B7EC0998DEDC55B3504
SHA-512:	591CB6DEFAC40BBADADB8BEA952208BF9E02486963697E34079E4D2906D21C64B9B831EA13012AEE303C2ABD82767D7282019597A11860B2CECF9FB58160140D
Malicious:	false
URL:	https://cdn.mathblog.com/wp-content/themes/mts_schema/style.css
Preview:	a,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,em,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,object,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline}html{-webkit-font-smoothing:antialiased}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}ol,ul{list-style:none}blockquote,q{quotes:none}button,input,select,textarea{margin:0;font-weight:inherit}:focus{outline:0}img,object,video{max-width:100%;height:auto!important}iframe{max-width:100%}blockquote{font-weight:400;padding:0 10px 20px 27px;position:relative;margin-top:25px}blockquote:after{font-family:FontAwesome;position:absolute;content:"\f10d";font-size:20px;wid

Chrome Cache Entry: 870

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 871

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1200, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2149
Entropy (8bit):	6.230724832270889
Encrypted:	false
SSDEEP:	48:NZWPFXp7vC6pyos+cBAKXvB3gxUm1CYZ4N:zWlvCt1BAo3mEQq
MD5:	6ACA0870F23BCF933F299572ECAAE8F8
SHA1:	952EF17132814CF4DFA6E0FA08640729622E744E
SHA-256:	45F463EBA8466BAFD6C406535D608E20E8F270D45EA7B446A0E402409731CC1E
SHA-512:	D30516DDE4176C5112552CBEF161639C8B47F5505D34A0BECB715EBF08D90DBF139180E43439611DA90547E9CBA556FFB98BC72DCB264052D414530163FC6F4A
Malicious:	false
URL:	https://s0.2mdn.net/sadbundle/4207599684547219402/images/cta.png
Preview:	.PNG........IHDR...X............;...3PLTE..............mt.....:........[c.FP.......~......=.....tRNS.@..f....iTXtXML:com.adobe.xmp.....<?xpacket begin="."?><r:RDF xmlns:r="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><r:Description xmlns:x="http://ns.adobe.com/xap/1.0/"><x:CreateDate>2023-10-26T14:56:45-00:00</x:CreateDate></r:Description></r:RDF><?xpacket end="r"?>........IDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU...@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU.=8........m.UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUa........._.AUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....... ..FPUUUUUUUUUUUUUUUUUUUUUUUU

Chrome Cache Entry: 872

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 873

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25
Entropy (8bit):	3.5238561897747243
Encrypted:	false
SSDEEP:	3:YBOHfBAYn:YwaYn
MD5:	B5187DFE812F1E51CBC4B2E7CF49E223
SHA1:	32A08288B42A59A3EBEAAC38C52DAEF41C0E7D24
SHA-256:	923840042D73AD6A02C72B4414A7B0FF61615D58C9EA7B1BE0C3BE15392222E0
SHA-512:	B942B0E6387FD1D8F291E84A4A3E1957041A14070850A6E3FC609C28C9E170BB23135AC0190B77FA6CDD2B3EF650019FC4D8903FBCC8A4A0E1000FEFCEE46AD7
Malicious:	false
URL:	"https://sda.fyi/update?cats=687,687,687,687,687"
Preview:	{"2023-12-12":{"687":35}}

Chrome Cache Entry: 874

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=MjYzODc3OTA0ODcxNTg3ODM1Mw%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 875

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	90180
Entropy (8bit):	6.070337328151386
Encrypted:	false
SSDEEP:	1536:1AzkqzWDMVowGBQaX2uUobbEGmPVlNTNCzuWHywwGP:1A7ZehmuUioGmGSp8
MD5:	AA423B8F8176B65A4FCD3B6DA0BEC318
SHA1:	35907B313C4979EB552B1BEC840F4B644561EBE6
SHA-256:	1AF7392D3F7874BF432E3978A0E0E530F571E368B5BE417DCC8D9A3D3D78EA47
SHA-512:	1D3BCD796C4ECFC2E415D7FD889ECA7F5BF5846D407C0783B95341C2ECAE9BA8155A30A880ECF002DF6B7D6D4D1AD08E7C2DCBCF381788820B28E5B6E6DBD487
Malicious:	false
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3369879066748359&correlator=4208888336270888&eid=31080125%2C31079784%2C31080127%2C31080115&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=1030006%3A1037824%2Cmathblog%2Csticky_sidebar%2Ccontent&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F3&prev_iu_szs=300x250%7C300x600%7C160x600%7C120x600%2C320x50%7C300x250%7C728x90%7C336x280%7C468x60%7C250x250%7C320x50&fluid=0%2Cheight&ifi=2&sfv=1-0-40&fsbs=1%2C1&eri=5&sc=1&cookie=ID%3D70f210562803e33e%3AT%3D1702413502%3ART%3D1702413502%3AS%3DALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ&cdm=mathblog.com&gpic=UID%3D00000da8e52e5ed8%3AT%3D1702413502%3ART%3D1702413502%3AS%3DALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A&abxe=1&dt=1702413626857&adxs=892%2C292&adys=916%2C3450&biw=1263&bih=913&scr_x=0&scr_y=0&btvi=1%7C2&ucis=2%7C3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=4&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMC4xLjAiLCJ4ODYiLCIiLCIxMDkuMC41NDE0LjEyMCIsbnVsbCwwLG51bGwsIjY0IixbWyJOb3RfQSBCcmFuZCIsIjk5LjAuMC4wIl0sWyJHb29nbGUgQ2hyb21lIiwiMTA5LjAuNTQxNC4xMjAiXSxbIkNocm9taXVtIiwiMTA5LjAuNTQxNC4xMjAiXV0sMF0.&uas=3&url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&loc=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&vis=1&psz=300x0%7C300x-1&msz=300x0%7C300x-1&fws=0%2C4&ohw=0%2C300&ga_vid=1980800170.1702413486&ga_sid=1702413625&ga_hid=1409992419&ga_fc=true&a3p=EhsKDDMzYWNyb3NzLmNvbRj9kIn-xTFIAFICCG8SiwEKCmFtYXpvbi5jb20SdDdib0RSZ2lKRkR5SWIwcmhJL0IyNnFpb3N5WmJIc2pEbnIwZXREM3h4MFl6V0tMazdGMVdYSlBNdEtPZEg3bFlkTkdrVTdlWHcramRoL2cxNUs3SnpNL2s1cUFNazViYWJTUXlhWFdlcnpFNGw2WHg1Ylk9GOa-iP7FMUgAEhgKCXlhaG9vLmNvbRi4-Ij-xTFIAFICCG8S7gEKCHJ0YmhvdXNlEtgBTVVWV3JGSlJxSkt6ZUx0dnd1dks0V3ZaT0xiNWVEMlRjSmhuZGpEK2JJRGIxaUFkbGhJYU9zQ01rYTROQjBQY01yZVYvaUdHbzlhYitrMkdDM0RJWkYxcVZWdG9PSGwwbWVrQkxDWjR3STdIU1pGbERMeGdVTGYvaGhSSXJ5RmN3bi9ZbktRSEMwS3FVSVlKZ3lpWE5mOFI3bS91ZWRqbnp1UUp2cnVyVDQ2UTl6WnFkM0M4RmlRNTR4OFNGQkFIcUVkZStvczdkQ1QxU3lMT2ZxK0xwZz09GLyQif7FMUgAEoACCg5lc3AuY3JpdGVvLmNvbRLkAW9uUjFnbDlsUldWWVJqRk1VREJaYVNVeVJsQm9WVXhTUkcxalZreEZaV3A1U2poMFRIZGhWM2g2WjA5TGFsYzVUMVYzY1NVeVJrUnZhbmhYZWtkTFRHSkNTMUY0VEhSV2NUZEhaVEJVUW5sRVpVbHFlRGhhWkVkR0pUSkNjbTFOUm5WalVXTTVWa28yZWxaelJ6STBkR2xuYWxkdVdWcFVZVVZsZWxSNUpUSkdSR1ZQWldoR05tNXVNbUZzVm1wQloySkZXRXRXTlhSdWRFOUJKVEpDZW14RE9IbDNKVE5FSlRORRiiiIn-xTFIABI-CgVvcGVueBIsZXlKcElqb2lSR0Z4TUdFMGFUbEJlRmt6Ym1sNmFFWlNjM2QxVVQwOUluMD0YgMeI_sUxSAA.&dlt=1702413612592&idt=10213&ppid=6111c3f0e29bb55dcd4030d89a5b2298b74b6ad4e27ce0bbfc93f4e34f6fe609&prev_scp=maxVelocity%3D801%26hb_bidder%3Dmediadotnet_s2s%26hb_adid%3D57d926c103e21c%26hb_pb%3D0.60%26hb_sdef_set%3D0.961024%26hb_bid%3D0.60%26hb_bsbid%3D0.59659404%26hb_safeframe%3D1%26hb_s2sBidder%3Dmediadotnet%26hb_liv%3D4%26hb_ub%3D0.60%26hb_size%3D300x600%26hb_pb_rubicon%3D0.25%26hb_pb_indexExcha_s2s%3D0.20%26hb_pb_sovrn_s2s%3D0.27%26hb_pb_gumgum_s2s%3D0.30%26hb_pb_mediadotne_s2s%3D0.59%26hb_pb_openx_s2s%3D0.13%26sales_cat%3D596%252C597%252C631%252C599%252C602%26sales_safety%3DGGT0%26sales_kw%3Dpolynomial%2520root-finding%252Calgorithm%252Cpolynomial%2520root%252Cvalue%252Cequation%252Csolution%252Cinterval%252Cstage%252Cproblem%252Cfunction%252Cfield%252Ccase%252Copposite%2520sign%252Ctechnique%252Canalytical%2520method%26partnerLift%3DindexExchangeE3M1%2CebOff%26slot_id%3Dsidebar_btf%26hb_count%3D7%26hb_pool%3D0%26hb_pmp%3D0%26UR%3D60%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dsidebar_btf%26arrival%3D0%26refresh%3D0%26sspm%3D1%26bidFloor%3D0.12%26ccpa%3D1---%26timeout%3Dsticky_sidebar_lazy_d_1701%26gid%3D0%26inview%3D0%26adomain%3Dsetbuyatoyota.com%26grow_state%3D1%26dsp_seat%3D160%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pps%3D687%7CmaxVelocity%3D801%26hb_bidder%3DindexExchange_s2s%26hb_adid%3D5233c3a6fdef35d%26hb_pb%3D0.27%26hb_sdef_set%3D0.961024%26hb_bid%3D0.27%26hb_bsbid%3D0.26919054000000003%26hb_safeframe%3D1%26hb_s2sBidder%3DindexExchange%26hb_liv%3D4%26hb_ub%3D0.27%26hb_size%3D728x90%26hb_pb_indexExcha_s2s%3D0.26%26sales_cat%3D596%252C597%252C631%252C599%252C602%26sales_safety%3DGGT0%26sales_kw%3Dpolynomial%2520root-finding%252Calgorithm%252Cpolynomial%2520root%252Cvalue%252Cequation%252Csolution%252Cinterval%252Cstage%252Cproblem%252Cfunction%252Cfield%252Ccase%252Copposite%2520sign%252Ctechnique%252Canalytical%2520method%26partnerLift%3DindexExchangeE3M1%2CebOff%26slot_id%3Dcontent_btf%26hb_count%3D2%26hb_pool%3D0%26hb_pmp%3D0%26UR%3D27%2C51tc74%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dcontent_btf%26arrival%3D0%26refresh%3D0%26amznbid%3D104jv28%26amznbidub%3D51tc74%26amznadj%3D51tc74%26amznadid%3D509b69d0d00e20a%26amzniid%3DJJuNb5f4HQkkf6qojJVOHcAAAAGMX8JrqgEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICC6o7_H%26amznp%3D1uktatc%26amznsize%3D300x250%26sspm%3D1%26tam_liv%3Dtam_1%26bidFloor%3D0.12%26ccpa%3D1---%26timeout%3Dcontent_lazy_d_2801%26gid%3D0%26inview%3D1%26adomain%3Djamesavery.com%26grow_state%3D1%26dsp_seat%3D85%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pps%3D687&cust_params=site%3Dmath-blog%26path%3D%252Fpolynomial-root-finding-with-the-jenkin%26secure%3D1%26sessiondepth%3D4%26optout%3D%26categories%3Deducation%26generator%3Dweb%26bucket%3D83%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D2%26day%3D12%26month%3D12%26hour%3D20%26wrapper_group%3D2.94.20-tooDense-beta-control%26wswy%3D0%26sessionId%3D1980800170%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26s2sVersion%3Dproduction&adks=2722745430%2C2680944423&frm=20
Preview:	{"/1030006/mathblog/sticky_sidebar":["html",1,0,null,1,1,1,0,0,null,null,1,1,null,[138342109824],[5673566851],[4995750154],[2846932781],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGskztHwd6N7U69Hc4PzgWY3HFn6I9epwrJzTcHd3EBCxy_R3BUs0T7nMt26_9Bz1n6Eweg569jd945UI3tNZRCE","CN-FqPzgioMDFT8sswAdkSsI3g",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html><head></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script src="https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js"></script><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20231207" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0

Chrome Cache Entry: 876

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1191)
Category:	downloaded
Size (bytes):	1259
Entropy (8bit):	5.429196183163413
Encrypted:	false
SSDEEP:	24:2e+6JMUEtBtXZZ8mMxuQnZDX+IvU/gRSxEEikvSxiG9BmfWj:2e+aMDXtXT8nOgRSxEE3vSxJ9Bmy
MD5:	07EBD964B0EED7E11E786633431F704E
SHA1:	E895A84B354B15436D8B844886603501880FD2A7
SHA-256:	564F50914D704F63B8097FE226F3B7CD820BC1AECFFE30DE29D907AC30EF407A
SHA-512:	51D002063E7191ADBFABB1581E87F38EC70E6182C5044BF8937342064E8EC3D4AF7E404461DF8A4C493D235FA41F9B99E69F189420231FD233AF161DDDEE7665
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/cm?id=c6a5ba0d-ce02-41bd-a1ea-842c68bd5108&ph=8f5ed5d4-642c-4222-968a-d709c87ac3c8&us_privacy=1---&r=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D70%26external_user_id%3D
Preview:	<html>.<head><title>Pixels</title></head>.<body>..<img src="https://events-ssc.33across.com/match?liv=h&us_privacy=1---&bidder_id=70&external_user_id=a86d875c-ffb1-0c0e-017f-ebd97b68911b"><img src="https://vop.sundaysky.com/sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D"><img src="https://ads.stickyadstv.com/user-registering?dataProviderId=641&userId=a29a2e2d-5af0-0811-3bf6-e705c15d2422&redirectId=2257"><img src="https://dmp.brand-display.com/cm/api/openx"><img src="https://match.justpremium.com/match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e"><img src="https://ssbsync.smartadserver.com/api/sync?callerId=81&gdpr=0"><img src="https://ce.lijit.com/merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16"><img src="https://creativecdn.com/cm-notify?pi=openx&gdpr=0"><img src="https://openx-ums.acuityplatform.com/tum?tpid=22&uid=a0e6c68f-8dbd-0afb-3786-0e94c1983b43&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537123500

Chrome Cache Entry: 877

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20784, version 1.0
Category:	downloaded
Size (bytes):	20784
Entropy (8bit):	7.989041194123322
Encrypted:	false
SSDEEP:	384:ldrXYIW4bkISLBTb0r2/y5Eod0/ihRUCuZwCGQf1Hvw/WCZmMyz6:l9YIWzIAfe6yTd0/k0ZZGQ1Y+c9yO
MD5:	E11C810C086DF83C0876DD59ED32EBCB
SHA1:	B89FE2ED6D016F81AF13B35797AD2B0E2E5C6822
SHA-256:	ACC5497E76F832D950D14FCFA047DC3C864F7A0AAE4C7A20521C0C655A53033B
SHA-512:	DB93E7E4818B40C7B16C241441A5BBFCD335121A89A737611ACA4E5BD1F22A7D8FD9A1E79E0D0A7701A497CF6BBC238A7417D5DAC3480D20D4742B9B9717A15C
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesansdisplay/v21/ea8FacM9Wef3EJPWRrHjgE4B6CnlZxHVDv79oQ.woff2
Preview:	wOF2......Q0.......l..P..............................b..@.`..~..L..u.....D..'.....6.$.... .....X..#.....6..w;.v....n....yeUtv0v;.+...e..g$'24P.i.6n.!f;C.s&q...S...d..".............T;:....$...9I.....F.....?...px...q.:..qN.+G.X.i.....7N... p.cN...t...wb..."...E>....'Q..._=g... ..1......;..A........i.Z...X.".....1T'..1.N.....s...-[.-.c.c;.I..@w.>...==...L...C.8.....m..)n,.........8....%.Z..~.W..o....^._-_.D...{.~.i.......U.J."..P..%E.nB=.f...5...J...:.$dQ.T).l_..t1...1.o.aI....C.........a[...d......a.:w...-x.;.2.. ...CjA..u...&iS..[.%.G...../n...#.....:../.+.1..........O../.....9g..Cf.J.....&....pS.h.......M%.......=.>&.E..Rj+..#.e]....G..bE,...`.........s.V.].\9.....S....e$.....).".PU.......\..n.Kl[u..+..U.....M&...,......R.U.....;ck......Y..j.....i5.f#.x............t..[ ..Q.0A.W.......xV....:M.\..r#M`2.R.l..p..p......O...P...k6...F4O..%...x...5}g...OY?.8.0..f..+....`Tb3S@a..Q.A...%. ......(..;..P;.Q...k.AJH.s...l.^...^.!.......cc,=.......o

Chrome Cache Entry: 878

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43567), with no line terminators
Category:	downloaded
Size (bytes):	43567
Entropy (8bit):	5.26450424770801
Encrypted:	false
SSDEEP:	768:waHCoz1pkGxeBrGBRTRgEVqKaNlgrxEQ3kAm81j9WINOp:wEVqKaNlgrxXZm8TWINOp
MD5:	207A8AEF37A148BE6D0466E0D42EC2E4
SHA1:	33124E2954311578DE8BFC89ED333BB56585F3EE
SHA-256:	2F1AD4EC7176F493B16E0D186F222E3484248CBB48F82289C736A0877F2D5894
SHA-512:	B3D79FFC7B06572AE80A686015847E9F5FD7E08A75AB21599A141EFBD2AE7E7D5E6358A7EC9B8F580FB60B0BEBA4341F4F13340B46EC6C13AF70CEDB387D6497
Malicious:	false
URL:	https://static.criteo.net/js/ld/publishertag.ids.js
Preview:	!function(){"use strict";var i,e;(e=i=i\|\|{})[e.Error=0]="Error",e[e.Warning=1]="Warning",e[e.Debug=2]="Debug";var s=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),h=(a.Log=function(e,t){if(!(a.LOGLEVEL<e)){var o=i[e].toUpperCase(),n=window.navigator.userAgent,r=0<n.indexOf("MSIE ")\|\|0<n.indexOf("Trident/");window.console&&(r?console.log("[PubTag] "+o+": "+t):console.log("%cPubTag",s,o+": "+t))}},a.Debug=function(e){a.Log(i.Debug,e)},a.Warning=function(e){a.Log(i.Warning,e)},a.Error=function(e){a.Log(i.Error,e)},a.LOGLEVEL=i.Error,a);function a(){}var c=(t.getHighestAccessibleWindow=function(e){var t=e,o=!1;try{for(;t.parent.document!==t.document;){if(!t.parent.document){o=!0;break}t=t.parent}}catch(e){o=!0}return{topFrame:t,err:o}},t.getHighestAccessibleUrl=function(e){var t=e.topFrame;if(!e.err)return t.location.href;try{var o=t.top.location.href;if(o)return o}catch(e){}try{var n=t.location.ancestorOrigins;if(n)retu

Chrome Cache Entry: 879

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 880

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.090163392719035
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/VO4Jikg1p:6v/lhPfA/k4Jibp
MD5:	73031B554FD75A3DF2B54C9FC5D2D654
SHA1:	447A248347BF2E003DF3DD1750403068575EE019
SHA-256:	01FC92B7704C3E3BAAEFD2CE87CE17E2EA266A1BB4244F032DA25931E9C6FB92
SHA-512:	106E94EDD40EE3D5B99AE6456BB928EA790347045DD8B198A407FF1F88F8BCEB5BCEF5C0811EBD12C8A09BD73911B8DB2EC3F1E958875866DF3D59ECA7A17CD7
Malicious:	false
Preview:	.PNG........IHDR.....................IDAT..c``......OH......IEND.B`.

Chrome Cache Entry: 881

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	56677
Entropy (8bit):	5.97508713817275
Encrypted:	false
SSDEEP:	768:rWh9UreQNyiaNMh4yUJl0T4yUA4yU/D4yUB4yUg4yUl074UN+kY15QY:rOiVhY0TZ+DCnn4qY3Z
MD5:	24D5E2D5DC76FDD38A8DB691A4609DC4
SHA1:	4AB391E34C85694FB53FC637EBE5922C866BA170
SHA-256:	F2C7151A6305628DA15F87FAFAF4887950EC7F8ECAA7E17784CD7A2C77961C49
SHA-512:	FA24E83F804B12C483BE9818E6A6B489C3C826EA0F073A872B935C5A66F4F2CC611218B8F0DADCF309C1E5C02344143C3EBD524C7F474A27FA414E8E2D1EA0D4
Malicious:	false
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3369879066748359&correlator=304728755327294&eid=31080125%2C31079784%2C31080127%2C31080115&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=1030006%3A1037824%2Cmathblog%2Cadhesion&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90%7C970x90%7C468x60%7C320x100&ifi=1&sfv=1-0-40&fsbs=1&eri=5&sc=1&cookie=ID%3D70f210562803e33e%3AT%3D1702413502%3ART%3D1702413502%3AS%3DALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ&cdm=mathblog.com&gpic=UID%3D00000da8e52e5ed8%3AT%3D1702413502%3ART%3D1702413502%3AS%3DALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A&abxe=1&dt=1702413624547&adxs=-12245933&adys=-12245933&biw=1263&bih=913&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=4&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMC4xLjAiLCJ4ODYiLCIiLCIxMDkuMC41NDE0LjEyMCIsbnVsbCwwLG51bGwsIjY0IixbWyJOb3RfQSBCcmFuZCIsIjk5LjAuMC4wIl0sWyJHb29nbGUgQ2hyb21lIiwiMTA5LjAuNTQxNC4xMjAiXSxbIkNocm9taXVtIiwiMTA5LjAuNTQxNC4xMjAiXV0sMF0.&uas=3&url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&loc=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&vis=1&psz=728x-1&msz=0x-1&fws=640&ohw=0&ga_vid=1980800170.1702413486&ga_sid=1702413625&ga_hid=1409992419&ga_fc=true&a3p=EhsKDDMzYWNyb3NzLmNvbRj9kIn-xTFIAFICCG8SiwEKCmFtYXpvbi5jb20SdDdib0RSZ2lKRkR5SWIwcmhJL0IyNnFpb3N5WmJIc2pEbnIwZXREM3h4MFl6V0tMazdGMVdYSlBNdEtPZEg3bFlkTkdrVTdlWHcramRoL2cxNUs3SnpNL2s1cUFNazViYWJTUXlhWFdlcnpFNGw2WHg1Ylk9GOa-iP7FMUgAEhgKCXlhaG9vLmNvbRi4-Ij-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-xTFIABI-CgVvcGVueBIsZXlKcElqb2lSR0Z4TUdFMGFUbEJlRmt6Ym1sNmFFWlNjM2QxVVQwOUluMD0YgMeI_sUxSAA.&dlt=1702413612592&idt=10213&ppid=6111c3f0e29bb55dcd4030d89a5b2298b74b6ad4e27ce0bbfc93f4e34f6fe609&prev_scp=hb_bidder%3Dtriplelift_s2s%26hb_adid%3D20526ed97f464d2%26hb_pb%3D0.41%26hb_sdef_set%3D0.961024%26hb_bid%3D0.41%26hb_bsbid%3D0.40573413499999994%26hb_safeframe%3D1%26hb_s2sBidder%3Dtriplelift%26hb_liv%3D4%26hb_ub%3D0.41%26hb_size%3D728x90%26hb_pb_triplelift_s2s%3D0.40%26hb_pb_appnexus_s2s%3D0.19%26sales_cat%3D596%252C597%252C631%252C599%252C602%26sales_safety%3DGGT0%26sales_kw%3Dpolynomial%2520root-finding%252Calgorithm%252Cpolynomial%2520root%252Cvalue%252Cequation%252Csolution%252Cinterval%252Cstage%252Cproblem%252Cfunction%252Cfield%252Ccase%252Copposite%2520sign%252Ctechnique%252Canalytical%2520method%26partnerLift%3DindexExchangeE3M1%2CebOff%26slot_id%3Dadhesion_desktop%26hb_count%3D2%26hb_pool%3D0%26hb_pmp%3D0%26UR%3D41%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dadhesion_desktop%26arrival%3D0%26refresh%3D0%26sspm%3D1%26bidFloor%3D0.12%26ccpa%3D1---%26timeout%3Dadhesion_atf_d_2801%26gid%3D0%26inview%3D0%26adomain%3Djamesavery.com%26grow_state%3D1%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pps%3D687&cust_params=site%3Dmath-blog%26path%3D%252Fpolynomial-root-finding-with-the-jenkin%26secure%3D1%26sessiondepth%3D4%26optout%3D%26categories%3Deducation%26generator%3Dweb%26bucket%3D83%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D2%26day%3D12%26month%3D12%26hour%3D20%26wrapper_group%3D2.94.20-tooDense-beta-control%26wswy%3D0%26sessionId%3D1980800170%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26s2sVersion%3Dproduction&adks=1224474337&frm=20
Preview:	{"/1030006/mathblog/adhesion":["html",0,0,null,0,90,970,0,1,null,null,null,1,null,[107212704516],[179384556],[29955756],[299148516],[98686],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CJGbv_vgioMDFW8XswAdHCMFKg",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-singledo

Chrome Cache Entry: 882

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 883

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	5367
Entropy (8bit):	5.3693021850665446
Encrypted:	false
SSDEEP:	96:t6P9LJTwsmJTmIy7cmdFz57hM86c6nImIVmCeTm2wmCvYNzyLtm0BuBmQzmDjIm3:tYLdwsmJTmIy7cmvzVMImIVm7Tm2wm6b
MD5:	D4D4FDA9338E51A6CFA16A9BE8A32863
SHA1:	BB12D0AEB41BF4E2851949630F50312511A40EAA
SHA-256:	668E0445564D8A85185FB6863EE13BF100401127D7818ACC7FD8FCD29BEC99B9
SHA-512:	97E16DF07AD76AF0B5BDECCEB510863A267C7EF57C1D99E96DEAA8F4AA0A7B26BAC06CF0D4CE78480ACA48CF0F381BE711D2A500632CD3E7BB248012F31683F2
Malicious:	false
URL:	https://exchange.mediavine.com/usersync/sync?origin=https://mathblog.com&src=//exchange.mediavine.com&s2sVersion=production&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22centro%22%3Atrue%2C%22emx_digital%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%7D
Preview:	<script>. window.parent.postMessage({. message: 'syncUrls',. tokens: {"mv_uuid":"6120f800-992e-11ee-8a65-3f15d911ca60","version":"invalidate-verizon-pushes"},. syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3DPID"},{"url":"https://bh.contextweb.com/bh/rtset?pid=562036&ev=6120f800-992e-11ee-8a65-3f15d911ca60&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpulsepoint%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%25%25VGUID%25%25","type":"iframe"},{"url":"https://ap.lijit.com/pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dp

Chrome Cache Entry: 884

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Static File Info

General

File type:	Microsoft Excel 2007+
Entropy (8bit):	7.9444193568981305
TrID:	Excel Microsoft Office Open XML Format document with Macro (52504/1) 37.23% Microsoft Excel Office Binary workbook document (40504/1) 28.72% Excel Microsoft Office Open XML Format document (40004/1) 28.37% ZIP compressed archive (8000/1) 5.67%
File name:	Polynomial.xlsb
File size:	207'186 bytes
MD5:	10a9cbc0ba904f61adeaf6d00ced56e2
SHA1:	b6fb829cba814cb75e701864857ad128b79cdd86
SHA256:	7fae169ba93146f103535d2a14a428c4f02c08e5f5f2d8fb795cfe2f93734bc2
SHA512:	62fa7511551666a11fa54595f1da2674a80f412d0c05f48833672dbcdc45e254bdc44fa50e63b175637c72771da514676253a69b9acae4d758af59d97eda9c9f
SSDEEP:	6144:CJeSAlp5sqnhLpV5jQ6s5Q8WpoDdzajCi:CMfp59hLpV5J4YWi
TLSH:	29141219D908B82FC7B8987FC1462CA9BD0A7CA1E591962F4C653C0D0B7679713EF16C
File Content Preview:	PK..........!.....f...........[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	65e2eba9a5b7b7b7

Static OLE Info

General

Document Type:	OpenXML
Number of OLE Files:	1

OLE File "Polynomial.xlsb"

Indicators

Has Summary Info:
Application Name:
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	False
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	True

Summary

Author:	Doug Jenkins
Last Saved By:	Doug Jenkins
Create Time:	2006-11-04T01:18:18Z
Last Saved Time:	2022-10-25T00:52:42Z
Creating Application:	Microsoft Excel
Security:	0

Document Summary

Thumbnail Scaling Desired:	false
Company:	IDS
Contains Dirty Links:	false
Shared Document:	false
Changed Hyperlinks:	false
Application Version:	16.0300

Streams with VBA

VBA File Name: Sheet1, Stream Size: 1240

General
Stream Path:	VBA/Sheet1
VBA File Name:	Sheet1
Stream Size:	1240
Data ASCII:	. . . . . . . . . b . . . . . . . . . . . . . . . . . . . . . . . . . . . . . - . . # . . . . . . . . . . . . . . . . . p . . . . # ~ @ . u . . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . n \\ = Y C e . ) / . . . . . . . . . . . . . . . . . . . . . . . x . . . . n \\ = Y C e . ) / . . # ~ @ . u . . . . . M E . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - . 0 . 0 . 0 . 0 . - .
Data Raw:	01 16 03 00 06 00 01 00 00 62 03 00 00 e4 00 00 00 10 02 00 00 90 03 00 00 9e 03 00 00 12 04 00 00 00 00 00 00 01 00 00 00 c5 bd 2d d1 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 1f bf b5 23 c0 d1 7e 40 8f 2e 75 ef a6 a1 95 be 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Option Explicit

VBA File Name: Sheet2, Stream Size: 1240

General
Stream Path:	VBA/Sheet2
VBA File Name:	Sheet2
Stream Size:	1240
Data ASCII:	. . . . . . . . . b . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . : . . # . . . . . . . . . . . . . . . . . p . . . ^ { x . N . $ . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . . o . E \\ ( L T . 7 . . . . . . . . . . . . . . . . . . . . . . . x . . . . . o . E \\ ( L T . 7 . ^ { x . N . $ . . . . M E . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - . 0 . 0 . 0 . 0
Data Raw:	01 16 03 00 02 00 01 00 00 62 03 00 00 e4 00 00 00 10 02 00 00 90 03 00 00 9e 03 00 00 12 04 00 00 00 00 00 00 01 00 00 00 c5 bd 0c 3a 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 5e f3 ad 7b 8e 78 0c 4e b6 f6 d6 08 b1 f2 d1 24 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet2"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Option Explicit

VBA File Name: Sheet3, Stream Size: 1240

General
Stream Path:	VBA/Sheet3
VBA File Name:	Sheet3
Stream Size:	1240
Data ASCII:	. . . . . . . . . b . . . . . . . . . . . . . . . . . . . . . . . . . . . . . f . . # . . . . . . . . . . . . . . . . . p . . . S J O H X l W + . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . L 5 w K . f . . . . . . . . . . . . . . . . . . . . . . . x . . . . L 5 w K . f . S J O H X l W + . . . . M E . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - . 0 . 0 . 0 . 0 . - . 0 .
Data Raw:	01 16 03 00 02 00 01 00 00 62 03 00 00 e4 00 00 00 10 02 00 00 90 03 00 00 9e 03 00 00 12 04 00 00 00 00 00 00 01 00 00 00 c5 bd 66 e4 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 ef f8 53 20 4a f6 90 4f 91 94 48 b3 58 6c 57 2b 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet3"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Option Explicit

VBA File Name: Sheet4, Stream Size: 1240

General
Stream Path:	VBA/Sheet4
VBA File Name:	Sheet4
Stream Size:	1240
Data ASCII:	. . . . . . . . . b . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x z . . # . . . . . . . . . . . . . . . . . p . . . . a . ^ J { p U ? . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . b o = I . X k < . . . . . . . . . . . . . . . . . . . . . . x . . . . b o = I . X k < . a . ^ J { p U ? . . . . M E . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - . 0 . 0 . 0 . 0 . -
Data Raw:	01 16 03 00 02 00 01 00 00 62 03 00 00 e4 00 00 00 10 02 00 00 90 03 00 00 9e 03 00 00 12 04 00 00 00 00 00 00 01 00 00 00 c5 bd 78 7a 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 81 db 07 c2 61 05 5e 4a 86 a0 7b 70 e2 e2 55 3f 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet4"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Option Explicit

VBA File Name: Sheet5, Stream Size: 1240

General
Stream Path:	VBA/Sheet5
VBA File Name:	Sheet5
Stream Size:	1240
Data ASCII:	. . . . . . . . . b . . . . . . . . . . . . . . . . . . . . . . . . . . . . . w 1 . . # . . . . . . . . . . . . . . . . . p . . . x O O H K V ( W . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . . . < / R C = ` . . . . . . . . . . . . . . . . . . . . . . x . . . . . . < / R C = ` x O O H K V ( W . . . . M E . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - . 0 . 0 . 0 . 0 . - . 0
Data Raw:	01 16 03 00 02 00 01 00 00 62 03 00 00 e4 00 00 00 10 02 00 00 90 03 00 00 9e 03 00 00 12 04 00 00 00 00 00 00 01 00 00 00 c5 bd 77 31 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 78 d9 4f ef 4f 48 93 4b a3 56 eb 28 e3 57 f0 ee 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet5"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Option Explicit

VBA File Name: Sheet6, Stream Size: 1188

General
Stream Path:	VBA/Sheet6
VBA File Name:	Sheet6
Stream Size:	1188
Data ASCII:	. . . . . . . . . b . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . # . . . . . . . . . . . . . . . . . p . . . . . 3 L X . H ? 5 ) c . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . . X S % J . : o . . . . . . . . . . . . . . . . . . . . . . . x . . . . . X S % J . : o . . . 3 L X . H ? 5 ) c . . . . M E . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . - . 0 . 0
Data Raw:	01 16 03 00 02 00 01 00 00 62 03 00 00 e4 00 00 00 10 02 00 00 90 03 00 00 9e 03 00 00 f2 03 00 00 00 00 00 00 01 00 00 00 c5 bd 11 e0 00 00 ff ff 23 01 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 ab 0d 1a 33 4c 58 19 48 af 3f 35 c6 29 e2 63 f0 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Sheet6"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

VBA File Name: ThisWorkbook, Stream Size: 1248

General
Stream Path:	VBA/ThisWorkbook
VBA File Name:	ThisWorkbook
Stream Size:	1248
Data ASCII:	. . . . . . . . . b . . . . . . . . . . . . . . . . . . . . . . . . . . . . . H . . # . . . . . . . . . . . . . . . . . p . . . - . . _ I ? 6 . ; 0 . . . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . . 2 ) [ O . 6 \| . . . . . . . . . . . . . . . . . . . . . . x . . . . . 2 ) [ O . 6 \| - . . _ I ? 6 . ; 0 . . . . . M E . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 1 . 9 . - . 0 . 0 . 0 .
Data Raw:	01 16 03 00 06 00 01 00 00 62 03 00 00 e4 00 00 00 10 02 00 00 90 03 00 00 9e 03 00 00 12 04 00 00 00 00 00 00 01 00 00 00 c5 bd 48 80 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 2d bb bc 2e 1a 5f f3 49 95 3f 36 03 3b 80 30 0a 19 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "ThisWorkbook"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Option Explicit

VBA File Name: mAL_ap, Stream Size: 29574

General
Stream Path:	VBA/mAL_ap
VBA File Name:	mAL_ap
Stream Size:	29574
Data ASCII:	. . . . . z . . . + . . ^ . . . b . . . V , . . a . . # . . . . . . . . ~ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . R . . . . . R . . . . . . . . . . . . . . . . . . . R . H . . . R . . . . . . . . . ( . . . ( . . . . . R . . . . R . . . . . . . . . @ . . . @ . . . . . M E
Data Raw:	01 16 03 00 06 7a 01 00 00 94 2b 00 00 5e 01 00 00 62 02 00 00 ff ff ff ff 56 2c 00 00 e6 61 00 00 23 00 00 00 01 00 00 00 c5 bd 7e 94 00 00 ff ff 03 00 00 00 00 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 08 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "mAL_ap"
Option Explicit

Public Type Complex
    X As Double
    Y As Double
End Type

Public Type RCommState
    Stage As Long
    BA() As Boolean
    IA() As Long
    RA() As Double
    CA() As Complex
End Type

Public Type ALGLIBDataset
    NIn As Long
    NOut As Long
    NClasses As Long
    
    Trn() As Double
    Tst() As Double
    Val() As Double
    AllDataset() As Double
    
    TrnSize As Long
    TstSize As Long
    ValSize As Long
    TotalSize As Long
End Type

Public Const MachineEpsilon = 5E-16
Public Const MaxRealNumber = 1E+300
Public Const MinRealNumber = 1E-300

Private Const BigNumber As Double = 1E+70
Private Const SmallNumber As Double = 1E-70
Private Const PiNumber As Double = 3.14159265358979

Public Function FormatInteger(i As Long, W As Long) As String
    If W <= 1 Then
        FormatInteger = Format(i, "0")
    Else
        Tmp = Format(i, String(W - 1, "#") & "0")
        Do While Len(Tmp) < W
            Tmp = " " & Tmp
        Loop
        FormatInteger = Tmp
    End If
End Function

Public Function FormatFReal(R As Double, W As Long, p As Long) As String
    Tmp = Format(R, "0." & String(p, "0"))
    Do While Len(Tmp) < W
        Tmp = " " & Tmp
    Loop
    FormatFReal = Tmp
End Function

Public Function FormatEReal(R As Double, W As Long, p As Long) As String
    Tmp = Format(R, "0." & String(p, "0") & "E+0")
    Do While Len(Tmp) < W
        Tmp = " " & Tmp
    Loop
    FormatEReal = Tmp
End Function

Public Sub ConsoleOutputString(S As String)
End Sub

Public Function MaxReal(ByVal M1 As Double, ByVal M2 As Double) As Double
    If M1 > M2 Then
        MaxReal = M1
    Else
        MaxReal = M2
    End If
End Function

Public Function MinReal(ByVal M1 As Double, ByVal M2 As Double) As Double
    If M1 < M2 Then
        MinReal = M1
    Else
        MinReal = M2
    End If
End Function

Public Function MaxInt(ByVal M1 As Long, ByVal M2 As Long) As Long
    If M1 > M2 Then
        MaxInt = M1
    Else
        MaxInt = M2
    End If
End Function

Public Function MinInt(ByVal M1 As Long, ByVal M2 As Long) As Long
    If M1 < M2 Then
        MinInt = M1
    Else
        MinInt = M2
    End If
End Function

Public Function ArcSin(ByVal X As Double) As Double
    Dim t As Double
    t = Sqr(1 - X * X)
    If t < SmallNumber Then
        ArcSin = Atn(BigNumber * Sgn(X))
    Else
        ArcSin = Atn(X / t)
    End If
End Function

Public Function ArcCos(ByVal X As Double) As Double
    Dim t As Double
    t = Sqr(1 - X * X)
    If t < SmallNumber Then
        ArcCos = Atn(BigNumber * Sgn(-X)) + 2 * Atn(1)
    Else
        ArcCos = Atn(-X / t) + 2 * Atn(1)
    End If
End Function

Public Function SinH(ByVal X As Double) As Double
    SinH = (Exp(X) - Exp(-X)) / 2
End Function

Public Function CosH(ByVal X As Double) As Double
    CosH = (Exp(X) + Exp(-X)) / 2
End Function

Public Function TanH(ByVal X As Double) As Double
    Dim t As Double
    If X > 0 Then
        t = Exp(-X)
        t = t * t
        TanH = (1 - t) / (1 + t)
    Else
        t = Exp(X)
        t = t * t
        TanH = (t - 1) / (t + 1)
    End If
End Function

Public Function Pi() As Double
    'Pi = PiNumber
    Pi = ArcCos(-1)
End Function

Public Function Power(ByVal BASE As Double, ByVal Exponent As Double) As Double
    Power = BASE ^ Exponent
End Function

Public Function Square(ByVal X As Double) As Double
    Square = X * X
End Function

Public Function Log10(ByVal X As Double) As Double
    Log10 = Log(X) / Log(10)
End Function

Public Function Ceil(ByVal X As Double) As Double
    Ceil = -Int(-X)
End Function

Public Function RandomInteger(ByVal X As Long) As Long
    RandomInteger = Int(Rnd() * X)
End Function

Public Function Atn2(ByVal Y As Double, ByVal X As Double) As Double
    If SmallNumber * Abs(Y) < Abs(X) Then
        If X < 0 Then
            If Y = 0 Then
                Atn2 = Pi()
            Else
                Atn2 = Atn(Y / X) + Pi() * Sgn(Y)
            End If
        Else
            Atn2 = Atn(Y / X)
        End If
    Else
        Atn2 = Sgn(Y) * Pi() / 2
    End If
End Function

Public Function C_Complex(ByVal X As Double) As Complex
    Dim Result As Complex

    Result.X = X
    Result.Y = 0

    C_Complex = Result
End Function


Public Function AbsComplex(ByRef Z As Complex) As Double
    Dim Result As Double
    Dim W As Double
    Dim XABS As Double
    Dim YABS As Double
    Dim V As Double

    XABS = Abs(Z.X)
    YABS = Abs(Z.Y)
    W = MaxReal(XABS, YABS)
    V = MinReal(XABS, YABS)
    If V = 0 Then
        Result = W
    Else
        Result = W * Sqr(1 + Square(V / W))
    End If

    AbsComplex = Result
End Function


Public Function C_Opposite(ByRef Z As Complex) As Complex
    Dim Result As Complex

    Result.X = -Z.X
    Result.Y = -Z.Y

    C_Opposite = Result
End Function


Public Function Conj(ByRef Z As Complex) As Complex
    Dim Result As Complex

    Result.X = Z.X
    Result.Y = -Z.Y

    Conj = Result
End Function


Public Function CSqr(ByRef Z As Complex) As Complex
    Dim Result As Complex

    Result.X = Square(Z.X) - Square(Z.Y)
    Result.Y = 2 * Z.X * Z.Y

    CSqr = Result
End Function


Public Function C_Add(ByRef Z1 As Complex, ByRef Z2 As Complex) As Complex
    Dim Result As Complex

    Result.X = Z1.X + Z2.X
    Result.Y = Z1.Y + Z2.Y

    C_Add = Result
End Function


Public Function C_Mul(ByRef Z1 As Complex, ByRef Z2 As Complex) As Complex
    Dim Result As Complex

    Result.X = Z1.X * Z2.X - Z1.Y * Z2.Y
    Result.Y = Z1.X * Z2.Y + Z1.Y * Z2.X

    C_Mul = Result
End Function


Public Function C_AddR(ByRef Z1 As Complex, ByVal R As Double) As Complex
    Dim Result As Complex

    Result.X = Z1.X + R
    Result.Y = Z1.Y

    C_AddR = Result
End Function


Public Function C_MulR(ByRef Z1 As Complex, ByVal R As Double) As Complex
    Dim Result As Complex

    Result.X = Z1.X * R
    Result.Y = Z1.Y * R

    C_MulR = Result
End Function


Public Function C_Sub(ByRef Z1 As Complex, ByRef Z2 As Complex) As Complex
    Dim Result As Complex

    Result.X = Z1.X - Z2.X
    Result.Y = Z1.Y - Z2.Y

    C_Sub = Result
End Function


Public Function C_SubR(ByRef Z1 As Complex, ByVal R As Double) As Complex
    Dim Result As Complex

    Result.X = Z1.X - R
    Result.Y = Z1.Y

    C_SubR = Result
End Function


Public Function C_RSub(ByVal R As Double, ByRef Z1 As Complex) As Complex
    Dim Result As Complex

    Result.X = R - Z1.X
    Result.Y = -Z1.Y

    C_RSub = Result
End Function


Public Function C_Div(ByRef Z1 As Complex, ByRef Z2 As Complex) As Complex
    Dim Result As Complex
    Dim A As Double
    Dim B As Double
    Dim C As Double
    Dim D As Double
    Dim E As Double
    Dim F As Double

    A = Z1.X
    B = Z1.Y
    C = Z2.X
    D = Z2.Y
    If Abs(D) < Abs(C) Then
        E = D / C
        F = C + D * E
        Result.X = (A + B * E) / F
        Result.Y = (B - A * E) / F
    Else
        E = C / D
        F = D + C * E
        Result.X = (B + A * E) / F
        Result.Y = (-A + B * E) / F
    End If

    C_Div = Result
End Function


Public Function C_DivR(ByRef Z1 As Complex, ByVal R As Double) As Complex
    Dim Result As Complex

    Result.X = Z1.X / R
    Result.Y = Z1.Y / R

    C_DivR = Result
End Function


Public Function C_RDiv(ByVal R As Double, ByRef Z2 As Complex) As Complex
    Dim Result As Complex
    Dim A As Double
    Dim C As Double
    Dim D As Double
    Dim E As Double
    Dim F As Double

    A = R
    C = Z2.X
    D = Z2.Y
    If Abs(D) < Abs(C) Then
        E = D / C
        F = C + D * E
        Result.X = A / F
        Result.Y = -(A * E / F)
    Else
        E = C / D
        F = D + C * E
        Result.X = A * E / F
        Result.Y = -(A / F)
    End If

    C_RDiv = Result
End Function


Public Function C_Equal(ByRef Z1 As Complex, ByRef Z2 As Complex) As Boolean
    Dim Result As Boolean

    Result = Z1.X = Z2.X And Z1.Y = Z2.Y

    C_Equal = Result
End Function


Public Function C_NotEqual(ByRef Z1 As Complex,          ByRef Z2 As Complex) As Boolean
    Dim Result As Boolean

    Result = Z1.X <> Z2.X Or Z1.Y <> Z2.Y

    C_NotEqual = Result
End Function

Public Function C_EqualR(ByRef Z1 As Complex, ByVal R As Double) As Boolean
    Dim Result As Boolean

    Result = Z1.X = R And Z1.Y = 0

    C_EqualR = Result
End Function


Public Function C_NotEqualR(ByRef Z1 As Complex,          ByVal R As Double) As Boolean
    Dim Result As Boolean

    Result = Z1.X <> R Or Z1.Y <> 0

    C_NotEqualR = Result
End Function


Public Function SplitTrim(ByVal S As String, ByVal Sep As String) As String()
    Dim SPrev As String
    S = Trim(S)
    Do
        SPrev = S
        S = Replace(S, "  ", " ")
    Loop Until S = SPrev
    SplitTrim = Split(S, Sep)
End Function

Public Function OpenDataset(ByVal FileName As String, ByRef DS As ALGLIBDataset) As Boolean
    DS.NClasses = 0
    DS.NIn = 0
    DS.NOut = 0
    DS.TotalSize = 0
    DS.TrnSize = 0
    DS.TstSize = 0
    DS.ValSize = 0
    
    FileNumber = FreeFile()
    LinesRead = 0
    On Error GoTo HandleNoFile
    Open FileName For Input As FileNumber
    On Error GoTo HandleErrorWithinFile
    Do While Not EOF(FileNumber)
        Line Input #FileNumber, TextLine
        If (Left(TextLine, 2) <> "//") And (Trim(TextLine) <> "") Then
            If LinesRead = 0 Then
                '
                ' read header
                '
                HeadArr = SplitTrim(TextLine, "#")
                If UBound(HeadArr) <> 1 Then Error 1
                
                '
                ' rows information
                '
                RowsArr = SplitTrim(HeadArr(0), " ")
                If (UBound(RowsArr) < 0) Or (UBound(RowsArr) > 2) Then Error 1
                If UBound(RowsArr) = 0 Then
                    DS.TotalSize = Val(RowsArr(0))
                    DS.TrnSize = DS.TotalSize
                End If
                If UBound(RowsArr) = 1 Then
                    DS.TrnSize = Val(RowsArr(0))
                    DS.TstSize = Val(RowsArr(1))
                    DS.TotalSize = DS.TrnSize + DS.TstSize
                End If
                If UBound(RowsArr) = 2 Then
                    DS.TrnSize = Val(RowsArr(0))
                    DS.ValSize = Val(RowsArr(1))
                    DS.TstSize = Val(RowsArr(2))
                    DS.TotalSize = DS.TrnSize + DS.ValSize + DS.TstSize
                End If
                If DS.TotalSize <= 0 Or DS.TrnSize < 0 Or DS.ValSize < 0 Or DS.TstSize < 0 Then Error 1
                TrnFirst = 0
                TrnLast = TrnFirst + DS.TrnSize
                ValFirst = TrnLast
                ValLast = ValFirst + DS.ValSize
                TstFirst = ValLast
                TstLast = TstFirst + DS.TstSize
                
                '
                ' columns
                '
                ColsArr = SplitTrim(HeadArr(1), " ")
                If (UBound(ColsArr) <> 0) And (UBound(ColsArr) <> 3) Then Error 1
                If UBound(ColsArr) = 0 Then
                    DS.NIn = Val(ColsArr(0))
                    If DS.NIn <= 0 Then Error 1
                End If
                If UBound(ColsArr) = 3 Then
                    If (LCase(ColsArr(0)) <> "reg") And (LCase(ColsArr(0)) <> "cls") Then Error 1
                    If ColsArr(2) <> "=>" Then Error 1
                    DS.NIn = Val(ColsArr(1))
                    If DS.NIn < 1 Then Error 1
                    If LCase(ColsArr(0)) = "reg" Then
                        DS.NClasses = 0
                        DS.NOut = Val(ColsArr(3))
                        If DS.NOut < 1 Then Error 1
                    Else
                        DS.NClasses = Val(ColsArr(3))
                        DS.NOut = 1
                        If DS.NClasses < 2 Then Error 1
                    End If
                End If
                
                '
                ' initialize arrays
                '
                ReDim DS.AllDataset(0 To DS.TotalSize - 1, 0 To DS.NIn + DS.NOut - 1)
                If DS.TrnSize > 0 Then ReDim DS.Trn(0 To DS.TrnSize - 1, 0 To DS.NIn + DS.NOut - 1)
                If DS.ValSize > 0 Then ReDim DS.Val(0 To DS.ValSize - 1, 0 To DS.NIn + DS.NOut - 1)
                If DS.TstSize > 0 Then ReDim DS.Tst(0 To DS.TstSize - 1, 0 To DS.NIn + DS.NOut - 1)
            Else
                '
                ' read data
                '
                VarsArr = SplitTrim(TextLine, " ")
                If UBound(VarsArr) <> DS.NIn + DS.NOut - 1 Then Error 1
                TmpC = Round(VarsArr(DS.NIn + DS.NOut - 1))
                If (DS.NClasses > 0) And ((TmpC < 0) Or (TmpC >= DS.NClasses)) Then Error 1
                RowIndex = LinesRead - 1
                For i = 0 To DS.NIn + DS.NOut - 1 Step 1
                    DS.AllDataset(RowIndex, i) = VarsArr(i)
                    If RowIndex >= TrnFirst And RowIndex < TrnLast Then
                        DS.Trn(RowIndex - TrnFirst, i) = VarsArr(i)
                    End If
                    If RowIndex >= ValFirst And RowIndex < ValLast Then
                        DS.Val(RowIndex - ValFirst, i) = VarsArr(i)
                    End If
                    If RowIndex >= TstFirst And RowIndex < TstLast Then
                        DS.Tst(RowIndex - TstFirst, i) = VarsArr(i)
                    End If
                Next i
            End If
            LinesRead = LinesRead + 1
        End If
    Loop
    Close FileNumber
    OpenDataset = True
    Exit Function
HandleNoFile:
    OpenDataset = False
    Exit Function
HandleErrorWithinFile:
    Close FileNumber
    OpenDataset = False
    Exit Function
End Function

VBA File Name: mQuartic, Stream Size: 61728

General
Stream Path:	VBA/mQuartic
VBA File Name:	mQuartic
Stream Size:	61728
Data ASCII:	. . . . . . . . j 9 . . . . . ( . . . q : . . . . . . . . . . . . . L . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . P . . . . . . > . . . . . . L . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	01 16 03 00 06 f0 00 00 00 6a 39 00 00 d4 00 00 00 28 02 00 00 ff ff ff ff 71 3a 00 00 e9 bf 00 00 08 00 00 00 01 00 00 00 c5 bd d2 4c 00 00 ff ff 03 00 00 00 00 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 08 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "mQuartic"
Option Explicit
Const Pi As Double = 3.14159265358979


Function Quartic(CoeffA As Variant, Optional Out1 As Long, Optional out2 As Long = 1, Optional CheckError As Boolean = True) As Variant

' * Copyright (C) 2006 Interactive Design Services Pty Ltd
' Based on Fortan code downloaded from: http://van-der-waals.pc.uni-koeln.de/quartic/quartic.html (under the Homepage of AK Krasaka)

'  This program is free software; you can redistribute it and/or modify
'  it under the terms of the GNU General Public License as published by
'  the Free Software Foundation; either version 2 of the License, or (at
'  your option) any later version.

'  This program is distributed in the hope that it will be useful, but
'  WITHOUT ANY WARRANTY; without even the implied warranty of
'  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
'  General Public License for more details.

'  You should have received a copy of the GNU General Public License
'  along with this program; if not, write to the Free Software
'  Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.


'quartic - finds the real or complex roots of a x^4 + b x^3 + c x^2 + d x + e = 0
'If Out1 = 0 or missing returns a two column array of the roots, with the real part
' in column 1 and the imaginary part or zero in column 2 The number of real roots
' is returned in array element (5,1)
' If Out2 = 1 or missing
'Out1 >= 1 returns the corresponding real root, or the real part of the complex roots.
'Out1 = 5 returns the number of real roots
' If Out2 = 2
'Out1 >= 1 returns the imaginary part of the corresponding complex root
'Out1 >= 5 returns the number of complex roots.

Dim CubicA As Variant, sol(1 To 6, 1 To 2) As Variant
Dim A As Double, B As Double, C As Double, D As Double, E As Double, i As Long
Dim p As Double, q As Double, R As Double, CA(1 To 4, 1 To 1) As Double, Cb As Double, CC As Double, Cd As Double
Dim Z As Variant, ncube As Long, zsol As Double, xK2 As Double, xK As Double, xL As Double
Dim sqp As Double, sqm As Double, Nsol As Long, iErr0(0 To 1) As Double, iErr As Variant, Checkx(1 To 1, 1 To 2) As Double
Const ZeroVal As Double = 0.000000000000001

    CoeffA = GetArray(CoeffA)
    If UBound(CoeffA, 2) > UBound(CoeffA) Then CoeffA = Transpose1(CoeffA)

    A = CoeffA(1, 1)
    B = CoeffA(2, 1)
    C = CoeffA(3, 1)
    D = CoeffA(4, 1)
    E = CoeffA(5, 1)

    If Out1 < -5 Or Out1 > 5 Then
        Quartic = CVErr(xlErrNA)
        Exit Function
    End If

    If A = 0 Then
        If Out1 > 0 Then
            If Out1 = 4 Then
                Quartic = ""
                Exit Function
            End If
            If Out1 = 5 Then Out1 = 4
            CoeffA(1, 1) = B
            CoeffA(2, 1) = C
            CoeffA(3, 1) = D
            CoeffA(4, 1) = E

            If out2 = 2 Then
                Quartic = CubicC(CoeffA, Out1, out2)
            Else
                Quartic = CubicC(CoeffA, Out1)
            End If

            Exit Function

        Else
            CoeffA(1, 1) = CoeffA(2, 1)
            CoeffA(2, 1) = CoeffA(3, 1)
            CoeffA(3, 1) = CoeffA(4, 1)
            CoeffA(4, 1) = CoeffA(5, 1)

            CubicA = CubicC(CoeffA)

            sol(1, 1) = CubicA(1, 1)
            sol(2, 1) = CubicA(2, 1)
            sol(3, 1) = CubicA(3, 1)
            sol(4, 1) = ""
            sol(5, 1) = CubicA(4, 1)

            sol(1, 2) = CubicA(1, 2)
            sol(2, 2) = CubicA(2, 2)
            sol(3, 2) = CubicA(3, 2)
            sol(4, 2) = ""
            sol(5, 2) = CubicA(4, 2)

            Quartic = sol
            Exit Function

        End If
    End If

    p = (-3 * B ^ 2 + 8 * A * C) / (8 * A ^ 2)
    q = (B ^ 3 - 4 * A * B * C + 8 * D * A ^ 2) / (8 * A ^ 3)
    R = (-3 * B ^ 4 + 16 * A * B ^ 2 * C - 64 * A ^ 2 * B * D + 256 * A ^ 3 * E) / (256 * A ^ 4)

    'Solve cubic resolvent
    CA(1, 1) = 8
    CA(2, 1) = -4 * p
    CA(3, 1) = -8 * R
    CA(4, 1) = 4 * p * R - q ^ 2

    Z = CubicC(CA, , , False)
    ncube = Z(4, 1)

    ' Debug output
    If Out1 = -1 Then
        sol(1, 1) = p
        sol(2, 1) = q
        sol(3, 1) = R
        sol(4, 1) = CA(2, 1)
        sol(5, 1) = CA(3, 1)
        sol(6, 1) = CA(4, 1)
        sol(1, 2) = Z(1, 1)
        sol(2, 2) = Z(2, 1)
        sol(3, 2) = Z(3, 1)
        sol(4, 2) = Z(4, 1)

        Quartic = sol
        Exit Function
    End If


    'c
    zsol = -1E+99
    For i = 1 To ncube
        If Z(i, 1) > zsol Then zsol = Z(i, 1)
    Next i
    Z(1, 1) = zsol
    ' Check for one real root < 0
    If ncube = 1 And zsol <= ZeroVal And ((Z(2, 2) >= 0 Or Abs(q / 10000000#) < ZeroVal)) Then
        Z(1, 1) = -Z(1, 1) / 2
        Z(2, 1) = Abs(Z(2, 2)) / 2
        sol(1, 1) = 2 * Z(2, 1) / (2 * (((((Z(1, 1) ^ 2 + Z(2, 1) ^ 2) ^ 0.5) - Z(1, 1)) / 2) ^ 0.5))
        sol(2, 1) = -sol(1, 1)
        sol(3, 2) = 2 * (((Z(1, 1) ^ 2 + Z(2, 1) ^ 2) ^ 0.5 - Z(1, 1)) / 2) ^ 0.5
        sol(4, 2) = -sol(3, 2)
        Nsol = 2
    Else
        xK2 = 2 * Z(1, 1) - p
        If xK2 >= 0 Then
            xK = (xK2) ^ 0.5
        Else
            Quartic = "Solution not found"
            Exit Function
        End If
        ' Check xK > 0 (not four equal roots)
        If xK > 0 Then xL = q / (2 * xK)
        sqp = xK2 - 4 * (Z(1, 1) + xL)
        sqm = xK2 - 4 * (Z(1, 1) - xL)
        'c
        For i = 1 To 4
            sol(i, 2) = 0
        Next i
        If sqp >= 0 And sqm >= 0 Then
            sol(1, 1) = 0.5 * (-xK - (sqm) ^ 0.5)
            sol(2, 1) = 0.5 * (-xK + (sqm) ^ 0.5)
            sol(3, 1) = 0.5 * (xK - (sqp) ^ 0.5)
            sol(4, 1) = 0.5 * (xK + (sqp) ^ 0.5)
            Nsol = 4
        ElseIf sqp >= 0 And sqm < 0 Then
            sol(1, 1) = 0.5 * (xK - (sqp) ^ 0.5)
            sol(2, 1) = 0.5 * (xK + (sqp) ^ 0.5)
            sol(3, 1) = -0.5 * xK
            sol(4, 1) = -0.5 * xK
            sol(3, 2) = (-0.25 * sqm) ^ 0.5
            sol(4, 2) = -(-0.25 * sqm) ^ 0.5
            Nsol = 2
        ElseIf sqp < 0 And sqm >= 0 Then
            sol(1, 1) = 0.5 * (-xK - (sqm) ^ 0.5)
            sol(2, 1) = 0.5 * (-xK + (sqm) ^ 0.5)
            sol(3, 1) = 0.5 * xK
            sol(4, 1) = 0.5 * xK
            sol(3, 2) = (-0.25 * sqp) ^ 0.5
            sol(4, 2) = -(-0.25 * sqp) ^ 0.5
            Nsol = 2
        ElseIf sqp < 0 And sqm < 0 Then
            sol(1, 1) = -0.5 * xK
            sol(2, 1) = -0.5 * xK
            sol(1, 2) = (-0.25 * sqm) ^ 0.5
            sol(2, 2) = -(-0.25 * sqm) ^ 0.5
            sol(3, 1) = 0.5 * xK
            sol(4, 1) = 0.5 * xK
            sol(3, 2) = (-0.25 * sqp) ^ 0.5
            sol(4, 2) = -(-0.25 * sqp) ^ 0.5
            Nsol = 0
        End If
    End If
    For i = 1 To 4
        sol(i, 1) = sol(i, 1) - B / (4 * A)
    Next i

    sol(5, 1) = Nsol
    sol(5, 2) = 4 - Nsol

    If Out1 = 0 Then
        If CheckError = True Then
            For i = 1 To 4
                Checkx(1, 1) = sol(i, 1)
                Checkx(1, 2) = sol(i, 2)
                iErr = EvalPoly1C(Checkx, CoeffA)
                If Abs(iErr(0)) > sol(6, 1) Then sol(6, 1) = Abs(iErr(0))
                If Abs(iErr(1)) > sol(6, 2) Then sol(6, 2) = Abs(iErr(1))
            Next i
        End If
        Quartic = sol
    Else
        Quartic = sol(Out1, out2)
    End If

End Function

Function Quad2(CoeffA As Variant, Optional Out1 As Long, Optional out2 As Long = 1) As Variant

' * Copyright (C) 2006 Interactive Design Services Pty Ltd

'  This program is free software; you can redistribute it and/or modify
'  it under the terms of the GNU General Public License as published by
'  the Free Software Foundation; either version 2 of the License, or (at
'  your option) any later version.

'  This program is distributed in the hope that it will be useful, but
'  WITHOUT ANY WARRANTY; without even the implied warranty of
'  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
'  General Public License for more details.

'  You should have received a copy of the GNU General Public License
'  along with this program; if not, write to the Free Software
'  Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.


'quadratic - finds the roots of  a x^2 + b x + c = 0

Dim A As Double, B As Double, C As Double
Dim Disc As Double, SqrtDisc As Double, QuadA(1 To 3, 1 To 2) As Variant  ', QuadAI(1 To 3, 1 To 1) As Variant

    CoeffA = GetArray(CoeffA)
    If UBound(CoeffA, 2) > UBound(CoeffA) Then CoeffA = Transpose1(CoeffA)

    A = CoeffA(1, 1)
    B = CoeffA(2, 1)
    C = CoeffA(3, 1)

    If Out1 < -3 Then
        Quad2 = CVErr(xlErrNA)
        Exit Function
    End If

    If A = 0 Then

        QuadA(1, 1) = -C / B
        QuadA(2, 1) = 0
        QuadA(3, 1) = 1

    Else

        Disc = B ^ 2 - 4 * A * C
        If Disc >= 0 Then SqrtDisc = Disc ^ 0.5 Else SqrtDisc = (-Disc) ^ 0.5

        If Disc >= 0 Then
            QuadA(1, 1) = (-B - SqrtDisc) / (2 * A)
            QuadA(2, 1) = (-B + SqrtDisc) / (2 * A)
            QuadA(3, 1) = 2
        Else
            QuadA(1, 1) = (-B) / (2 * A)
            QuadA(2, 1) = (-B) / (2 * A)
            QuadA(3, 1) = 0
            QuadA(1, 2) = (-SqrtDisc) / (2 * A)
            QuadA(2, 2) = (SqrtDisc) / (2 * A)
            QuadA(3, 2) = 2
        End If
    End If

    If Out1 = 0 Then
        Quad2 = QuadA
    Else
        Quad2 = QuadA(Out1, out2)
    End If

End Function

Function Quadratic(CoeffA As Variant, Optional Out1 As Long, Optional out2 As Long = 1) As Variant

' Calculate the zeros of the quadratic a*z**2+b1*z+c.
' The quadratic formula, modified to avoid overflow, is used to find the
' larger zero if the zeros are real and both zeros are complex.
' The smaller real zero is found directly from the product of the zeros c/a.


Dim SR As Double, SI As Double, LR As Double, LI As Double, QuadA(1 To 3, 1 To 2) As Variant
Dim A As Double, B1 As Double, C As Double
Dim B As Double, D As Double, E As Double, i As Long, NR As Long

    CoeffA = GetArray(CoeffA)
    If UBound(CoeffA, 2) > UBound(CoeffA) Then

        A = CoeffA(1, 1)
        B1 = CoeffA(1, 2)
        C = CoeffA(1, 3)
    Else
        A = CoeffA(1, 1)
        B1 = CoeffA(2, 1)
        C = CoeffA(3, 1)
    End If
    If Out1 < -3 Then
        Quadratic = CVErr(xlErrNA)
        Exit Function
    End If


    If (A = 0#) Then
        NR = 1
        SR = 0#
        If (B1 <> 0#) Then SR = -C / B1
        LR = 0#
        SI = 0#
        LI = 0#


    ElseIf (C = 0#) Then
        NR = 2
        SR = 0#
        LR = -B1 / A
        SI = 0#
        LI = 0#
    Else

        ' Compute discriminant avoiding overflow
        B = B1 / 2#
        If (Abs(B) >= Abs(C)) Then
            E = 1# - (A / B) * (C / B)
            D = Sqr(Abs(E)) * Abs(B)
        Else
            E = A
            If (C < 0#) Then E = -A
            E = B * (B / Abs(C)) - E
            D = Sqr(Abs(E)) * Sqr(Abs(C))
        End If
        If (E >= 0#) Then

            ' Real zeros
            NR = 2
            If (B >= 0#) Then D = -D
            LR = (-B + D) / A
            SR = 0#
            If (LR <> 0#) Then SR = (C / LR) / A
            SI = 0#
            LI = 0#
        Else
            ' complex conjugate zeros
            SR = -B / A
            LR = SR
            SI = Abs(D / A)
            LI = -SI
        End If
    End If

    If NR = 1 Then
        QuadA(1, 1) = SR
        QuadA(3, 1) = NR
    Else
        If LR < SR Then
            QuadA(1, 1) = LR
            QuadA(2, 1) = SR
            QuadA(3, 1) = NR
            If NR = 0 Then
                QuadA(1, 2) = LI
                QuadA(2, 2) = SI
                QuadA(3, 2) = 2
            End If
        Else
            QuadA(1, 1) = SR
            QuadA(2, 1) = LR
            QuadA(3, 1) = NR
            If NR = 0 Then
                QuadA(1, 2) = SI
                QuadA(2, 2) = LI
                QuadA(3, 2) = 2
            End If
        End If
    End If
    If Out1 = 0 Then
        Quadratic = QuadA
    Else
        Quadratic = QuadA(Out1, out2)
    End If

End Function

Function SolvePoly(ParamArray CoeffA() As Variant)
Dim i As Long, PArray As Variant, Num_Coeff  As Long

Num_Coeff = UBound(CoeffA) + 1
ReDim PArray(1 To Num_Coeff, 1 To 1)
For i = 0 To Num_Coeff - 1
PArray(i + 1, 1) = CoeffA(i).Value2
Next i

Select Case Num_Coeff
Case Is < 3:
SolvePoly = "Num_Coeff must be >= 3"
Case Is < 4:
SolvePoly = Quadratic(PArray)
Case 4:
SolvePoly = CubicC(PArray)
Case 5:
SolvePoly = Quartic(PArray)
Case Else:
SolvePoly = RPolyJT(PArray)
End Select
SolvePoly = WorksheetFunction.Transpose(SolvePoly)
End Function

Function SolvePoly2(CoeffA As Variant, Optional EtaExp As Long = 0, Optional JTFrom As Long = 5)
Dim i As Long, PArray As Variant, Num_Coeff  As Long

CoeffA = GetArray(CoeffA)
Num_Coeff = UBound(CoeffA) + 1
ReDim PArray(1 To Num_Coeff, 1 To 1)
'For i = 0 To Num_Coeff - 1
'PArray(i + 1, 1) = CoeffA(i).Value2
'Next i

If Num_Coeff > JTFrom + 1 Then
    SolvePoly2 = RPolyJT(CoeffA, , EtaExp)
Else
    Select Case Num_Coeff
    Case Is < 3:
    SolvePoly2 = "Num_Coeff must be >= 3"
    Case Is < 4:
    SolvePoly2 = Quadratic(PArray)
    Case 4:
    SolvePoly2 = CubicC(PArray)
    Case 5:
    SolvePoly2 = Quartic(PArray)
    Case Else:
    SolvePoly2 = RPolyJT(PArray, , EtaExp)
    End Select
End If
    
End Function


Function cubic(CoeffA As Variant, Optional Out1 As Long) As Variant

' Copyright (C) 2006 Interactive Design Services

' This program is free software; you can redistribute it and/or modify
' it under the terms of the GNU General Public License as published by
' the Free Software Foundation; either version 2 of the License, or (at
' your option) any later version.

' This program is distributed in the hope that it will be useful, but
' WITHOUT ANY WARRANTY; without even the implied warranty of
' MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
' General Public License for more details.

' You should have received a copy of the GNU General Public License
' along with this program; if not, write to the Free Software
' Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.


' cubic - finds the real roots of z x^3 + a x^2 + b x + c = 0
Dim Z As Double, A As Double, B As Double, C As Double
Dim q As Double, R As Double, Q_ As Double, R_ As Double, Q3 As Double, R2 As Double, CR2 As Double, CQ3 As Double
Dim sqrtQ As Double, sqrtQ3 As Double, Theta As Double, Norm As Double, Ratio As Double
Dim sgnR As Long, A_ As Double, B_ As Double
Dim CubicA(1 To 4, 1 To 1) As Variant, QuadA As Variant, ResA2() As Variant



    If Out1 < 0 Then
'        cubic = CVErr(xlErrNA)
'        Exit Function
        ReDim ResA2(1 To 9, 1 To 2)
    End If

    CoeffA = GetArray(CoeffA)

    If UBound(CoeffA, 2) > UBound(CoeffA) Then CoeffA = Transpose1(CoeffA)

    Z = CoeffA(1, 1)
    A = CoeffA(2, 1)
    B = CoeffA(3, 1)
    C = CoeffA(4, 1)


    If Z = 0 Then
        CoeffA(1, 1) = A
        CoeffA(2, 1) = B
        CoeffA(3, 1) = C

        QuadA = Quadratic(CoeffA)
        CubicA(1, 1) = QuadA(1, 1)
        CubicA(2, 1) = QuadA(2, 1)
        CubicA(3, 1) = 0
        CubicA(4, 1) = QuadA(3, 1)

    Else

        If Z <> 1 Then
            A = A / Z
            B = B / Z
            C = C / Z
        End If

        q = (A * A - 3 * B)
        R = (2 * A * A * A - 9 * A * B + 27 * C)

        Q_ = q / 9
        R_ = R / 54

        Q3 = Q_ * Q_ * Q_
        R2 = R_ * R_

        CR2 = 729 * R * R
        CQ3 = 2916 * q * q * q

        If (R_ = 0 And Q_ = 0) Then
            CubicA(4, 1) = 3

            CubicA(1, 1) = -A / 3
            CubicA(2, 1) = -A / 3
            CubicA(3, 1) = -A / 3

            GoTo select_out

        ElseIf (CR2 = CQ3) Then


            CubicA(4, 1) = 3
            sqrtQ = (Q_) ^ 0.5

            If (R > 0) Then

                CubicA(1, 1) = -2 * sqrtQ - A / 3
                CubicA(2, 1) = sqrtQ - A / 3
                CubicA(3, 1) = sqrtQ - A / 3

            Else

                CubicA(1, 1) = -sqrtQ - A / 3
                CubicA(2, 1) = -sqrtQ - A / 3
                CubicA(3, 1) = 2 * sqrtQ - A / 3
            End If
            GoTo select_out




        ElseIf (R2 < Q3) Then

            CubicA(4, 1) = 3

            If R >= 0 Then sgnR = 1 Else sgnR = -1
            Ratio = sgnR * (R2 / Q3) ^ 0.5
            Theta = ACs(Ratio)
            Norm = -2 * (Q_) ^ 0.5

            CubicA(1, 1) = Norm * Cos(Theta / 3) - A / 3
            CubicA(2, 1) = Norm * Cos((Theta + 2# * Pi) / 3) - A / 3
            CubicA(3, 1) = Norm * Cos((Theta - 2# * Pi) / 3) - A / 3

            ' Sort CubicA into increasing order
            BubbleSort CubicA, 1, 3

            GoTo select_out

        Else
            CubicA(4, 1) = 1
            If R_ >= 0 Then sgnR = 1 Else sgnR = -1
            A_ = -sgnR * (Abs(R_) + (R2 - Q3) ^ 0.5) ^ (1 / 3)
            B_ = Q_ / A_
            CubicA(1, 1) = A_ + B_ - A / 3
            CubicA(2, 1) = 0
            CubicA(3, 1) = 0

        End If
    End If

select_out:

    If Out1 > 0 Then
        cubic = CubicA(Out1, 1)
    ElseIf Out1 = 0 Then
        cubic = CubicA
    Else
        ResA2(1, 1) = "q"
        ResA2(1, 2) = q
        ResA2(2, 1) = "R"
        ResA2(2, 2) = R
        ResA2(3, 1) = "Q_"
        ResA2(3, 2) = Q_
        ResA2(4, 1) = "sqrtQ3"
        ResA2(4, 2) = sqrtQ3
        ResA2(5, 1) = "Theta"
        ResA2(5, 2) = Theta
        ResA2(6, 1) = "Norm"
        ResA2(6, 2) = Norm
        ResA2(7, 1) = "Root 1"
        ResA2(7, 2) = CubicA(1, 1)
        ResA2(8, 1) = "Root 2"
        ResA2(8, 2) = CubicA(2, 1)
        ResA2(9, 1) = "Root 3"
        ResA2(9, 2) = CubicA(3, 1)
        
        cubic = ResA2
    End If

End Function



Function Max2(x1, x2)
    If x2 > x1 Then Max2 = x2 Else Max2 = x1
End Function
Function Max3(x1, x2, x3)
    Max3 = Max2(Max2(x1, x2), x3)
End Function
Function Min2(x1, x2)
    If x2 < x1 Then Min2 = x2 Else Min2 = x1
End Function
Function Min3(x1, x2, x3)
    Min3 = Min2(Min2(x1, x2), x3)
End Function

Function Complx_multiply_real(real_1, imag_1, real_2, imag_2)
    Complx_multiply_real = real_1 * real_2 - imag_1 * imag_2
End Function
Function Complx_multiply_imag(real_1, imag_1, real_2, imag_2)
    Complx_multiply_imag = imag_1 * real_2 + imag_2 * real_1
End Function


Sub BubbleSort(ToSort As Variant, LB As Long, UB As Long, Optional SortAscending As Boolean = True)

' Chris Rae's VBA Code Archive - http://chrisrae.com/vba
' By Chris Rae, 19/5/99.

' Amended for Quartic, Doug Jenkins 27/11/2006

Dim AnyChanges As Boolean
Dim BubbleSort As Long
Dim SwapFH As Variant
    Do
        AnyChanges = False
        For BubbleSort = LB To UB - 1
            If (ToSort(BubbleSort, 1) > ToSort(BubbleSort + 1, 1) And SortAscending)                Or (ToSort(BubbleSort, 1) < ToSort(BubbleSort + 1, 1) And Not SortAscending) Then
                ' These two need to be swapped
                SwapFH = ToSort(BubbleSort, 1)
                ToSort(BubbleSort, 1) = ToSort(BubbleSort + 1, 1)
                ToSort(BubbleSort + 1, 1) = SwapFH
                AnyChanges = True
            End If
        Next BubbleSort
    Loop Until Not AnyChanges
End Sub




Public Function CubicC(CoeffA As Variant, Optional Out1 As Long, Optional out2 As Long = 1, Optional CheckError As Boolean = True) As Variant
' Copyright (C) 2006 Interactive Design Services
'
'   This program is free software; you can redistribute it and/or modify
'   it under the terms of the GNU General Public License as published by
'   the Free Software Foundation; either version 2 of the License, or (at
'   your option) any later version.
'
'   This program is distributed in the hope that it will be useful, but
'   WITHOUT ANY WARRANTY; without even the implied warranty of
'   MERCHANTABILITY or FITNESS FO

VBA File Name: mRPoly, Stream Size: 62316

General
Stream Path:	VBA/mRPoly
VBA File Name:	mRPoly
Stream Size:	62316
Data ASCII:	. . . . . . . . b > . . . . . . . . > . . 9 . . . . . . . . . . . - . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . ( . . . . . > . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . < . . . . . . % . . . . .
Data Raw:	01 16 03 00 06 f0 00 00 00 62 3e 00 00 d4 00 00 00 b0 01 00 00 ff ff ff ff f1 3e 00 00 39 c1 00 00 02 00 00 00 01 00 00 00 c5 bd 97 2d 00 00 ff ff 03 00 00 00 00 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 00 01 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "mRPoly"
Option Explicit
Option Base 1

' Original Fortran 77 source code from: http://www.netlib.org/toms/493
' Converted to VBA and modified by Doug Jenkins 11 Jan 2011

' C FINDS THE ZEROS OF A REAL POLYNOMIAL
' C OP  - DOUBLE PRECISION VECTOR OF COEFFICIENTS IN
' C       ORDER OF DECREASING POWERS.
' C DEGREE   - INTEGER DEGREE OF POLYNOMIAL.
' C ZEROR, ZEROI - OUTPUT DOUBLE PRECISION VECTORS OF
' C                REAL AND IMAGINARY PARTS OF THE
' C                ZEROS.
' C FAIL  - OUTPUT LOGICAL PARAMETER, TRUE ONLY IF
' C         LEADING COEFFICIENT IS ZERO OR IF RPOLY
' C         HAS FOUND FEWER THAN DEGREE ZEROS.
' C         IN THE LATTER CASE DEGREE IS RESET TO
' C         THE NUMBER OF ZEROS FOUND.
' C TO CHANGE THE SIZE OF POLYNOMIALS WHICH CAN BE
' C SOLVED, RESET THE DIMENSIONS OF THE ARRAYS IN THE
' C COMMON AREA AND IN THE FOLLOWING DECLARATIONS.
' C THE SUBROUTINE USES SINGLE PRECISION CALCULATIONS
' C FOR SCALING, BOUNDS AND ERROR CALCULATIONS. ALL
' C CALCULATIONS FOR THE ITERATIONS ARE DONE IN DOUBLE
' C PRECISION.

' All calculations converted to double precision in VBA

Private p() As Double, QP() As Double, k() As Double, QK() As Double, SVK() As Double, SR As Double, SI As Double, U As Double
Private V As Double, A As Double, B As Double, C As Double, D As Double, A1 As Double, A2 As Double, A3 As Double, A6 As Double, A7 As Double, E As Double, F As Double, G As Double
Private H As Double, SZR As Double, SZI As Double, LZR As Double, LZI As Double, ETA As Double, ARE As Double, MRE As Double, N As Double, NN As Long, L As Double

Function RPolyJT(OPv As Variant, Optional CheckError As Boolean = True, Optional EtaExp As Long = 0) As Variant
    Dim OP() As Double, ZeroR() As Double, ZeroI() As Double, Fail As Boolean, Degree As Long, NR As Long
    Dim Resa() As Double, i As Long, iErr As Variant, Checkx As Variant

    OPv = GetArray(OPv)
    
    If UBound(OPv) > UBound(OPv, 2) Then
    NN = UBound(OPv)
    ReDim OP(1 To NN)
    For i = 1 To NN
        OP(i) = OPv(i, 1)
    Next i
Else
    NN = UBound(OPv, 2)
    ReDim OP(1 To NN)
For i = 1 To NN
        OP(i) = OPv(1, i)
    Next i
    End If
    
    Degree = NN - 1
    ReDim Resa(1 To Degree + 2, 1 To 2)
    ReDim ZeroR(1 To Degree + 2)
    ReDim ZeroI(1 To Degree + 2)
    Call RPoly(OP, Degree, ZeroR, ZeroI, Fail, EtaExp)
    If Fail = False Then
        NR = 0
        For i = 1 To Degree
            Resa(i, 1) = ZeroR(i)
            Resa(i, 2) = ZeroI(i)
            If Resa(i, 2) = 0 Then NR = NR + 1
        Next i
        Resa(i, 1) = NR
        Resa(i, 2) = Degree - NR
        
        If CheckError = True Then
        Checkx = EvalErrorHC(Resa, OPv)
            For i = 1 To Degree
                If Abs(Checkx(i, 1)) > Resa(Degree + 2, 1) Then Resa(Degree + 2, 1) = Abs(Checkx(i, 1))
                If Abs(Checkx(i, 2)) > Resa(Degree + 2, 2) Then Resa(Degree + 2, 2) = Abs(Checkx(i, 2))
            Next i
        End If
        RPolyJT = Resa
    Else
        RPolyJT = "Did not converge, solutions found = " & Degree
    End If
End Function



Sub RPoly(OP() As Double, Degree As Long, ZeroR() As Double, ZeroI() As Double, Fail As Boolean, EtaExp As Long)
    Dim TEMP() As Double
    Dim t As Double, AA As Double, BB As Double, CC As Double
    Dim FACTOR As Double
    Dim PT() As Double, LO As Double, MAX As Double, MIN As Double, XX As Double, YY As Double, COSR As Double
    Dim SINR As Double, XXX As Double, X As Double, SC As Double, BND As Double, XM As Double, FF As Double, DF As Double, DX As Double, INFIN As Double
    Dim SMALNO As Double, BASE As Double
    Dim CNT As Long, NZ As Long, i As Long, j As Long, JJ As Long, NM1 As Long
    Dim ZEROK As Boolean

    N = Degree
    NN = N + 1
    
    ' C THE FOLLOWING STATEMENTS SET MACHINE CONSTANTS USED
    ' C IN VARIOUS PARTS OF THE PROGRAM. THE MEANING OF THE
    ' C FOUR CONSTANTS ARE...
    ' C ETA     THE MAXIMUM RELATIVE REPRESENTATION ERROR
    ' C         WHICH CAN BE DESCRIBED AS THE SMALLEST
    ' C         POSITIVE FLOATING POINT NUMBER SUCH THAT
    ' C         1.D0+ETA IS GREATER THAN 1.
    ' C INFINY  THE LARGEST FLOATING-POINT NUMBER.
    ' C SMALNO  THE SMALLEST POSITIVE FLOATING-POINT NUMBER
    ' C         IF THE EXPONENT RANGE DIFFERS IN SINGLE AND
    ' C         DOUBLE PRECISION THEN SMALNO AND INFIN
    ' C         SHOULD INDICATE THE SMALLER RANGE.
    ' C BASE    THE BASE OF THE FLOATING-POINT NUMBER
    ' C         SYSTEM USED.
    ' C THE VALUES BELOW CORRESPOND TO THE BURROUGHS B6700 - adjusted for MS Excel VBA
    BASE = 32#
    If EtaExp = 0 Then EtaExp = -11
    ETA = 0.5 * BASE ^ EtaExp
    INFIN = 6.67E+94    ' 4.3E+68
    SMALNO = 1.46E-98  '  1E-45
    ' C ARE AND MRE REFER TO THE UNIT ERROR IN + AND *
    ' C RESPECTIVELY. THEY ARE ASSUMED TO BE THE SAME AS
    ' C ETA.
    ARE = ETA
    MRE = ETA
    LO = SMALNO / ETA
    ' C INITIALIZATION OF CONSTANTS FOR SHIFT ROTATION
    XX = 0.707106781186548
    YY = -XX
    COSR = -6.97564737441253E-02
    SINR = 0.997564050259824
    Fail = False

    ' Redimension arrays
    ReDim p(NN)
    ReDim QP(NN)
    ReDim k(NN)
    ReDim QK(NN)
    ReDim SVK(NN)
    ReDim TEMP(NN)
    ReDim PT(NN)

    ' C ALGORITHM FAILS IF THE LEADING COEFFICIENT IS ZERO.
    If (OP(1) = 0) Then
        Fail = True
        Degree = 0
        Exit Sub
    End If
    ' C REMOVE THE ZEROS AT THE ORIGIN IF ANY

    Do While (OP(NN) = 0#)
        j = Degree - N + 1
        ZeroR(j) = 0#
        ZeroI(j) = 0#
        NN = NN - 1
        N = N - 1
    Loop
    ' C MAKE A COPY OF THE COEFFICIENTS
    For i = 1 To NN
        p(i) = OP(i)
    Next i

    ' C START THE ALGORITHM FOR ONE ZERO
40:
    If (N <= 2) Then
        If (N < 1) Then Exit Sub
        ' C CALCULATE THE FINAL ZERO OR PAIR OF ZEROS
        If (N < 2) Then
            ZeroR(Degree) = -p(2) / p(1)
            ZeroI(Degree) = 0#

            Exit Sub
        Else
            Call QUAD(p(1), p(2), p(3), ZeroR(Degree - 1), ZeroI(Degree - 1), ZeroR(Degree), ZeroI(Degree))
            Exit Sub
        End If
    End If
    ' C FIND LARGEST AND SMALLEST MODULI OF COEFFICIENTS.
60:
    MAX = 0#
    MIN = INFIN
    For i = 1 To NN
        X = Abs((p(i)))
        If (X > MAX) Then MAX = X
        If (X <> 0) And (X < MIN) Then MIN = X
    Next i
    ' C SCALE IF THERE ARE LARGE OR VERY SMALL COEFFICIENTS
    ' C COMPUTES A SCALE FACTOR TO MULTIPLY THE
    ' C COEFFICIENTS OF THE POLYNOMIAL. THE SCALING IS DONE
    ' C TO AVOID OVERFLOW AND TO AVOID UNDETECTED UNDERFLOW
    ' C INTERFERING WITH THE CONVERGENCE CRITERION.
    ' C THE FACTOR IS A POWER OF THE BASE
    SC = LO / MIN
    
    If (SC > 1#) Then GoTo 80
    If (MAX < 10#) Then GoTo 110
    If (SC = 0#) Then SC = SMALNO
    GoTo 90
80:
    If (INFIN / SC < MAX) Then GoTo 110
90:
    L = Log(SC) / Log(BASE) + 0.5
    FACTOR = (BASE * 1#) ^ L
    If (FACTOR = 1#) Then GoTo 110
    For i = 1 To NN
        p(i) = FACTOR * p(i)
    Next i
    
    ' C COMPUTE LOWER BOUND ON MODULI OF ZEROS.
110:
    For i = 1 To NN
        PT(i) = Abs((p(i)))
    Next i
    PT(NN) = -PT(NN)
   
    ' C COMPUTE UPPER ESTIMATE OF BOUND
    X = Exp((Log(-PT(NN)) - Log(PT(1))) / N)
    If (PT(N) <> 0) Then
        ' C IF NEWTON STEP AT THE ORIGIN IS BETTER, USE IT.
        XM = -PT(NN) / PT(N)
        If (XM < X) Then X = XM
    End If
    ' C CHOP THE INTERVAL (0,X) UNTIL FF .LE. 0
130:
    
    XM = X * 0.1
    FF = PT(1)
    For i = 2 To NN
        FF = FF * XM + PT(i)
    Next i
    If (FF > 0#) Then
        X = XM
        GoTo 130
    End If
    DX = X
   
    ' C DO NEWTON ITERATION UNTIL X CONVERGES TO TWO
    ' C DECIMAL PLACES
160:
    If (Abs(DX / X) > 0.005) Then
        FF = PT(1)
        DF = FF
        For i = 2 To N
            FF = FF * X + PT(i)
            DF = DF * X + FF
        Next i
        FF = FF * X + PT(NN)
        DX = FF / DF
        X = X - DX
        GoTo 160
    End If
180:

    BND = X
    
    ' C COMPUTE THE DERIVATIVE AS THE INTIAL K POLYNOMIAL
    ' C AND DO 5 STEPS WITH NO SHIFT
    NM1 = N - 1
    For i = 2 To N
        k(i) = (NN - i) * p(i) / (N)
    Next i
    k(1) = p(1)
    AA = p(NN)
    BB = p(N)
    ZEROK = (k(N) = 0#)

    For JJ = 1 To 5
        CC = k(N)
        If (ZEROK) Then GoTo 210
        ' C USE SCALED FORM OF RECURRENCE IF VALUE OF K AT 0 IS
        ' C NONZERO
        t = -AA / CC
        For i = 1 To NM1
            j = NN - i
            k(j) = t * k(j - 1) + p(j)
        Next i
        k(1) = p(1)
        ZEROK = (Abs(k(N)) <= Abs(BB) * ETA * 10#)
        GoTo 230
        ' C USE UNSCALED FORM OF RECURRENCE
210:
        For i = 1 To NM1
            j = NN - i
            k(j) = k(j - 1)
        Next i
220:

        k(1) = 0#
        ZEROK = (k(N) = 0#)
230:
        ' Range("i20:m20")(JJ)(1) = ZEROK
        ' Range("i20:m20")(JJ)(2) = k(N)
    Next JJ
    ' Range("i22:m22") = k
    ' C SAVE K FOR RESTARTS WITH NEW SHIFTS
    For i = 1 To N
        TEMP(i) = k(i)
    Next i
240:
    ' C LOOP TO SELECT THE QUADRATIC  CORRESPONDING TO EACH
    ' C NEW SHIFT
    For CNT = 1 To 20
        ' C QUADRATIC CORRESPONDS TO A DOUBLE SHIFT TO A
        ' C NON-REAL POINT AND ITS COMPLEX CONJUGATE. THE POINT
        ' C HAS MODULUS BND AND AMPLITUDE ROTATED BY 94 DEGREES
        ' C FROM THE PREVIOUS SHIFT
        XXX = COSR * XX - SINR * YY
        YY = SINR * XX + COSR * YY
        XX = XXX
        SR = BND * XX
        SI = BND * YY
        U = -2# * SR
        V = BND
      
        ' C SECOND STAGE CALCULATION, FIXED QUADRATIC
        Call FXSHFR(20 * CNT, NZ)
        If (NZ <> 0) Then
            ' C THE SECOND STAGE JUMPS DIRECTLY TO ONE OF THE THIRD
            ' C STAGE ITERATIONS AND RETURNS HERE IF SUCCESSFUL.
            ' C DEFLATE THE POLYNOMIAL, STORE THE ZERO OR ZEROS AND
            ' C RETURN TO THE MAIN ALGORITHM.
            j = Degree - N + 1
            ZeroR(j) = SZR
            ZeroI(j) = SZI
            NN = NN - NZ
            N = NN - 1
            For i = 1 To NN
                p(i) = QP(i)
            Next i
250:
            If (NZ = 1) Then GoTo 40
            ZeroR(j + 1) = LZR
            ZeroI(j + 1) = LZI
            GoTo 40
            ' C IF THE ITERATION IS UNSUCCESSFUL ANOTHER QUADRATIC
            ' C IS CHOSEN AFTER RESTORING K
        End If
260:
        For i = 1 To N
            k(i) = TEMP(i)
        Next i
270:
        
    Next CNT

280:
    ' C RETURN WITH FAILURE IF NO CONVERGENCE WITH 20
    ' C SHIFTS
    Fail = True
    Degree = Degree - N
    ' Return
End Sub


Sub FXSHFR(L2, NZ)                             '            FXS   10
' C COMPUTES UP TO  L2  FIXED SHIFT K-POLYNOMIALS,
' C TESTING FOR CONVERGENCE IN THE LINEAR OR QUADRATIC
' C CASE. INITIATES ONE OF THE VARIABLE SHIFT
' C ITERATIONS AND RETURNS WITH THE NUMBER OF ZEROS
' C FOUND.
' C L2 - LIMIT OF FIXED SHIFT STEPS
' C NZ - NUMBER OF ZEROS FOUND

    Dim SVU As Double, SVV As Double, UI As Double, VI As Double, S
    Dim BETAS As Double, BETAV As Double, OSS As Double, OVV As Double, SS As Double, VV As Double, TS As Double, TV As Double
    Dim OTS As Double, OTV As Double, TVV As Double, TSS
    Dim DType As Long, i As Long, j As Long, IFLAG As Long
    Dim VPASS As Boolean, SPASS As Boolean, VTRY As Boolean, STRY As Boolean
    NZ = 0
    BETAV = 0.25
    BETAS = 0.25
    OSS = SR
    OVV = V
    ' C EVALUATE POLYNOMIAL BY SYNTHETIC DIVISION
    Call QUADSD(NN, U, V, p, QP, A, B)
   
    Call CALCSC(DType)
    For j = 1 To L2
        ' C CALCULATE NEXT K POLYNOMIAL AND ESTIMATE V
        Call NEXTK(DType)
        Call CALCSC(DType)
        Call NEWEST(DType, UI, VI)
        VV = VI
        ' C ESTIMATE S
        SS = 0#
        If (k(N) <> 0#) Then SS = -p(NN) / k(N)
        TV = 1#
        TS = 1#
        If (j = 1 Or DType = 3) Then GoTo 70
        ' C COMPUTE RELATIVE MEASURES OF CONVERGENCE OF S AND V
        ' C SEQUENCES
        If (VV <> 0#) Then TV = Abs((VV - OVV) / VV)
        If (SS <> 0#) Then TS = Abs((SS - OSS) / SS)
        ' C IF DECREASING, MULTIPLY TWO MOST RECENT
        ' C CONVERGENCE MEASURES
        TVV = 1#
        If (TV < OTV) Then TVV = TV * OTV
        TSS = 1#
        If (TS < OTS) Then TSS = TS * OTS
        ' C COMPARE WITH CONVERGENCE CRITERIA
        VPASS = TVV < BETAV
        SPASS = TSS < BETAS
        If (Not (SPASS Or VPASS)) Then GoTo 70
        ' C AT LEAST ONE SEQUENCE HAS PASSED THE CONVERGENCE
        ' C TEST. STORE VARIABLES BEFORE ITERATING
        SVU = U
        SVV = V
        For i = 1 To N
            SVK(i) = k(i)
        Next i
10:
        S = SS
        ' C CHOOSE ITERATION ACCORDING TO THE FASTEST
        ' C CONVERGING SEQUENCE
        VTRY = False
        STRY = False
        If (SPASS And ((Not VPASS) Or TSS < TVV)) Then GoTo 40
20:
        Call QUADIT(UI, VI, NZ)
        If (NZ > 0) Then Exit Sub
        ' C QUADRATIC ITERATION HAS FAILED. FLAG THAT IT HAS
        ' C BEEN TRIED AND DECREASE THE CONVERGENCE CRITERION.
        VTRY = True
        BETAV = BETAV * 0.25
        ' C TRY LINEAR ITERATION IF IT HAS NOT BEEN TRIED AND
        ' C THE S SEQUENCE IS CONVERGING
        If (STRY Or (Not SPASS)) Then GoTo 50
        For i = 1 To N
            k(i) = SVK(i)
        Next i
30:
40      Call REALIT(S, NZ, IFLAG)
        If (NZ > 0) Then Exit Sub
        ' C LINEAR ITERATION HAS FAILED. FLAG THAT IT HAS BEEN
        ' C TRIED AND DECREASE THE CONVERGENCE CRITERION
        STRY = True
        BETAS = BETAS * 0.25
        If (IFLAG = 0) Then GoTo 50
        ' C IF LINEAR ITERATION SIGNALS AN ALMOST DOUBLE REAL
        ' C ZERO ATTEMPT QUADRATIC INTERATION
        UI = -(S + S)
        VI = S * S
        GoTo 20
        ' C RESTORE VARIABLES
50      U = SVU
        V = SVV
        For i = 1 To N
            k(i) = SVK(i)
        Next i
60:
        ' C TRY QUADRATIC ITERATION IF IT HAS NOT BEEN TRIED
        ' C AND THE V SEQUENCE IS CONVERGING
        If (VPASS And (Not VTRY)) Then GoTo 20
        ' C RECOMPUTE QP AND SCALAR VALUES TO CONTINUE THE
        ' C SECOND STAGE
        Call QUADSD(NN, U, V, p, QP, A, B)
        Call CALCSC(DType)
70      OVV = VV
        OSS = SS
        OTV = TV
        OTS = TS
    Next j
80:
    ' Return
End Sub


Sub QUADIT(UU, VV, NZ)                               '       QUA   10
' C VARIABLE-SHIFT K-POLYNOMIAL ITERATION FOR A
' C QUADRATI ' C FACTOR CONVERGES ONLY IF THE ZEROS ARE
' C EQUIMODULAR OR NEARLY SO.
' C UU,VV - COEFFICIENTS OF STARTING QUADRATIC
' C NZ - NUMBER OF ZERO FOUND

    Dim UI As Double, VI As Double
    Dim MP As Double, OMP As Double, EE As Double, RELSTP As Double, t As Double, ZM As Double   ' MS As Double
    Dim DType As Long, i As Long, j As Long
    Dim TRIED As Boolean
    NZ = 0
    TRIED = False
    U = UU
    V = VV
    j = 0
    ' C MAIN LOOP
10  Call QUAD(1#, U, V, SZR, SZI, LZR, LZI)
    ' C RETURN IF ROOTS OF THE QUADRATI ' C ARE REAL AND NOT
    ' C CLOSE TO MULTIPLE OR NEARLY EQUAL AND  OF OPPOSITE
    ' C SIGN
    If (Abs(Abs(SZR) - Abs(LZR)) > 0.01 * Abs(LZR)) Then Exit Sub
    ' C EVALUATE POLYNOMIAL BY QUADRATI ' C SYNTHETI ' C DIVISION
    Call QUADSD(NN, U, V, p, QP, A, B)
    MP = Abs(A - SZR * B) + Abs(SZI * B)
    ' C COMPUTE A RIGOROUS  BOUND ON THE ROUNDING ERROR IN
    ' C EVALUTING P
    ZM = Sqr(Abs((V)))
    EE = 2# * Abs((QP(1)))
    t = -SZR * B
    For i = 2 To N
        EE = EE * ZM + Abs((QP(i)))
    Next i
20:
    EE = EE * ZM + Abs((A) + t)
    EE = (5# * MRE + 4# * ARE) * EE - (5# * MRE + 2# * ARE) * (Abs((A) + t) + Abs((B)) * ZM) + 2# * ARE * Abs(t)
    ' C ITERATION HAS CONVERGED SUFFICIENTLY IF THE
    ' C POLYNOMIAL VALUE IS LESS THAN 20 TIMES THIS BOUND
    If (MP > 20# * EE) Then GoTo 30
    NZ = 2
    Exit Sub
30:
    j = j + 1
    ' C STOP ITERATION AFTER 20 STEPS
    If (j > 20) Then Exit Sub
    If (j < 2) Then GoTo 50
    If (RELSTP > 0.01 Or MP > OMP Or TRIED) Then GoTo 50
    ' C A CLUSTER APPEARS TO BE STALLING THE CONVERGENCE.
    ' C FIVE FIXED SHIFT STEPS ARE TAKEN WITH A U,V CLOSE
    ' C TO THE CLUSTER
    If (RELSTP > ETA) Then RELSTP = ETA
    RELSTP = Sqr(RELSTP)
    U = U - U * RELSTP
    V = V + V * RELSTP
    Call QUADSD(NN, U, V, p, QP, A, B)
    For i = 1 To 5
        Call CALCSC(DType)
        Call NEXTK(DType)
    Next i
40:
    TRIED = True
    j = 0
50:
    OMP = MP
    ' C CALCULATE NEXT K POLYNOMIAL AND NEW U AND V
    Call CALCSC(DType)
    Call NEXTK(DType)
    Call CALCSC(DType)
    Call NEWEST(DType, UI, VI)
    ' C IF VI IS ZERO THE ITERATION IS NOT CONVERGING
    If (VI = 0#) Then Exit Sub
    RELSTP = Abs((VI - V) / VI)
    U = UI
    V = VI
    GoTo 10
End Sub


Sub REALIT(SSS, NZ, IFLAG)                      '           REA   10
' C VARIABLE-SHIFT H POLYNOMIAL ITERATION FOR A REAL
' C ZERO.
' C SSS   - STARTING ITERATE
' C NZ    - NUMBER OF ZERO FOUND
' C IFLAG - FLAG TO INDICATE A PAIR OF ZEROS NEAR REAL
' C         AXIS.
    Dim PV As Double, KV As Double, t As Double, S As Double
    Dim MS As Double, MP As Double, OMP As Double, EE As Double
    Dim i As Long, j As Long, NM1 As Long
    NM1 = N - 1
    NZ = 0
    S = SSS
    IFLAG = 0
    j = 0
    ' C MAIN LOOP
10  PV = p(1)
    ' C EVALUATE P AT S
    QP(1) = PV
    For i = 2 To NN
        PV = PV * S + p(i)
        QP(i) = PV
    Next i
20:
    MP = Abs(PV)
    ' C COMPUTE A RIGOROUS BOUND ON THE ERROR IN EVALUATING
    ' C P
    MS = Abs(S)
    EE = (MRE / (ARE + MRE)) * Abs((QP(1)))
    For i = 2 To NN
        EE = EE * MS + Abs((QP(i)))
    Next i
30:
    ' C ITERATION HAS CONVERGED SUFFICIENTLY IF THE
    ' C POLYNOMIAL VALUE IS LESS THAN 20 TIMES THIS BOUND
    If (MP > 20# * ((ARE + MRE) * EE - MRE * MP)) Then GoTo 40
    NZ = 1
    SZR = S
    SZI = 0#
    Exit Sub
40:
    j = j + 1
    ' C STOP ITERATION AFTER 10 STEPS
    If (j > 10) Then Exit Sub
    If (j < 2) Then GoTo 50
    If (Abs(t) > 0.001 * Abs(S - t) Or MP < OMP) Then GoTo 50
    ' C A CLUSTER OF ZEROS NEAR THE REAL AXIS HAS BEEN
    ' C ENCOUNTERED RETURN WITH IFLAG SET TO INITIATE A
    ' C QUADRATIC ITERATION
    IFLAG = 1
    SSS = S
    Exit Sub
    ' C RETURN IF THE POLYNOMIAL VALUE HAS INCREASED
    ' C SIGNIFICANTLY
50:     OMP = MP
    ' C COMPUTE T, THE NEXT POLYNOMIAL, AND THE NEW ITERATE
    KV = k(1)
    QK(1) = KV
    For i = 2 To N
        KV = KV * S + k(i)
        QK(i) = KV
    Next i
60:
    If (Abs(KV) <= Abs(k(N)) * 10# * ETA) Then GoTo 80
    ' C USE THE SCALED FORM OF THE RECURRENCE IF THE VALUE
    ' C OF K AT S IS NONZERO
    t = -PV / KV
    k(1) = QP(1)
    For i = 2 To N
        k(i) = t * QK(i - 1) + QP(i)
    Next i
70:
    GoTo 100
    ' C USE UNSCALED FORM
80  k(1) = 0#
    For i = 2 To N
        k(i) = QK(i - 1)
    Next i
90:
100:
    KV = k(1)
    For i = 2 To N
        KV = KV * S + k(i)
    Next i
110:
    t = 0#
    If (Abs(KV) > Abs(k(N)) * 10# * ETA) Then t = -PV / KV
    S = S + t
    GoTo 10
End Sub

Sub CALCSC(DType)    '                                          CAL   10
' C THIS ROUTINE CALCULATES SCALAR QUANTITIES USED TO
' C COMPUTE THE NEXT K POLYNOMIAL AND NEW ESTIMATES OF
' C THE QUADRATIC COEFFICIENTS.
' C DType - INTEGER VARIABLE SET HERE INDICATING HOW THE
' C CALCULATIONS ARE NORMALIZED TO AVOID OVERFLOW

' C SYNTHETIC DIVISION OF K BY THE QUADRATIC 1,U,V
    Call QUADSD(N, U, V, k, QK, C, D)
    If (Abs(C) > Abs(k(N)) * 100# * ETA) Then GoTo 10
    If (Abs(D) > Abs(k(N - 1)) * 100# * ETA) Then GoTo 10
    DType = 3
    ' C TYPE=3 INDICATES THE QUADRATI ' C IS ALMOST A FACTOR
    ' C OF K
    Exit Sub
10:     If (Abs(D) < Abs(C)) Then GoTo 20
    DType = 2
    ' C TYPE=2 INDICATES THAT ALL FORMULAS ARE DIVIDED BY D
    E = A / D
    F = C / D
    G = U * B
    H = V * B
    A3 = (A + G) * E + H * (B / D)
    A1 = B * F - A
    A7 = (F + U) * A + H
    Exit Sub
20  DType = 1
    ' C TYPE=1 INDICATES THAT ALL FORMULA

VBA File Name: mTrig, Stream Size: 14504

General
Stream Path:	VBA/mTrig
VBA File Name:	mTrig
Stream Size:	14504
Data ASCII:	. . . . . . . . j . . . . . . ( . . . u . . . . . . . . . . . . . . . M . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . P . . . . . . > . . . . . . . . . . . . . . . . . . . . . . . . L . . . . . . . . . . . . . . . . . . . . L . . .
Data Raw:	01 16 03 00 06 f0 00 00 00 6a 13 00 00 d4 00 00 00 28 02 00 00 ff ff ff ff 75 14 00 00 fd 2e 00 00 00 00 00 00 01 00 00 00 c5 bd a7 4d 00 00 ff ff 03 00 00 00 00 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 08 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "mTrig"
Option Explicit
Option Base 1

Function DepressedC(CoeffA As Variant, Optional Out1 As Long) As Variant


' Copyright (C) 2022 Interactive Design Services

' This program is free software; you can redistribute it and/or modify
' it under the terms of the GNU General Public License as published by
' the Free Software Foundation; either version 2 of the License, or (at
' your option) any later version.

' This program is distributed in the hope that it will be useful, but
' WITHOUT ANY WARRANTY; without even the implied warranty of
' MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
' General Public License for more details.

' You should have received a copy of the GNU General Public License
' along with this program; if not, write to the Free Software
' Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.


' depressed - returns the coefficients of the depressed cubic, t^3 + pt +q
Dim A As Double, B As Double, C As Double, D As Double
Dim t As Double, p As Double, q As Double
Dim DepressedA(1 To 1, 1 To 2) As Variant

    CoeffA = GetArray(CoeffA)

    If UBound(CoeffA, 2) > UBound(CoeffA) Then CoeffA = Transpose1(CoeffA)

    A = CoeffA(1, 1)
    B = CoeffA(2, 1)
    C = CoeffA(3, 1)
    D = CoeffA(4, 1)

    p = (3 * A * C - (B) ^ 2) / (3 * (A) ^ 2)
    q = (2 * (B) ^ 3 - 9 * A * B * C + 27 * (A) ^ 2 * D) / (27 * (A) ^ 3)
    
    DepressedA(1, 1) = p
    DepressedA(1, 2) = q
    
    DepressedC = DepressedA
    
End Function


Function CubicT(CoeffA As Variant, Optional Out1 As Long) As Variant

' CubicT - returns the real roots of a cubic equatio:, a*x^3 + b*x^2 + c*x + d
Dim A As Double, B As Double, C As Double, D As Double
Dim t As Double, p As Double, q As Double, NReal As Long
Dim DepressedA(1 To 1, 1 To 2) As Variant, pqA As Variant, Resa(1 To 4, 1 To 1) As Double
Dim ThirdACos3Op As Double, twoRtmpO3 As Double, TwoThirdPi As Double, bO3a As Double
Dim ResA2(1 To 8, 1 To 2) As Variant

    CoeffA = GetArray(CoeffA)

    If UBound(CoeffA, 2) > UBound(CoeffA) Then CoeffA = Transpose1(CoeffA)

    A = CoeffA(1, 1)
    B = CoeffA(2, 1)
    C = CoeffA(3, 1)
    D = CoeffA(4, 1)
    
    pqA = DepressedC(CoeffA)

    p = pqA(1, 1)
    q = pqA(1, 2)
    If Abs(p) < MachineEpsilon Then p = 0
    If Abs(q) < MachineEpsilon Then q = 0
    
    If p = 0 Then
        t = (-q) ^ (1 / 3)
        Resa(1, 1) = t - B / (3 * A)
        Resa(4, 1) = 1
        CubicT = Resa
        Exit Function
    End If
    
    NReal = 1
    
    If p < 0 Then
        If 4 * (p) ^ 3 + 27 * (q) ^ 2 < 0 Then NReal = 3
    End If
    
    Resa(4, 1) = NReal
    twoRtmpO3 = 2 * (Abs(p) / 3) ^ 0.5
    bO3a = B / (3 * A)
     
    If NReal = 3 Then
    ' Trigonometric solution for 3 reaal roots
        ThirdACos3Op = (WorksheetFunction.Acos(3 * q / (2 * p) * (-3 / p) ^ 0.5)) / 3
        TwoThirdPi = Pi * 2 / 3
        
        Resa(1, 1) = twoRtmpO3 * Cos(ThirdACos3Op) - bO3a
        Resa(2, 1) = twoRtmpO3 * Cos(ThirdACos3Op - TwoThirdPi) - bO3a
        Resa(3, 1) = twoRtmpO3 * Cos(ThirdACos3Op - 2 * TwoThirdPi) - bO3a
        
        ' Sort CubicA into increasing order
        BubbleSort Resa, 1, 3
        
    ElseIf p < 0 Then
    ' Hyperbolic solution 1 for 1 real root
        Resa(1, 1) = -twoRtmpO3 * Abs(q) / q * CosH(Acsh(-3 * Abs(q) / (2 * p) * (-3 / p) ^ 0.5) / 3) - bO3a
    Else
    ' Hyperbolic solution 2 for 1 real root
        Resa(1, 1) = -twoRtmpO3 * SinH((ASnh(3 * q / (2 * p) * (3 / p) ^ 0.5)) / 3) - bO3a
    End If
    
    If Out1 >= 0 Then
        CubicT = Resa
    Else
    ' Return intermediate values
        ResA2(1, 1) = "p"
        ResA2(1, 2) = p
        ResA2(2, 1) = "q"
        ResA2(2, 2) = q
        ResA2(3, 1) = "twoRtmpO3"
        ResA2(3, 2) = twoRtmpO3
        ResA2(4, 1) = "bO3a"
        ResA2(4, 2) = bO3a
        ResA2(5, 1) = "ThirdACos3Op"
        ResA2(5, 2) = ThirdACos3Op
        ResA2(6, 1) = "Root 1"
        ResA2(6, 2) = Resa(1, 1)
        ResA2(7, 1) = "Root 2"
        ResA2(7, 2) = Resa(2, 1)
        ResA2(8, 1) = "Root 3"
        ResA2(8, 2) = Resa(3, 1)
        CubicT = ResA2
    End If
End Function


Function Acsh(X As Double) As Double
  
' Inverse Cosh
  
Acsh = Log(X + Sqr(X * X - 1))
  
End Function


Function ASnh(X As Double) As Double
  
' Inverse Hyperbolic Sine
  
ASnh = Log(X + Sqr(X * X + 1))
  
End Function


Function Timecubics(CoeffA As Variant)
Dim TimeNow As Double, i As Long, Resa(1 To 4) As Variant, res As Variant

CoeffA = CoeffA.Value2
TimeNow = Timer
For i = 1 To 100000
 CoeffA(1, 1) = i / 1000
 res = Quartic(CoeffA, , , False)
Next i
Resa(1) = Timer - TimeNow

TimeNow = Timer
For i = 1 To 100000
 CoeffA(1, 1) = i / 1000
 res = CubicC(CoeffA, , , False)
Next i
Resa(2) = Timer - TimeNow

TimeNow = Timer
For i = 1 To 100000
 CoeffA(1, 1) = i / 1000
 res = cubic(CoeffA)
Next i
Resa(3) = Timer - TimeNow

TimeNow = Timer
For i = 1 To 100000
  CoeffA(1, 1) = i / 1000
 res = CubicT(CoeffA)
Next i
Resa(4) = Timer - TimeNow

Timecubics = Resa
End Function

VBA File Name: m_Complex, Stream Size: 20185

General
Stream Path:	VBA/m_Complex
VBA File Name:	m_Complex
Stream Size:	20185
Data ASCII:	. . . . . . . . . $ . . . . . . . . $ . . . F . . . . . . . . . . . e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . ( . . . P . . . 1 . . d . . . . . . . . . . > . . . . . . . . . . . . . . . . . . < 0 . . . . . . < 8 . . . . . .
Data Raw:	01 16 03 00 06 f0 00 00 00 1a 24 00 00 d4 00 00 00 d8 01 00 00 ff ff ff ff c0 24 00 00 08 46 00 00 14 00 00 00 01 00 00 00 c5 bd 65 09 00 00 ff ff 03 00 00 00 00 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 08 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "m_Complex"
Option Explicit

Public Function Vara2Complex(ByVal Za As Variant) As Complex
    Dim Z As Complex, LB As Long

    If TypeName(Za) = "Range" Then Za = Za.Value2
    LB = LBound(Za)
    If UBound(Za) - LB > 0 Then
        Z.X = Za(LB)
        Z.Y = Za(LB + 1)
    Else
        Z.X = Za(LB, LB)
        Z.Y = Za(LB, LB + 1)
    End If
    Vara2Complex = Z

End Function
Public Function AL_C_Complex(ByVal X As Double) As Variant
    Dim Result(0 To 1) As Double

    Result(0) = X
    Result(1) = 0

    AL_C_Complex = Result
End Function


Public Function AL_AbsComplex(ByRef Za As Variant) As Double
    Dim Z As Complex
    Dim Result As Double
    Dim W As Double
    Dim XABS As Double
    Dim YABS As Double
    Dim V As Double

    Z = Vara2Complex(Za)
    XABS = Abs(Z.X)
    YABS = Abs(Z.Y)
    W = MaxReal(XABS, YABS)
    V = MinReal(XABS, YABS)
    If V = 0 Then
        Result = W
    Else
        Result = W * Sqr(1 + Square(V / W))
    End If

    AL_AbsComplex = Result
End Function


Public Function AL_C_Opposite(ByRef Za As Variant) As Variant
    Dim Z As Complex
    Dim Result(0 To 1) As Double
    
    Z = Vara2Complex(Za)
    Result(0) = -Z.X
    Result(1) = -Z.Y

    AL_C_Opposite = Result
End Function


Public Function AL_Conj(ByRef Za As Variant) As Variant
    Dim Result(0 To 1) As Double
    Dim Z As Complex
    
    Z = Vara2Complex(Za)
    Result(0) = Z.X
    Result(1) = -Z.Y

    AL_Conj = Result
End Function


Public Function AL_CSqr(ByRef Za As Variant) As Variant
    Dim Result(0 To 1) As Double
    Dim Z As Complex
    
    Z = Vara2Complex(Za)
    Result(0) = Square(Z.X) - Square(Z.Y)
    Result(1) = 2 * Z.X * Z.Y

    AL_CSqr = Result
End Function


Public Function AL_C_Add(ByRef Z1a As Variant, ByRef Z2a As Variant) As Variant
    Dim Result(0 To 1) As Double
    Dim Z1 As Complex
    Dim Z2 As Complex

    Z1 = Vara2Complex(Z1a)
    Z2 = Vara2Complex(Z2a)
    Result(0) = Z1.X + Z2.X
    Result(1) = Z1.Y + Z2.Y

    AL_C_Add = Result
End Function


Public Function AL_C_Mul(ByRef Z1a As Variant, ByRef Z2a As Variant) As Variant
    Dim Result(0 To 1) As Double
    Dim Z1 As Complex
    Dim Z2 As Complex

    Z1 = Vara2Complex(Z1a)
    Z2 = Vara2Complex(Z2a)
    Result(0) = Z1.X * Z2.X - Z1.Y * Z2.Y
    Result(1) = Z1.X * Z2.Y + Z1.Y * Z2.X

    AL_C_Mul = Result
End Function


Public Function AL_C_AddR(ByRef Z1a As Variant, ByVal R As Double) As Variant
    Dim Result(0 To 1) As Double
    Dim Z1 As Complex

    Z1 = Vara2Complex(Z1a)
    Result(0) = Z1.X + R
    Result(1) = Z1.Y

    AL_C_AddR = Result
End Function


Public Function AL_C_MulR(ByRef Z1a As Variant, ByVal R As Double) As Variant
    Dim Result(0 To 1) As Double
    Dim Z1 As Complex

    Z1 = Vara2Complex(Z1a)
    Result(0) = Z1.X * R
    Result(1) = Z1.Y * R

    AL_C_MulR = Result
End Function


Public Function AL_C_Sub(ByRef Z1a As Variant, ByRef Z2a As Variant) As Variant
    Dim Result(0 To 1) As Double
    Dim Z1 As Complex
    Dim Z2 As Complex

    Z1 = Vara2Complex(Z1a)
    Z2 = Vara2Complex(Z2a)
    Result(0) = Z1.X - Z2.X
    Result(1) = Z1.Y - Z2.Y

    AL_C_Sub = Result
End Function


Public Function AL_C_SubR(ByRef Z1a As Variant, ByVal R As Double) As Variant
    Dim Result(0 To 1) As Double
    Dim Z1 As Complex

    Z1 = Vara2Complex(Z1a)
    Result(0) = Z1.X - R
    Result(1) = Z1.Y

    AL_C_SubR = Result
End Function


Public Function AL_C_RSub(ByVal R As Double, ByRef Z1a As Variant) As Variant
    Dim Result(0 To 1) As Double
    Dim Z1 As Complex

    Z1 = Vara2Complex(Z1a)
    Result(0) = R - Z1.X
    Result(1) = -Z1.Y

    AL_C_RSub = Result
End Function


Public Function AL_C_Div(ByRef Z1a As Variant, ByRef Z2a As Variant) As Variant
    Dim Result(0 To 1) As Double
    Dim A As Double
    Dim B As Double
    Dim C As Double
    Dim D As Double
    Dim E As Double
    Dim F As Double
    Dim Z1 As Complex
    Dim Z2 As Complex

    Z1 = Vara2Complex(Z1a)
    Z2 = Vara2Complex(Z2a)

    A = Z1.X
    B = Z1.Y
    C = Z2.X
    D = Z2.Y
    If Abs(D) < Abs(C) Then
        E = D / C
        F = C + D * E
        Result(0) = (A + B * E) / F
        Result(1) = (B - A * E) / F
    Else
        E = C / D
        F = D + C * E
        Result(0) = (B + A * E) / F
        Result(1) = (-A + B * E) / F
    End If

    AL_C_Div = Result
End Function


Public Function AL_C_DivR(ByRef Z1a As Variant, ByVal R As Double) As Variant
    Dim Result(0 To 1) As Double
    Dim Z1 As Complex

    Z1 = Vara2Complex(Z1a)

    Result(0) = Z1.X / R
    Result(1) = Z1.Y / R

    AL_C_DivR = Result
End Function


Public Function AL_C_RDiv(ByVal R As Double, ByRef Z2a As Variant) As Variant
    Dim Result(0 To 1) As Double
    Dim A As Double
    Dim C As Double
    Dim D As Double
    Dim E As Double
    Dim F As Double
    Dim Z2 As Complex

    Z2 = Vara2Complex(Z2a)

    A = R
    C = Z2.X
    D = Z2.Y
    If Abs(D) < Abs(C) Then
        E = D / C
        F = C + D * E
        Result(0) = A / F
        Result(1) = -(A * E / F)
    Else
        E = C / D
        F = D + C * E
        Result(0) = A * E / F
        Result(1) = -(A / F)
    End If

    AL_C_RDiv = Result
End Function


Public Function AL_C_Equal(ByRef Z1a As Variant, ByRef Z2a As Variant) As Boolean
    Dim Result As Boolean
    Dim Z1 As Complex
    Dim Z2 As Complex

    Z1 = Vara2Complex(Z1a)
    Z2 = Vara2Complex(Z2a)

    Result = Z1.X = Z2.X And Z1.Y = Z2.Y

    AL_C_Equal = Result
End Function


Public Function AL_C_NotEqual(ByRef Z1a As Variant,          ByRef Z2a As Variant) As Boolean
    Dim Result As Boolean
    Dim Z1 As Complex
    Dim Z2 As Complex

    Z1 = Vara2Complex(Z1a)
    Z2 = Vara2Complex(Z2a)

    Result = Z1.X <> Z2.X Or Z1.Y <> Z2.Y

    AL_C_NotEqual = Result
End Function

Public Function AL_C_EqualR(ByRef Z1a As Variant, ByVal R As Double) As Boolean
    Dim Result As Boolean
    Dim Z1 As Complex

    Z1 = Vara2Complex(Z1a)

    Result = Z1.X = R And Z1.Y = 0

    AL_C_EqualR = Result
End Function


Public Function AL_C_NotEqualR(ByRef Z1a As Variant,          ByVal R As Double) As Boolean
    Dim Result As Boolean
    Dim Z1 As Complex

    Z1 = Vara2Complex(Z1a)

    Result = Z1.X <> R Or Z1.Y <> 0

    AL_C_NotEqualR = Result
End Function


Public Function AL_C_Power(CompVal As Variant, Power As Double) As Variant
Dim Z1 As Complex, Result(0 To 1) As Double

Z1 = Vara2Complex(CompVal)
Z1 = AL_C_Power_Int(Z1, Power)

Result(0) = Z1.X
Result(1) = Z1.Y
AL_C_Power = Result
End Function

Public Function AL_C_Power_Int(Z1 As Complex, Power As Double) As Complex
Dim Result As Complex

Z1 = AL_C_Ln_Int(Z1)
Z1 = C_MulR(Z1, Power)
Z1 = AL_C_Exp_Int(Z1)

AL_C_Power_Int = Z1
End Function

Public Function AL_C_Ln(CompVal As Variant) As Variant
Dim Z1 As Complex, Result(0 To 1) As Double

Z1 = Vara2Complex(CompVal)

Result(0) = Log((Z1.X ^ 2 + Z1.Y ^ 2) ^ 0.5)
Result(1) = Atn2(Z1.Y, Z1.X)

AL_C_Ln = Result
End Function

Private Function AL_C_Ln_Int(Z1 As Complex) As Complex
Dim Result As Complex

Result.X = Log((Z1.X ^ 2 + Z1.Y ^ 2) ^ 0.5)
Result.Y = Atn2(Z1.Y, Z1.X)

AL_C_Ln_Int = Result
End Function

Public Function AL_C_Exp(CompVal As Variant) As Variant
Dim Z1 As Complex, Result(0 To 1) As Double

Z1 = Vara2Complex(CompVal)

Result(0) = Exp(Z1.X) * Cos(Z1.Y)
Result(1) = Exp(Z1.X) * Sin(Z1.Y)

AL_C_Exp = Result
End Function

Public Function AL_C_Exp_Int(Z1 As Complex) As Complex
Dim Result As Complex

Result.X = Exp(Z1.X) * Cos(Z1.Y)
Result.Y = Exp(Z1.X) * Sin(Z1.Y)

AL_C_Exp_Int = Result
End Function

VBA File Name: m_EvalPoly, Stream Size: 20320

General
Stream Path:	VBA/m_EvalPoly
VBA File Name:	m_EvalPoly
Stream Size:	20320
Data ASCII:	. . . . . . . . . . . . . . . . . I . . C . . . . . . . . . . . & / . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . ( . . . . . 6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . + . * . . . . . .
Data Raw:	01 16 03 00 06 f0 00 00 00 ba 1f 00 00 d4 00 00 00 b0 01 00 00 ff ff ff ff 49 20 00 00 91 43 00 00 00 00 00 00 01 00 00 00 c5 bd 26 2f 00 00 ff ff 03 00 00 00 00 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 08 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "m_EvalPoly"
Option Explicit


Function EvalPoly1(XVal As Double, Coefficients As Variant, Optional NumDiff As Long = 0) As Variant
Dim EvalA() As Double, Coefficients2 As Variant, POrder As Long, i As Long, j As Long, k As Long
Dim NRows As Long, NCols As Long


    Coefficients = GetArray(Coefficients, NRows, NCols)
    If NCols > NRows Then
        Coefficients = Transpose1(Coefficients)
        POrder = NCols - 1
    Else
        POrder = NRows - 1
    End If

    Coefficients2 = Coefficients
    ' Numdiff = -1 for all available differentials
    If NumDiff = -1 Then NumDiff = POrder
    ReDim EvalA(1 To 1, 1 To NumDiff + 1)

    For i = 1 To NumDiff + 1
        For j = 1 To (POrder)
            k = POrder + 1 - j
            EvalA(1, i) = EvalA(1, i) + Coefficients2(j, 1) * XVal ^ k
        Next j
        EvalA(1, i) = EvalA(1, i) + Coefficients2(j, 1)
        If NumDiff <> 0 Then
            For j = 1 To POrder
                k = POrder - j + 1
                Coefficients2(j, 1) = Coefficients2(j, 1) * k
            Next j
        End If
        POrder = POrder - 1
    Next i

    If NumDiff = 0 Then
        EvalPoly1 = EvalA(1, 1)
    Else
        EvalPoly1 = EvalA
    End If

End Function

Function EvalPoly1A(XvalA As Variant, Coefficients As Variant, Optional NumDiff As Long = 0) As Variant
    Dim EvalA() As Double, Coefficients2 As Variant, POrder As Long, i As Long, j As Long, NumRows As Long
    Dim XVal As Double, k As Long, m As Long

    '  Array formula version

    If TypeName(Coefficients) = "Range" Then Coefficients = Coefficients.Value2
    If TypeName(XvalA) = "Range" Then XvalA = XvalA.Value2
    POrder = UBound(Coefficients, 2) - 1
    NumRows = UBound(XvalA)


    If NumDiff = -1 Then NumDiff = POrder
    ReDim EvalA(1 To NumRows, 1 To NumDiff + 1)

    For m = 1 To NumRows
        Coefficients2 = Coefficients
        POrder = UBound(Coefficients, 2) - 1
        XVal = XvalA(m, 1)
        For i = 1 To NumDiff + 1


            For j = 1 To (POrder)
                k = POrder + 1 - j
                EvalA(m, i) = EvalA(m, i) + Coefficients2(1, j) * XVal ^ k
            Next j
            EvalA(m, i) = EvalA(m, i) + Coefficients2(1, j)
            If NumDiff <> 0 Then
                For j = 1 To POrder
                    k = POrder - j + 1
                    Coefficients2(1, j) = Coefficients2(1, j) * k
                Next j
            End If
            POrder = POrder - 1
        Next i
    Next m

    EvalPoly1A = EvalA

End Function

Function EvalPoly1C(XVal As Variant, Coefficients As Variant) As Variant
    Dim EvalA As Variant, EvalA2(0 To 1) As Double, Coefficients2 As Variant, POrder As Long, i As Long, j As Long, k As Double

    ' Complex number version
    If TypeName(Coefficients) = "Range" Then Coefficients = Coefficients.Value2
    If TypeName(XVal) = "Range" Then XVal = XVal.Value2
    POrder = UBound(Coefficients, 2) - 1
    If POrder = 0 Then
        POrder = UBound(Coefficients) - 1
        ReDim Coefficients2(1 To 1, 1 To POrder + 1)
        For i = 1 To POrder + 1
            Coefficients2(1, i) = Coefficients(i, 1)
        Next i
        Coefficients = Coefficients2
    Else
        Coefficients2 = Coefficients
    End If

    ReDim EvalA(1 To 1, 1 To 2)

    If XVal(1, 1) = 0 And XVal(1, 2) = 0 Then
        EvalA2(0) = EvalA2(0) + Coefficients2(1, POrder + 1)
    Else
        For j = 1 To (POrder)
            k = POrder + 1 - j
            EvalA = AL_C_Power(XVal, k)
            EvalA2(0) = EvalA2(0) + EvalA(0) * Coefficients(1, j)
            EvalA2(1) = EvalA2(1) + EvalA(1) * Coefficients(1, j)
        Next j
        EvalA2(0) = EvalA2(0) + Coefficients2(1, j)
    End If

    EvalPoly1C = EvalA2

End Function

Function EvalPolyHC(XvalA As Variant, Coefficients As Variant) As Variant
Dim EvalA() As Double, DivA() As Double, Coefficients2 As Variant, POrder As Long, i As Long, j As Long
Dim NumVals As Long, Divm1(0 To 1) As Double, Resa() As Variant, XVal(0 To 1) As Double, XCols As Long
    ' Evaluate polynomial remainder for each root, using Horner's Method, Complex version

    If TypeName(Coefficients) = "Range" Then Coefficients = Coefficients.Value2
    XvalA = GetArray(XvalA)
    NumVals = UBound(XvalA)

    POrder = UBound(Coefficients, 2) - 1
    If POrder < 2 Then
        POrder = UBound(Coefficients) - 1
        ReDim Coefficients2(1 To 1, 1 To POrder + 1)
        For i = 1 To POrder + 1
            Coefficients2(1, i) = Coefficients(i, 1)
        Next i
        Coefficients = Coefficients2
    Else
        Coefficients2 = Coefficients
    End If

    If NumVals > 1 Then
        ReDim Resa(1 To NumVals, 1 To 2)
    Else
        ReDim Resa(1 To 2, 1 To 2)
        Resa(2, 1) = ""
        Resa(2, 1) = ""
    End If
    ReDim DivA(1 To NumVals * 2, 1 To (POrder * 2) + 1)

    XCols = UBound(XvalA, 2)
    For i = 1 To NumVals
        XVal(0) = XvalA(i, 1)
        If XCols > 1 Then XVal(1) = XvalA(i, 2) Else XVal(1) = 0
        DivA(2, 1) = Coefficients(1, 1)

        DivA(1, 2) = XVal(0) * DivA(2, 1)
        DivA(1, 3) = XVal(1) * DivA(2, 1)
        DivA(2, 2) = DivA(1, 2) + Coefficients(1, 2)
        DivA(2, 3) = DivA(1, 3)

        For j = 4 To (POrder * 2) Step 2
            Divm1(0) = DivA(2, j - 2)
            Divm1(1) = DivA(2, j - 1)
            EvalA = AL_C_Mul(XVal, Divm1)
            DivA(1, j) = EvalA(0)
            DivA(1, j + 1) = EvalA(1)

            DivA(2, j) = Coefficients(1, j / 2 + 1) + DivA(1, j)
            DivA(2, j + 1) = DivA(1, j + 1)
        Next j
        j = j - 2

        Resa(i, 1) = DivA(2, j)
        Resa(i, 2) = DivA(2, j + 1)
    Next i

    EvalPolyHC = Resa

End Function


Function EvalErrorHC(XvalA As Variant, Coefficients As Variant) As Variant
    Dim EvalA() As Double, DivA() As Double, Coefficients2 As Variant, POrder As Long, i As Long, j As Long, k As Long
    Dim NumVals As Long, Divm1(0 To 1) As Double, Resa() As Double, XVal(0 To 1) As Double, RFact As Variant, RFactm(0 To 1) As Double, Resc As Variant, Resv(0 To 1) As Double
    ' Evaluate polynomial remainder for each root, using Horner's Method, Complex version

    If TypeName(Coefficients) = "Range" Then Coefficients = Coefficients.Value2
    XvalA = GetArray(XvalA)
    NumVals = UBound(XvalA)

    POrder = UBound(Coefficients, 2) - 1
    If POrder < 2 Then
        POrder = UBound(Coefficients) - 1
        ReDim Coefficients2(1 To 1, 1 To POrder + 1)
        For i = 1 To POrder + 1
            Coefficients2(1, i) = Coefficients(i, 1)
        Next i
        Coefficients = Coefficients2
    Else
        Coefficients2 = Coefficients
    End If

    ReDim Resa(1 To NumVals, 1 To 2)
    ReDim DivA(1 To NumVals * 2, 1 To (POrder * 2) + 1)
    k = 0
     RFactm(0) = 1
     RFactm(1) = 0
     RFact = AL_C_Mul(RFactm, RFactm)
    For i = 1 To POrder
        XVal(0) = XvalA(i, 1)
        XVal(1) = XvalA(i, 2)
        DivA(k + 2, 1) = Coefficients(1, 1)
        If k = 0 Then
        DivA(1, 2) = XVal(0) * DivA(2, 1)
        DivA(1, 3) = XVal(1) * DivA(2, 1)
        DivA(2, 2) = DivA(1, 2) + Coefficients(1, 2)
        DivA(2, 3) = DivA(1, 3)
        Else
        DivA(k + 1, 2) = XVal(0) * DivA(k + 2, 1)
        DivA(k + 1, 3) = XVal(1) * DivA(k + 2, 1)
        DivA(k + 2, 2) = DivA(k + 1, 2) + DivA(k, 2)
        DivA(k + 2, 3) = DivA(k + 1, 3) + DivA(k, 3)
        End If
        For j = 4 To (POrder * 2) Step 2
            Divm1(0) = DivA(k + 2, j - 2)
            Divm1(1) = DivA(k + 2, j - 1)
            EvalA = AL_C_Mul(XVal, Divm1)
            DivA(k + 1, j) = EvalA(0)
            DivA(k + 1, j + 1) = EvalA(1)
            If k = 0 Then
            DivA(k + 2, j) = Coefficients(1, j / 2 + 1) + DivA(k + 1, j)
           DivA(k + 2, j + 1) = DivA(k + 1, j + 1)
            Else
            DivA(k + 2, j) = DivA(k, j) + DivA(k + 1, j)
            DivA(k + 2, j + 1) = DivA(k, j + 1) + DivA(k + 1, j + 1)
            
            End If
        Next j
        j = j - 2
        
               RFactm(0) = XVal(0) + Coefficients(1, i)
        RFactm(1) = XVal(1)
        RFact = AL_C_Mul(RFact, RFactm)
        If i = 1 Then
        Resa(1, 1) = DivA(k + 2, j)
        Resa(1, 2) = DivA(k + 2, j + 1)
        
        Else
        Resv(0) = DivA(k + 2, j)
        Resv(1) = DivA(k + 2, j + 1)
        Resc = AL_C_Mul(RFact, Resv)
        Resa(i, 1) = Resc(0)
        Resa(i, 2) = Resc(1)
        End If
        k = k + 2
        POrder = POrder - 1
    Next i

    EvalErrorHC = Resa


End Function

Streams

Stream Path: PROJECT, File Type: ASCII text, with CRLF line terminators, Stream Size: 953

General
Stream Path:	PROJECT
CLSID:
File Type:	ASCII text, with CRLF line terminators
Stream Size:	953
Entropy:	5.246569929507914
Base64 Encoded:	True
Data ASCII:	I D = " { 4 6 D E 1 3 9 1 - 9 2 0 A - 4 5 7 8 - A 3 F 1 - 2 E 3 E 9 B 3 F 8 3 C 1 } " . . D o c u m e n t = T h i s W o r k b o o k / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = S h e e t 1 / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = S h e e t 2 / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = S h e e t 3 / & H 0 0 0 0 0 0 0 0 . . M o d u l e = m Q u a r t i c . . M o d u l e = m _ E v a l P o l y . . M o d u l e = m _ C o m p l e x . . M o d u l e = m A L _ a p . . D o c u m e n t = S h e e t 4 / & H 0 0 0 0 0 0
Data Raw:	49 44 3d 22 7b 34 36 44 45 31 33 39 31 2d 39 32 30 41 2d 34 35 37 38 2d 41 33 46 31 2d 32 45 33 45 39 42 33 46 38 33 43 31 7d 22 0d 0a 44 6f 63 75 6d 65 6e 74 3d 54 68 69 73 57 6f 72 6b 62 6f 6f 6b 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 53 68 65 65 74 31 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 53 68 65 65 74 32 2f 26 48 30 30 30

Stream Path: PROJECTwm, File Type: data, Stream Size: 317

General
Stream Path:	PROJECTwm
CLSID:
File Type:	data
Stream Size:	317
Entropy:	3.6630674107250174
Base64 Encoded:	False
Data ASCII:	T h i s W o r k b o o k . T . h . i . s . W . o . r . k . b . o . o . k . . . S h e e t 1 . S . h . e . e . t . 1 . . . S h e e t 2 . S . h . e . e . t . 2 . . . S h e e t 3 . S . h . e . e . t . 3 . . . m Q u a r t i c . m . Q . u . a . r . t . i . c . . . m _ E v a l P o l y . m . _ . E . v . a . l . P . o . l . y . . . m _ C o m p l e x . m . _ . C . o . m . p . l . e . x . . . m A L _ a p . m . A . L . _ . a . p . . . S h e e t 4 . S . h . e . e . t . 4 . . . m R P o l y . m . R . P . o . l . y . . . S
Data Raw:	54 68 69 73 57 6f 72 6b 62 6f 6f 6b 00 54 00 68 00 69 00 73 00 57 00 6f 00 72 00 6b 00 62 00 6f 00 6f 00 6b 00 00 00 53 68 65 65 74 31 00 53 00 68 00 65 00 65 00 74 00 31 00 00 00 53 68 65 65 74 32 00 53 00 68 00 65 00 65 00 74 00 32 00 00 00 53 68 65 65 74 33 00 53 00 68 00 65 00 65 00 74 00 33 00 00 00 6d 51 75 61 72 74 69 63 00 6d 00 51 00 75 00 61 00 72 00 74 00 69 00 63 00 00

Stream Path: VBA/_VBA_PROJECT, File Type: data, Stream Size: 9957

General
Stream Path:	VBA/_VBA_PROJECT
CLSID:
File Type:	data
Stream Size:	9957
Entropy:	5.669326770541422
Base64 Encoded:	True
Data ASCII:	a . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . * . \\ . G . { . 0 . 0 . 0 . 2 . 0 . 4 . E . F . - . 0 . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . - . C . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 4 . 6 . } . # . 4 . . . 2 . # . 9 . # . C . : . \\ . P . r . o . g . r . a . m . . F . i . l . e . s . \\ . C . o . m . m . o . n . . F . i . l . e . s . \\ . M . i . c . r . o . s . o . f . t . . S . h . a . r . e . d . \\ . V . B . A . \\ . V . B . A . 7 . . . 1 . \\ . V . B . E . 7 . . . D .
Data Raw:	cc 61 b5 00 00 03 00 ff 09 0c 00 00 09 04 00 00 e4 04 03 00 00 00 00 00 00 00 00 00 01 00 04 00 02 00 20 01 2a 00 5c 00 47 00 7b 00 30 00 30 00 30 00 32 00 30 00 34 00 45 00 46 00 2d 00 30 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 2d 00 43 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 34 00 36 00 7d 00 23 00 34 00 2e 00 32 00 23 00

Stream Path: VBA/__SRP_0, File Type: data, Stream Size: 8684

General
Stream Path:	VBA/__SRP_0
CLSID:
File Type:	data
Stream Size:	8684
Entropy:	3.196028045588393
Base64 Encoded:	False
Data ASCII:	K * . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . r U . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ . . . .
Data Raw:	93 4b 2a b5 03 00 20 00 00 00 ff ff 00 00 00 00 01 00 02 00 ff ff 00 00 00 00 01 00 02 00 0b 00 00 00 00 00 01 00 00 00 0b 00 00 00 00 00 01 00 00 00 04 00 00 00 00 00 01 00 02 00 04 00 00 00 00 00 01 00 00 00 05 00 00 00 00 00 01 00 02 00 05 00 00 00 00 00 01 00 00 00 06 00 00 00 00 00 01 00 02 00 06 00 00 00 00 00 01 00 00 00 07 00 00 00 00 00 01 00 02 00 07 00 00 00 00 00 01 00

Stream Path: VBA/__SRP_1, File Type: data, Stream Size: 1751

General
Stream Path:	VBA/__SRP_1
CLSID:
File Type:	data
Stream Size:	1751
Entropy:	2.6265516609841315
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ . . . . . . . ~ v . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C o e f f A . . . . . . . . . . . . . . . . O u t 1 . . . . . . . . . . . . . . . . o u t 2 . . . . . . . . .
Data Raw:	72 55 c0 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 02 00 00 00 00 00 00 7e 02 00 00 00 00 00 00 7e 76 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 12 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 11 00 00 00 00 00 00 00 00 00 0f 00 11 00 00 00 00 00

Stream Path: VBA/__SRP_10, File Type: data, Stream Size: 464

General
Stream Path:	VBA/__SRP_10
CLSID:
File Type:	data
Stream Size:	464
Entropy:	1.608794431458753
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 . . . . . . . . . . . . . . . . . . . . . . . . . ` . . . A 8 . . . . . . . . . . 1 . . . . . . . . . . . q 8 . . . . . . . . . . . . . . . D . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 11 00 b0 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 00 00 01 00 b1 1b 00 00 00 00 00 00 00 00 00 00 e1 1b 00 00 00 00 00 00 00 00 00 00 11 38

Stream Path: VBA/__SRP_11, File Type: data, Stream Size: 106

General
Stream Path:	VBA/__SRP_11
CLSID:
File Type:	data
Stream Size:	106
Entropy:	1.3591119461716878
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . b . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 10 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 78 00 00 00 08 00 00 00 00 00 00 00 62 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00

Stream Path: VBA/__SRP_2, File Type: data, Stream Size: 454

General
Stream Path:	VBA/__SRP_2
CLSID:
File Type:	data
Stream Size:	454
Entropy:	2.1854912334820864
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P . . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . O . H . P . . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . O . H . @ . A . . . . . . . . . . . . . . ` . . . . . . a . . . . . . . . . . . . . . . . . K . @ . . . . . . . . . . . . . . . ` . . . . . . a . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 10 00 00 00 08 00 50 00 f1 00 00 00 00 00 00 00 00 00 03 00 00 00 00 60 08 00 fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00

Stream Path: VBA/__SRP_3, File Type: data, Stream Size: 6247

General
Stream Path:	VBA/__SRP_3
CLSID:
File Type:	data
Stream Size:	6247
Entropy:	4.155722998474195
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . ! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ! . . . . . . . . . . . q . . . . . . . . . . . A . . . . . . . . . . . ! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ! . . . . . . . . . . . . . . . . . . . . . . - . . . . .
Data Raw:	72 55 c0 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 04 00 00 00 00 00 00 7e 78 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 02 00 10 00 00 00 00 00 00 00 00 00 03 00 05 00 05 00 1f 00 00 00 71 1d 00 00 00 00 00 00 00 00 04 00 21 1f 00 00 00 00

Stream Path: VBA/__SRP_4, File Type: data, Stream Size: 28180

General
Stream Path:	VBA/__SRP_4
CLSID:
File Type:	data
Stream Size:	28180
Entropy:	4.282525720843899
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ! . . . A ! . . . . . . . . . . " . . . . . . . . . . ! % . . . . . . . . . . . ' . . . . . . . . . . & . . . . . . . . . . & . . . . . . . . . . q . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . . ! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	72 55 80 02 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 04 00 00 00 00 00 00 7e 78 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 05 00 10 00 00 00 00 00 00 00 00 00 04 00 12 00 12 00 21 00 00 00 41 21 00 00 00 00 00 00 00 00 00 00 c1 22 00 00 00 00

Stream Path: VBA/__SRP_5, File Type: data, Stream Size: 1724

General
Stream Path:	VBA/__SRP_5
CLSID:
File Type:	data
Stream Size:	1724
Entropy:	2.4349247674857204
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . O . H . H . C . X . . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . O . H . H . X . Q . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 04 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 10 00 00 00 08 00 60 00 f1 00 00 00 00 00 00 00 00 00 04 00 00 00 00 60 10 00 fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00

Stream Path: VBA/__SRP_6, File Type: data, Stream Size: 11168

General
Stream Path:	VBA/__SRP_6
CLSID:
File Type:	data
Stream Size:	11168
Entropy:	4.0895733252531725
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ! % . . . . . . . . . . q . . . . . . . . . . . . . . . . . . . . . . & . . . . . . . . . . & . . . . . . . . . . 1 ) . . . . . . . . . . . . . . . . . . . . . ! . . . . . . . . . . . . . . . . . . ` . . . . . . . g . . . . . g . @ . . . . . h . @ . . . @ . . . . . . P . . . . . . P . . . .
Data Raw:	72 55 c0 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 04 00 00 00 00 00 00 7e 78 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 07 00 10 00 00 00 00 00 00 00 00 00 06 00 05 00 05 00 08 00 00 00 21 25 00 00 00 00 00 00 00 00 00 00 71 1d 00 00 00 00

Stream Path: VBA/__SRP_7, File Type: data, Stream Size: 536

General
Stream Path:	VBA/__SRP_7
CLSID:
File Type:	data
Stream Size:	536
Entropy:	2.2562432245818465
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . X . . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . K . O . H . X . . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . O . O . H . P . Q . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 06 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 10 00 00 00 08 00 58 00 f1 00 00 00 00 00 00 00 00 00 06 00 00 00 00 60 0c 00 fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00

Stream Path: VBA/__SRP_8, File Type: data, Stream Size: 5179

General
Stream Path:	VBA/__SRP_8
CLSID:
File Type:	data
Stream Size:	5179
Entropy:	2.736934482155494
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ! % . . . . . . . . . . & . . . . . . . . . . & . . . . . . . . . . * . . . . . . . . . . . . . . . . . . . . . A 5 . . . . . . . . . . 2 . . . . . . . . . . A + . . . . . . . . . . " . . . . . . . . . . . ) . . . . . . . . . . q . . . . . . . . . . . . 1 . . . . . . . .
Data Raw:	72 55 80 03 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 04 00 00 00 00 00 00 7e 78 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 09 00 10 00 00 00 00 00 00 00 00 00 08 00 1a 00 1a 00 0d 00 00 00 f1 00 00 00 00 00 00 00 00 00 08 00 21 25 00 00 00 00

Stream Path: VBA/__SRP_9, File Type: data, Stream Size: 2050

General
Stream Path:	VBA/__SRP_9
CLSID:
File Type:	data
Stream Size:	2050
Entropy:	2.4344051905202297
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P . . . . . . . . . . . . . . . ` . . . . . . 1 . . . . . . . . . . . . . . . . . . . @ . . . . . . . . . . . . . . . ` . . . . . . a . . . . . . . . . . . . . . . . . . . @ . 1 . . . . . . . . . . . . . . ` . . . . . . 1 . . . . . . . . . . . . . . . . . O . @ . . . . . . . . . . . . . . . ` . . . . . . 1 . . . . . . . . . . . . . . . . . O . @ . 1 . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 08 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 10 00 00 00 08 00 50 00 f1 00 00 00 00 00 00 00 00 00 08 00 00 00 00 60 04 00 fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00

Stream Path: VBA/__SRP_a, File Type: data, Stream Size: 6342

General
Stream Path:	VBA/__SRP_a
CLSID:
File Type:	data
Stream Size:	6342
Entropy:	2.211660092982529
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ) . ) . . . . . . ) . . . . . . . . . . ! . . . . . . . . . . . . / . . . . . . . . . . ! . . . . . . . . . . . . - . . . . . . . . . . H . . . . . . . . . . . . . . . i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	72 55 00 05 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 04 00 00 00 00 00 00 7e 78 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 0b 00 10 00 00 00 00 00 00 00 00 00 0a 00 29 00 29 00 05 00 00 00 11 29 00 00 00 00 00 00 00 00 00 00 21 19 00 00 00 00

Stream Path: VBA/__SRP_b, File Type: data, Stream Size: 3456

General
Stream Path:	VBA/__SRP_b
CLSID:
File Type:	data
Stream Size:	3456
Entropy:	2.4572620547391844
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P . . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . . . . 1 . . . . . . . . . . . . . . . . . H . H . X . . . . . . . . . . . . . . . ` . . . . . . Q . . . . . . . . . . . 1 . . . . . . . . . . . q . . . . . . . . . . . . . . . . . K . H . H . X . A . . . . . . . . . . . . . . ` . . . . . . Q . . . . . . . . . . . 1 . . . . . . . . . . . q . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 0a 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 10 00 00 00 08 00 50 00 f1 00 00 00 00 00 00 00 00 00 0a 00 00 00 00 60 08 00 fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00

Stream Path: VBA/__SRP_c, File Type: data, Stream Size: 20917

General
Stream Path:	VBA/__SRP_c
CLSID:
File Type:	data
Stream Size:	20917
Entropy:	4.051230781651129
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . . . . . . . . . . . . A . . . . . . . . . . . * . . . . . . . . . . Q . . . . . . . . . . . A + . . . . . . . . . . . ) . . . . . . . . . . . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . ! . . . . . . . . . . . . . . . . . . . . . . ! . . . . . . .
Data Raw:	72 55 80 01 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 04 00 00 00 00 00 00 7e 78 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 0d 00 10 00 00 00 00 00 00 00 00 00 0c 00 0c 00 0c 00 0f 00 00 00 71 1d 00 00 00 00 00 00 00 00 04 00 a1 02 00 00 00 00

Stream Path: VBA/__SRP_d, File Type: data, Stream Size: 1290

General
Stream Path:	VBA/__SRP_d
CLSID:
File Type:	data
Stream Size:	1290
Entropy:	2.290115712182257
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . X . . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . O . C . H . x . . . . . . . . . . . . . . . ` . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 . . . . . . . . . . . Q . . . . . . . . . . . q . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . H . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 0c 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 08 01 00 00 08 00 58 00 f1 00 00 00 00 00 00 00 00 00 0c 00 00 00 00 60 0c 00 fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00

Stream Path: VBA/__SRP_e, File Type: data, Stream Size: 680

General
Stream Path:	VBA/__SRP_e
CLSID:
File Type:	data
Stream Size:	680
Entropy:	1.3345359338067821
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P . . . . . . . . . . . . . . . . . . . . . . . . . . . q 5 . . . . . . . . . . 5 . . . . . . . . . . 5 . . . . . . . . . . A 5 . . . . . . . . . . . . 7 . ` . . . . 6 . . . . . . . . . . . . . . . . . . . . . 1 6 . . . . . . . . . . . . . . . . D . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 0f 00 50 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 00 00 01 00 71 35 00 00 00 00 00 00 00 00 00 00 a1 35 00 00 00 00 00 00 00 00 00 00 d1 35

Stream Path: VBA/__SRP_f, File Type: data, Stream Size: 106

General
Stream Path:	VBA/__SRP_f
CLSID:
File Type:	data
Stream Size:	106
Entropy:	1.3591119461716878
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . b . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 0e 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 78 00 00 00 08 00 00 00 00 00 00 00 62 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00

Stream Path: VBA/dir, File Type: data, Stream Size: 883

General
Stream Path:	VBA/dir
CLSID:
File Type:	data
Stream Size:	883
Entropy:	6.749138053396594
Base64 Encoded:	True
Data ASCII:	. o . . . . . . . . 0 J . . . H . . . . H . . . . . . . . . . . . V B A P r o j e c t . . . . . @ . . . . . = . . . . r . . . . . . . . . ~ K P e . . . . J < . . . . . . 9 s t d o l e . > . . s . t . d . . o . l . e . . . . h . % ^ . . * \\ G { . 0 0 0 2 0 4 3 0 v - . . . . C . . . . . . 0 . 0 4 6 } # 2 . 0 . # 0 # C : \\ W i . n d o w s \\ S y s t e m 3 2 \\ . e . 2 . t l b # O L . E A u t o m a p t i o n . 0 . . E O . f f i c E O . f Q . i . c E . . . E 2 D F 8 D 0 . 4 C - 5 B F A - . 1 0 1 B - B D E R 5
Data Raw:	01 6f b3 80 01 00 04 00 00 00 03 00 30 aa 4a 06 90 02 02 48 09 00 c0 14 06 48 08 03 00 02 00 8c e4 04 04 00 02 0a 00 1c 56 42 41 50 72 6f 20 6a 65 63 74 05 00 1a 00 00 aa 40 02 0a 06 02 0a 3d 02 0a 07 02 72 15 01 14 08 06 12 09 02 12 7e db 4b 50 65 0c 00 0c 02 4a 3c 02 0a 16 02 00 01 39 73 74 64 6f 6c 65 02 3e 02 19 73 00 74 00 64 00 00 6f 00 6c 00 65 00 0d 00 0a 68 00 25 5e 00 03

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 12, 2023 21:38:00.283250093 CET	192.168.2.22	8.8.8.8	0x9440	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:00.284022093 CET	192.168.2.22	8.8.8.8	0x4dbd	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:00.304946899 CET	192.168.2.22	8.8.8.8	0xd1b7	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:00.341283083 CET	192.168.2.22	8.8.8.8	0x326	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:01.793512106 CET	192.168.2.22	8.8.8.8	0xc30e	Standard query (0)	mathblog.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:01.800242901 CET	192.168.2.22	8.8.8.8	0x519e	Standard query (0)	mathblog.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:02.773258924 CET	192.168.2.22	8.8.8.8	0xd0c0	Standard query (0)	cdn.mathblog.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:02.773586035 CET	192.168.2.22	8.8.8.8	0x379d	Standard query (0)	cdn.mathblog.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:02.774648905 CET	192.168.2.22	8.8.8.8	0xf0a8	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:02.774912119 CET	192.168.2.22	8.8.8.8	0xcb4c	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:03.078059912 CET	192.168.2.22	8.8.8.8	0xdd73	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:03.078303099 CET	192.168.2.22	8.8.8.8	0x8264	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:03.542768955 CET	192.168.2.22	8.8.8.8	0xbdfd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:03.542979002 CET	192.168.2.22	8.8.8.8	0x18d1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:03.780297041 CET	192.168.2.22	8.8.8.8	0x6abd	Standard query (0)	mathblog.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:03.780683994 CET	192.168.2.22	8.8.8.8	0x8a2a	Standard query (0)	mathblog.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:04.914885044 CET	192.168.2.22	8.8.8.8	0x35ca	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:04.915155888 CET	192.168.2.22	8.8.8.8	0x5717	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:05.076401949 CET	192.168.2.22	8.8.8.8	0x6fa3	Standard query (0)	cdn.mathblog.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:05.076761961 CET	192.168.2.22	8.8.8.8	0xe533	Standard query (0)	cdn.mathblog.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:05.533222914 CET	192.168.2.22	8.8.8.8	0x69c5	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:05.533416033 CET	192.168.2.22	8.8.8.8	0x8157	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:06.123399973 CET	192.168.2.22	8.8.8.8	0x1bc1	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:06.123689890 CET	192.168.2.22	8.8.8.8	0x6339	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:06.251545906 CET	192.168.2.22	8.8.8.8	0xef64	Standard query (0)	keywords.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:06.252302885 CET	192.168.2.22	8.8.8.8	0xfc15	Standard query (0)	keywords.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:07.415996075 CET	192.168.2.22	8.8.8.8	0xaf57	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:07.416197062 CET	192.168.2.22	8.8.8.8	0x4865	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:13.724431038 CET	192.168.2.22	8.8.8.8	0x74c5	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:13.724587917 CET	192.168.2.22	8.8.8.8	0x611e	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Dec 12, 2023 21:38:14.872612953 CET	192.168.2.22	8.8.8.8	0x34c7	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:14.904639006 CET	192.168.2.22	8.8.8.8	0x91ad	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:14.905286074 CET	192.168.2.22	8.8.8.8	0x938e	Standard query (0)	api.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:14.905642986 CET	192.168.2.22	8.8.8.8	0x142b	Standard query (0)	api.rlcdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:14.906763077 CET	192.168.2.22	8.8.8.8	0x5440	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:14.906944036 CET	192.168.2.22	8.8.8.8	0x8554	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 12, 2023 21:38:14.908149004 CET	192.168.2.22	8.8.8.8	0xad35	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:14.908685923 CET	192.168.2.22	8.8.8.8	0xe7a9	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:14.925201893 CET	192.168.2.22	8.8.8.8	0x1020	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.045053959 CET	192.168.2.22	8.8.8.8	0x62f3	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Dec 12, 2023 21:38:15.315798998 CET	192.168.2.22	8.8.8.8	0x8dc2	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.315944910 CET	192.168.2.22	8.8.8.8	0x47ef	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:15.433159113 CET	192.168.2.22	8.8.8.8	0xb524	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.436604977 CET	192.168.2.22	8.8.8.8	0x6635	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.031040907 CET	192.168.2.22	8.8.8.8	0x38b7	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.031677961 CET	192.168.2.22	8.8.8.8	0xcc4b	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.340914011 CET	192.168.2.22	8.8.8.8	0xd066	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.341254950 CET	192.168.2.22	8.8.8.8	0x2cff	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.367863894 CET	192.168.2.22	8.8.8.8	0x21af	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.394752979 CET	192.168.2.22	8.8.8.8	0x503d	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.406111956 CET	192.168.2.22	8.8.8.8	0x3fc9	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.415029049 CET	192.168.2.22	8.8.8.8	0x3ac6	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.421278954 CET	192.168.2.22	8.8.8.8	0xbcd1	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.421508074 CET	192.168.2.22	8.8.8.8	0x5a7	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.421801090 CET	192.168.2.22	8.8.8.8	0xb072	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.421961069 CET	192.168.2.22	8.8.8.8	0xfcd8	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.423583031 CET	192.168.2.22	8.8.8.8	0x8cf9	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.426171064 CET	192.168.2.22	8.8.8.8	0xc0d5	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.426662922 CET	192.168.2.22	8.8.8.8	0xbda8	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.426960945 CET	192.168.2.22	8.8.8.8	0x2b05	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.427365065 CET	192.168.2.22	8.8.8.8	0x4c24	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.427472115 CET	192.168.2.22	8.8.8.8	0xbccf	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.427797079 CET	192.168.2.22	8.8.8.8	0x798f	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.427994013 CET	192.168.2.22	8.8.8.8	0x80b4	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.428388119 CET	192.168.2.22	8.8.8.8	0x6cff	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.428550959 CET	192.168.2.22	8.8.8.8	0xa23a	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.479415894 CET	192.168.2.22	8.8.8.8	0xa90f	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.479777098 CET	192.168.2.22	8.8.8.8	0x77ea	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.480879068 CET	192.168.2.22	8.8.8.8	0xa684	Standard query (0)	sync.colossusssp.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.481436014 CET	192.168.2.22	8.8.8.8	0x95a6	Standard query (0)	sync.colossusssp.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.490977049 CET	192.168.2.22	8.8.8.8	0x8b81	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.492868900 CET	192.168.2.22	8.8.8.8	0x8dd	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.635432959 CET	192.168.2.22	8.8.8.8	0xd395	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.638199091 CET	192.168.2.22	8.8.8.8	0x487c	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.704390049 CET	192.168.2.22	8.8.8.8	0x69c4	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.704761982 CET	192.168.2.22	8.8.8.8	0x1e9e	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:17.770585060 CET	192.168.2.22	8.8.8.8	0xa758	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.772284985 CET	192.168.2.22	8.8.8.8	0xd65	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.243465900 CET	192.168.2.22	8.8.8.8	0x82b7	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.243642092 CET	192.168.2.22	8.8.8.8	0x64d3	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.267368078 CET	192.168.2.22	8.8.8.8	0xb3fc	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.267656088 CET	192.168.2.22	8.8.8.8	0xc32e	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.344732046 CET	192.168.2.22	8.8.8.8	0x7e07	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.346849918 CET	192.168.2.22	8.8.8.8	0xd2bf	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.567666054 CET	192.168.2.22	8.8.8.8	0xfc2f	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.568036079 CET	192.168.2.22	8.8.8.8	0xd8f1	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.685165882 CET	192.168.2.22	8.8.8.8	0x3aad	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.685342073 CET	192.168.2.22	8.8.8.8	0x326c	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.697844028 CET	192.168.2.22	8.8.8.8	0x2dd2	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.700743914 CET	192.168.2.22	8.8.8.8	0xd9b0	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.891892910 CET	192.168.2.22	8.8.8.8	0xcd46	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.892060041 CET	192.168.2.22	8.8.8.8	0x79b	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.892298937 CET	192.168.2.22	8.8.8.8	0x7b1c	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.892453909 CET	192.168.2.22	8.8.8.8	0xdf3b	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.900711060 CET	192.168.2.22	8.8.8.8	0x30ac	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.900885105 CET	192.168.2.22	8.8.8.8	0x3912	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.904778004 CET	192.168.2.22	8.8.8.8	0xa0c	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.908545017 CET	192.168.2.22	8.8.8.8	0xf56d	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.931473970 CET	192.168.2.22	8.8.8.8	0xe1c9	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.931663036 CET	192.168.2.22	8.8.8.8	0x6feb	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:18.950661898 CET	192.168.2.22	8.8.8.8	0x64f3	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.955087900 CET	192.168.2.22	8.8.8.8	0xb892	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.134613991 CET	192.168.2.22	8.8.8.8	0x88b1	Standard query (0)	hde.tynt.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.134916067 CET	192.168.2.22	8.8.8.8	0xb4a4	Standard query (0)	hde.tynt.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.275497913 CET	192.168.2.22	8.8.8.8	0x498c	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.276093006 CET	192.168.2.22	8.8.8.8	0x5d64	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.276351929 CET	192.168.2.22	8.8.8.8	0xe6dd	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.277015924 CET	192.168.2.22	8.8.8.8	0x403d	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.277846098 CET	192.168.2.22	8.8.8.8	0x9e3a	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.278340101 CET	192.168.2.22	8.8.8.8	0x1ff5	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.287760019 CET	192.168.2.22	8.8.8.8	0x7e5f	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.287993908 CET	192.168.2.22	8.8.8.8	0x4329	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.347930908 CET	192.168.2.22	8.8.8.8	0x8e97	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.349873066 CET	192.168.2.22	8.8.8.8	0xb99f	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.351488113 CET	192.168.2.22	8.8.8.8	0xffd7	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.352004051 CET	192.168.2.22	8.8.8.8	0x5d7b	Standard query (0)	tg.socdm.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.451986074 CET	192.168.2.22	8.8.8.8	0x8d0e	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.453049898 CET	192.168.2.22	8.8.8.8	0x56be	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.763952971 CET	192.168.2.22	8.8.8.8	0xc4c4	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.764153957 CET	192.168.2.22	8.8.8.8	0x3ef6	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.823419094 CET	192.168.2.22	8.8.8.8	0x6f8	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.823589087 CET	192.168.2.22	8.8.8.8	0x90fa	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.826982021 CET	192.168.2.22	8.8.8.8	0xb0fe	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.827434063 CET	192.168.2.22	8.8.8.8	0xce7a	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.832518101 CET	192.168.2.22	8.8.8.8	0xb5b8	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.833020926 CET	192.168.2.22	8.8.8.8	0x841f	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.833317041 CET	192.168.2.22	8.8.8.8	0x7611	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.833477020 CET	192.168.2.22	8.8.8.8	0x7925	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.834283113 CET	192.168.2.22	8.8.8.8	0x89a0	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.834431887 CET	192.168.2.22	8.8.8.8	0xade6	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.838975906 CET	192.168.2.22	8.8.8.8	0xe511	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.839159966 CET	192.168.2.22	8.8.8.8	0xa353	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.839417934 CET	192.168.2.22	8.8.8.8	0xd620	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.839637041 CET	192.168.2.22	8.8.8.8	0x7ea2	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.841866970 CET	192.168.2.22	8.8.8.8	0x2db0	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.842073917 CET	192.168.2.22	8.8.8.8	0xcbf1	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.842339993 CET	192.168.2.22	8.8.8.8	0x227d	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.842523098 CET	192.168.2.22	8.8.8.8	0x909d	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.877593994 CET	192.168.2.22	8.8.8.8	0x4462	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.877938986 CET	192.168.2.22	8.8.8.8	0xe749	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.943234921 CET	192.168.2.22	8.8.8.8	0x461f	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.943444967 CET	192.168.2.22	8.8.8.8	0x6a17	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.943775892 CET	192.168.2.22	8.8.8.8	0x1170	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.943972111 CET	192.168.2.22	8.8.8.8	0x6ed6	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.952254057 CET	192.168.2.22	8.8.8.8	0x3b2c	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971472025 CET	192.168.2.22	8.8.8.8	0xd1d4	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.972778082 CET	192.168.2.22	8.8.8.8	0xcb25	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.973741055 CET	192.168.2.22	8.8.8.8	0x2128	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.975246906 CET	192.168.2.22	8.8.8.8	0xbef9	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.976254940 CET	192.168.2.22	8.8.8.8	0xaf97	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:19.979352951 CET	192.168.2.22	8.8.8.8	0xcd2c	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.979939938 CET	192.168.2.22	8.8.8.8	0xa118	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:20.169159889 CET	192.168.2.22	8.8.8.8	0x6414	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.169410944 CET	192.168.2.22	8.8.8.8	0xf6ca	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:20.203138113 CET	192.168.2.22	8.8.8.8	0x835a	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.203488111 CET	192.168.2.22	8.8.8.8	0xc6f2	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:20.204350948 CET	192.168.2.22	8.8.8.8	0x4f28	Standard query (0)	sync.adotmob.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.204557896 CET	192.168.2.22	8.8.8.8	0xc386	Standard query (0)	sync.adotmob.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:20.501962900 CET	192.168.2.22	8.8.8.8	0x2837	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.502207041 CET	192.168.2.22	8.8.8.8	0x51cc	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:20.524023056 CET	192.168.2.22	8.8.8.8	0xd54c	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.541568995 CET	192.168.2.22	8.8.8.8	0x53f5	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:20.547171116 CET	192.168.2.22	8.8.8.8	0xaa26	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.547482967 CET	192.168.2.22	8.8.8.8	0xbade	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:20.836837053 CET	192.168.2.22	8.8.8.8	0xfb84	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.837019920 CET	192.168.2.22	8.8.8.8	0xf15f	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:20.937931061 CET	192.168.2.22	8.8.8.8	0xea74	Standard query (0)	33across-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.938127041 CET	192.168.2.22	8.8.8.8	0xe719	Standard query (0)	33across-match.dotomi.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.345355988 CET	192.168.2.22	8.8.8.8	0xe8d6	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.345520973 CET	192.168.2.22	8.8.8.8	0xb4d	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.346111059 CET	192.168.2.22	8.8.8.8	0x2d67	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.346265078 CET	192.168.2.22	8.8.8.8	0xe509	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.347465038 CET	192.168.2.22	8.8.8.8	0xacfb	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.347618103 CET	192.168.2.22	8.8.8.8	0xe433	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.367217064 CET	192.168.2.22	8.8.8.8	0x89ae	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.367556095 CET	192.168.2.22	8.8.8.8	0x6e12	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.481442928 CET	192.168.2.22	8.8.8.8	0xffe8	Standard query (0)	oa.openxcdn.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.481733084 CET	192.168.2.22	8.8.8.8	0x5407	Standard query (0)	oa.openxcdn.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.482244015 CET	192.168.2.22	8.8.8.8	0x5f5	Standard query (0)	pghub.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.482446909 CET	192.168.2.22	8.8.8.8	0xc15	Standard query (0)	pghub.io	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.483634949 CET	192.168.2.22	8.8.8.8	0x7baf	Standard query (0)	cdn.opecloud.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.483820915 CET	192.168.2.22	8.8.8.8	0xf733	Standard query (0)	cdn.opecloud.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.670500994 CET	192.168.2.22	8.8.8.8	0x2be1	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.673223019 CET	192.168.2.22	8.8.8.8	0xbcc2	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.833440065 CET	192.168.2.22	8.8.8.8	0xc8be	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.851908922 CET	192.168.2.22	8.8.8.8	0x4016	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.953145981 CET	192.168.2.22	8.8.8.8	0xb946	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.957871914 CET	192.168.2.22	8.8.8.8	0x381c	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.959480047 CET	192.168.2.22	8.8.8.8	0xc853	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.959669113 CET	192.168.2.22	8.8.8.8	0xb84a	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.961606026 CET	192.168.2.22	8.8.8.8	0x3235	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.961762905 CET	192.168.2.22	8.8.8.8	0xd26d	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.962270021 CET	192.168.2.22	8.8.8.8	0x467e	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.962435961 CET	192.168.2.22	8.8.8.8	0x858e	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:21.991067886 CET	192.168.2.22	8.8.8.8	0x7d29	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.991274118 CET	192.168.2.22	8.8.8.8	0xa1f7	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.072896957 CET	192.168.2.22	8.8.8.8	0x84ce	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.073066950 CET	192.168.2.22	8.8.8.8	0x764b	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.326916933 CET	192.168.2.22	8.8.8.8	0x8ff3	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.327706099 CET	192.168.2.22	8.8.8.8	0x6af2	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.466973066 CET	192.168.2.22	8.8.8.8	0x4d09	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.467272997 CET	192.168.2.22	8.8.8.8	0x1d1b	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.471349955 CET	192.168.2.22	8.8.8.8	0xf1ee	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.471565008 CET	192.168.2.22	8.8.8.8	0x563a	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.475193024 CET	192.168.2.22	8.8.8.8	0x8165	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.475357056 CET	192.168.2.22	8.8.8.8	0x66f	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.480232954 CET	192.168.2.22	8.8.8.8	0xc4cf	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.480402946 CET	192.168.2.22	8.8.8.8	0xc1e0	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.480676889 CET	192.168.2.22	8.8.8.8	0x2514	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.480858088 CET	192.168.2.22	8.8.8.8	0xbde8	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.705874920 CET	192.168.2.22	8.8.8.8	0xcac4	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.706053019 CET	192.168.2.22	8.8.8.8	0x4163	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.707779884 CET	192.168.2.22	8.8.8.8	0x1a37	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.708278894 CET	192.168.2.22	8.8.8.8	0x3122	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.716576099 CET	192.168.2.22	8.8.8.8	0xd6ee	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.716734886 CET	192.168.2.22	8.8.8.8	0xd45d	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.775216103 CET	192.168.2.22	8.8.8.8	0xa504	Standard query (0)	cdn-ima.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.775451899 CET	192.168.2.22	8.8.8.8	0xb99f	Standard query (0)	cdn-ima.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.775815964 CET	192.168.2.22	8.8.8.8	0xf09f	Standard query (0)	invstatic101.creativecdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.775990009 CET	192.168.2.22	8.8.8.8	0xea85	Standard query (0)	invstatic101.creativecdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:22.967819929 CET	192.168.2.22	8.8.8.8	0xa9a4	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.967819929 CET	192.168.2.22	8.8.8.8	0x99e6	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:23.047780991 CET	192.168.2.22	8.8.8.8	0x9643	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.047951937 CET	192.168.2.22	8.8.8.8	0x1f92	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:23.048928022 CET	192.168.2.22	8.8.8.8	0xe483	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.049091101 CET	192.168.2.22	8.8.8.8	0xaad6	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:23.050151110 CET	192.168.2.22	8.8.8.8	0x7282	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.050302982 CET	192.168.2.22	8.8.8.8	0x3474	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:23.052692890 CET	192.168.2.22	8.8.8.8	0xb785	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.052921057 CET	192.168.2.22	8.8.8.8	0x28ec	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Dec 12, 2023 21:38:23.080985069 CET	192.168.2.22	8.8.8.8	0xf9ad	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.081161976 CET	192.168.2.22	8.8.8.8	0xd6a1	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Dec 12, 2023 21:39:52.706615925 CET	192.168.2.22	8.8.8.8	0x4720	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:52.706908941 CET	192.168.2.22	8.8.8.8	0x9692	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Dec 12, 2023 21:39:52.707207918 CET	192.168.2.22	8.8.8.8	0xb741	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:52.707415104 CET	192.168.2.22	8.8.8.8	0xd309	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Dec 12, 2023 21:39:53.927813053 CET	192.168.2.22	8.8.8.8	0x38c6	Standard query (0)	www.interactiveds.com.au	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:53.935195923 CET	192.168.2.22	8.8.8.8	0x74a0	Standard query (0)	www.interactiveds.com.au	65	IN (0x0001)	false
Dec 12, 2023 21:39:54.844469070 CET	192.168.2.22	8.8.8.8	0x5f41	Standard query (0)	mathblog.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:54.848002911 CET	192.168.2.22	8.8.8.8	0xff3	Standard query (0)	mathblog.com	65	IN (0x0001)	false
Dec 12, 2023 21:39:54.860261917 CET	192.168.2.22	8.8.8.8	0xd309	Standard query (0)	www.interactiveds.com.au	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:54.860454082 CET	192.168.2.22	8.8.8.8	0x9a4a	Standard query (0)	www.interactiveds.com.au	65	IN (0x0001)	false
Dec 12, 2023 21:39:55.663701057 CET	192.168.2.22	8.8.8.8	0x3cb8	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:55.664525032 CET	192.168.2.22	8.8.8.8	0x368b	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:39:55.705918074 CET	192.168.2.22	8.8.8.8	0xb6f5	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:55.706219912 CET	192.168.2.22	8.8.8.8	0xd911	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:39:56.877677917 CET	192.168.2.22	8.8.8.8	0x92d4	Standard query (0)	mathblog.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:56.877841949 CET	192.168.2.22	8.8.8.8	0xe130	Standard query (0)	mathblog.com	65	IN (0x0001)	false
Dec 12, 2023 21:39:57.105554104 CET	192.168.2.22	8.8.8.8	0xf4c5	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.105807066 CET	192.168.2.22	8.8.8.8	0xa88b	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:39:57.107084990 CET	192.168.2.22	8.8.8.8	0xf632	Standard query (0)	keywords.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.107304096 CET	192.168.2.22	8.8.8.8	0xd1a8	Standard query (0)	keywords.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:39:57.108222008 CET	192.168.2.22	8.8.8.8	0xfa73	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.108788967 CET	192.168.2.22	8.8.8.8	0x3ec9	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:39:57.109767914 CET	192.168.2.22	8.8.8.8	0x4a44	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.110135078 CET	192.168.2.22	8.8.8.8	0x5873	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 12, 2023 21:39:57.914336920 CET	192.168.2.22	8.8.8.8	0xfe69	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.914510965 CET	192.168.2.22	8.8.8.8	0x7135	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:00.369306087 CET	192.168.2.22	8.8.8.8	0x1603	Standard query (0)	interactiveds.com.au	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:00.369474888 CET	192.168.2.22	8.8.8.8	0x600b	Standard query (0)	interactiveds.com.au	65	IN (0x0001)	false
Dec 12, 2023 21:40:02.384473085 CET	192.168.2.22	8.8.8.8	0x8bb2	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.384682894 CET	192.168.2.22	8.8.8.8	0xf164	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Dec 12, 2023 21:40:02.422362089 CET	192.168.2.22	8.8.8.8	0x8b0e	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.422708035 CET	192.168.2.22	8.8.8.8	0xcc74	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:02.434753895 CET	192.168.2.22	8.8.8.8	0xafc4	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.435102940 CET	192.168.2.22	8.8.8.8	0x6bd7	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:02.534408092 CET	192.168.2.22	8.8.8.8	0x62f8	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.534756899 CET	192.168.2.22	8.8.8.8	0x44a8	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:02.536318064 CET	192.168.2.22	8.8.8.8	0x5b33	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.536498070 CET	192.168.2.22	8.8.8.8	0x50b0	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.096971035 CET	192.168.2.22	8.8.8.8	0xe54e	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.097242117 CET	192.168.2.22	8.8.8.8	0x4293	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.097562075 CET	192.168.2.22	8.8.8.8	0x706a	Standard query (0)	oa.openxcdn.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.097770929 CET	192.168.2.22	8.8.8.8	0x9d25	Standard query (0)	oa.openxcdn.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.099744081 CET	192.168.2.22	8.8.8.8	0xf384	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.100024939 CET	192.168.2.22	8.8.8.8	0x147e	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.183324099 CET	192.168.2.22	8.8.8.8	0x8d10	Standard query (0)	pghub.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.183502913 CET	192.168.2.22	8.8.8.8	0xf28a	Standard query (0)	pghub.io	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.184705973 CET	192.168.2.22	8.8.8.8	0x5f29	Standard query (0)	cdn.opecloud.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.184901953 CET	192.168.2.22	8.8.8.8	0xa0b4	Standard query (0)	cdn.opecloud.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.185313940 CET	192.168.2.22	8.8.8.8	0xe0c7	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.185419083 CET	192.168.2.22	8.8.8.8	0x489f	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.862828016 CET	192.168.2.22	8.8.8.8	0x600e	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.863050938 CET	192.168.2.22	8.8.8.8	0x59d9	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.863603115 CET	192.168.2.22	8.8.8.8	0xf3c4	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.864156008 CET	192.168.2.22	8.8.8.8	0x7d99	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.864471912 CET	192.168.2.22	8.8.8.8	0x3d20	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.864645004 CET	192.168.2.22	8.8.8.8	0x6f69	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.865041971 CET	192.168.2.22	8.8.8.8	0xcb35	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.865212917 CET	192.168.2.22	8.8.8.8	0xb4a9	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.865468979 CET	192.168.2.22	8.8.8.8	0xd8a4	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.865622997 CET	192.168.2.22	8.8.8.8	0x6f51	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.866070032 CET	192.168.2.22	8.8.8.8	0x3ef9	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.866231918 CET	192.168.2.22	8.8.8.8	0x2012	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.866516113 CET	192.168.2.22	8.8.8.8	0x5b73	Standard query (0)	sync.colossusssp.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.866677046 CET	192.168.2.22	8.8.8.8	0x7bac	Standard query (0)	sync.colossusssp.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.867073059 CET	192.168.2.22	8.8.8.8	0xfe6c	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.867278099 CET	192.168.2.22	8.8.8.8	0x61b4	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:03.932629108 CET	192.168.2.22	8.8.8.8	0x2a02	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.936479092 CET	192.168.2.22	8.8.8.8	0x65c9	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.037776947 CET	192.168.2.22	8.8.8.8	0x1680	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.038059950 CET	192.168.2.22	8.8.8.8	0x27fd	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.038589954 CET	192.168.2.22	8.8.8.8	0x1f87	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.038764000 CET	192.168.2.22	8.8.8.8	0x6775	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.144260883 CET	192.168.2.22	8.8.8.8	0x6aff	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.148955107 CET	192.168.2.22	8.8.8.8	0x127f	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.204937935 CET	192.168.2.22	8.8.8.8	0xf567	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.205133915 CET	192.168.2.22	8.8.8.8	0x4e95	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.210372925 CET	192.168.2.22	8.8.8.8	0xe29a	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.210602045 CET	192.168.2.22	8.8.8.8	0x509c	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.215960979 CET	192.168.2.22	8.8.8.8	0xc2e	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.216156960 CET	192.168.2.22	8.8.8.8	0x6141	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.218282938 CET	192.168.2.22	8.8.8.8	0x3ab5	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.218472958 CET	192.168.2.22	8.8.8.8	0x1511	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.220655918 CET	192.168.2.22	8.8.8.8	0xcd3e	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.220843077 CET	192.168.2.22	8.8.8.8	0x924e	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.374228001 CET	192.168.2.22	8.8.8.8	0x9a5f	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.374511003 CET	192.168.2.22	8.8.8.8	0x5259	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.518213987 CET	192.168.2.22	8.8.8.8	0x3d2e	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.518438101 CET	192.168.2.22	8.8.8.8	0x7820	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.555179119 CET	192.168.2.22	8.8.8.8	0x1b92	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.555430889 CET	192.168.2.22	8.8.8.8	0xafa3	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.728905916 CET	192.168.2.22	8.8.8.8	0x551	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.729130983 CET	192.168.2.22	8.8.8.8	0x54a9	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.944495916 CET	192.168.2.22	8.8.8.8	0x78f9	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.944830894 CET	192.168.2.22	8.8.8.8	0x4e96	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.950743914 CET	192.168.2.22	8.8.8.8	0x6c0b	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.951473951 CET	192.168.2.22	8.8.8.8	0xee0d	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.952130079 CET	192.168.2.22	8.8.8.8	0xb228	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.952460051 CET	192.168.2.22	8.8.8.8	0xd995	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.954018116 CET	192.168.2.22	8.8.8.8	0x5ad0	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.954267979 CET	192.168.2.22	8.8.8.8	0x4d1f	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.954659939 CET	192.168.2.22	8.8.8.8	0x38cc	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.954941988 CET	192.168.2.22	8.8.8.8	0x4e1b	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.955336094 CET	192.168.2.22	8.8.8.8	0xcf38	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.955534935 CET	192.168.2.22	8.8.8.8	0x5577	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.955898046 CET	192.168.2.22	8.8.8.8	0x8d83	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.956770897 CET	192.168.2.22	8.8.8.8	0x743d	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.959165096 CET	192.168.2.22	8.8.8.8	0xc463	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.959388971 CET	192.168.2.22	8.8.8.8	0x802e	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:04.998913050 CET	192.168.2.22	8.8.8.8	0x8c89	Standard query (0)	openx2-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.999586105 CET	192.168.2.22	8.8.8.8	0xd97b	Standard query (0)	openx2-match.dotomi.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.010703087 CET	192.168.2.22	8.8.8.8	0x9a60	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.010937929 CET	192.168.2.22	8.8.8.8	0x2ad2	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.013540983 CET	192.168.2.22	8.8.8.8	0x60	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.015886068 CET	192.168.2.22	8.8.8.8	0x21b6	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.022521019 CET	192.168.2.22	8.8.8.8	0xb71c	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.022797108 CET	192.168.2.22	8.8.8.8	0xd799	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.024128914 CET	192.168.2.22	8.8.8.8	0xca61	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.024420977 CET	192.168.2.22	8.8.8.8	0x4b9c	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.025536060 CET	192.168.2.22	8.8.8.8	0x54a2	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.025759935 CET	192.168.2.22	8.8.8.8	0xb356	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.076325893 CET	192.168.2.22	8.8.8.8	0xdc7a	Standard query (0)	server.cpmstar.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.076567888 CET	192.168.2.22	8.8.8.8	0x4e61	Standard query (0)	server.cpmstar.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.082130909 CET	192.168.2.22	8.8.8.8	0xd282	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.085910082 CET	192.168.2.22	8.8.8.8	0x5853	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.099147081 CET	192.168.2.22	8.8.8.8	0x90be	Standard query (0)	interactiveds.com.au	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.099364996 CET	192.168.2.22	8.8.8.8	0x2e09	Standard query (0)	interactiveds.com.au	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.099771023 CET	192.168.2.22	8.8.8.8	0xca39	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.100061893 CET	192.168.2.22	8.8.8.8	0x1860	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.178917885 CET	192.168.2.22	8.8.8.8	0x8217	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.179179907 CET	192.168.2.22	8.8.8.8	0xdf73	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.183413982 CET	192.168.2.22	8.8.8.8	0x8e81	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.183749914 CET	192.168.2.22	8.8.8.8	0x23f6	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.213249922 CET	192.168.2.22	8.8.8.8	0xff72	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.213483095 CET	192.168.2.22	8.8.8.8	0xea8d	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.625344038 CET	192.168.2.22	8.8.8.8	0xd9c2	Standard query (0)	interactiveds.com.au	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.635473967 CET	192.168.2.22	8.8.8.8	0xea11	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.635673046 CET	192.168.2.22	8.8.8.8	0xdd4	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.911782026 CET	192.168.2.22	8.8.8.8	0xd9c	Standard query (0)	pdmp.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.911950111 CET	192.168.2.22	8.8.8.8	0x1393	Standard query (0)	pdmp.tagger.opecloud.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:05.913361073 CET	192.168.2.22	8.8.8.8	0x3b09	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.913587093 CET	192.168.2.22	8.8.8.8	0x22be	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.095277071 CET	192.168.2.22	8.8.8.8	0x9998	Standard query (0)	oajs.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.095526934 CET	192.168.2.22	8.8.8.8	0x2956	Standard query (0)	oajs.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.096079111 CET	192.168.2.22	8.8.8.8	0x5d5a	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.096317053 CET	192.168.2.22	8.8.8.8	0xdb7c	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.102927923 CET	192.168.2.22	8.8.8.8	0xcd7a	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.103153944 CET	192.168.2.22	8.8.8.8	0xb8a6	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.201553106 CET	192.168.2.22	8.8.8.8	0xaebd	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.202564001 CET	192.168.2.22	8.8.8.8	0x8866	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.204204082 CET	192.168.2.22	8.8.8.8	0x2191	Standard query (0)	oxp.mxptint.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.204710960 CET	192.168.2.22	8.8.8.8	0x73f1	Standard query (0)	oxp.mxptint.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.205076933 CET	192.168.2.22	8.8.8.8	0xce19	Standard query (0)	i.w55c.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.205374956 CET	192.168.2.22	8.8.8.8	0xcc05	Standard query (0)	i.w55c.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.244483948 CET	192.168.2.22	8.8.8.8	0xc4c9	Standard query (0)	pdmp.profiles.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.244786024 CET	192.168.2.22	8.8.8.8	0xb80d	Standard query (0)	pdmp.profiles.tagger.opecloud.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.267313957 CET	192.168.2.22	8.8.8.8	0x1814	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.267602921 CET	192.168.2.22	8.8.8.8	0xeb7b	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.270509958 CET	192.168.2.22	8.8.8.8	0x1d9c	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.270767927 CET	192.168.2.22	8.8.8.8	0x633a	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.271502972 CET	192.168.2.22	8.8.8.8	0xaa5e	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.271734953 CET	192.168.2.22	8.8.8.8	0x5afe	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.272551060 CET	192.168.2.22	8.8.8.8	0x344e	Standard query (0)	sync-dmp.mobtrakk.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.272842884 CET	192.168.2.22	8.8.8.8	0xe42d	Standard query (0)	sync-dmp.mobtrakk.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.295078993 CET	192.168.2.22	8.8.8.8	0x1a5e	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.295315027 CET	192.168.2.22	8.8.8.8	0x50a1	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.429683924 CET	192.168.2.22	8.8.8.8	0x324a	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.430032969 CET	192.168.2.22	8.8.8.8	0xce98	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.433377981 CET	192.168.2.22	8.8.8.8	0x5122	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.433613062 CET	192.168.2.22	8.8.8.8	0x2e63	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.434753895 CET	192.168.2.22	8.8.8.8	0x5e03	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.434976101 CET	192.168.2.22	8.8.8.8	0xbd14	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.555793047 CET	192.168.2.22	8.8.8.8	0x7a32	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.556046009 CET	192.168.2.22	8.8.8.8	0xc90d	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.556865931 CET	192.168.2.22	8.8.8.8	0x75ff	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.557151079 CET	192.168.2.22	8.8.8.8	0x33b2	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.558619976 CET	192.168.2.22	8.8.8.8	0x189f	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.558832884 CET	192.168.2.22	8.8.8.8	0x5ab2	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.569782019 CET	192.168.2.22	8.8.8.8	0x9f32	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.570204020 CET	192.168.2.22	8.8.8.8	0xc8f6	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.640857935 CET	192.168.2.22	8.8.8.8	0xaf1b	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.641092062 CET	192.168.2.22	8.8.8.8	0x228d	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.648854017 CET	192.168.2.22	8.8.8.8	0xa577	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.650244951 CET	192.168.2.22	8.8.8.8	0xd98b	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.726438046 CET	192.168.2.22	8.8.8.8	0x93ab	Standard query (0)	dsp.adfarm1.adition.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.726686001 CET	192.168.2.22	8.8.8.8	0x1f38	Standard query (0)	dsp.adfarm1.adition.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.728562117 CET	192.168.2.22	8.8.8.8	0xe59e	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.728841066 CET	192.168.2.22	8.8.8.8	0x3f46	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.866301060 CET	192.168.2.22	8.8.8.8	0xfd83	Standard query (0)	google-bidout-d.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.866564989 CET	192.168.2.22	8.8.8.8	0x5c00	Standard query (0)	google-bidout-d.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:06.985758066 CET	192.168.2.22	8.8.8.8	0x62ce	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.985985994 CET	192.168.2.22	8.8.8.8	0x3101	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.106046915 CET	192.168.2.22	8.8.8.8	0x9817	Standard query (0)	feed.pghub.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.106273890 CET	192.168.2.22	8.8.8.8	0x1ce9	Standard query (0)	feed.pghub.io	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.391747952 CET	192.168.2.22	8.8.8.8	0x4662	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.391984940 CET	192.168.2.22	8.8.8.8	0x90cf	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.398344040 CET	192.168.2.22	8.8.8.8	0x9d0f	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.398597956 CET	192.168.2.22	8.8.8.8	0x5ea6	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.423865080 CET	192.168.2.22	8.8.8.8	0x840d	Standard query (0)	cs.krushmedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.424108028 CET	192.168.2.22	8.8.8.8	0x4ec3	Standard query (0)	cs.krushmedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.424520016 CET	192.168.2.22	8.8.8.8	0x7a23	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.424727917 CET	192.168.2.22	8.8.8.8	0xfb93	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.427444935 CET	192.168.2.22	8.8.8.8	0xdeee	Standard query (0)	data.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.435584068 CET	192.168.2.22	8.8.8.8	0x105e	Standard query (0)	data.adsrvr.org	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.436389923 CET	192.168.2.22	8.8.8.8	0x8ad9	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.436629057 CET	192.168.2.22	8.8.8.8	0x181c	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.486955881 CET	192.168.2.22	8.8.8.8	0xcb1a	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.487200022 CET	192.168.2.22	8.8.8.8	0x611	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.621970892 CET	192.168.2.22	8.8.8.8	0x36c6	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.622230053 CET	192.168.2.22	8.8.8.8	0x64fc	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.623512983 CET	192.168.2.22	8.8.8.8	0xf36a	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.623733997 CET	192.168.2.22	8.8.8.8	0xff20	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.656694889 CET	192.168.2.22	8.8.8.8	0x6ab1	Standard query (0)	s2s.t13.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.656924009 CET	192.168.2.22	8.8.8.8	0x8fca	Standard query (0)	s2s.t13.io	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.872847080 CET	192.168.2.22	8.8.8.8	0x8c54	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.873087883 CET	192.168.2.22	8.8.8.8	0xcaba	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.945390940 CET	192.168.2.22	8.8.8.8	0xe304	Standard query (0)	cdn.ampproject.org	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.945627928 CET	192.168.2.22	8.8.8.8	0x6532	Standard query (0)	cdn.ampproject.org	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.954886913 CET	192.168.2.22	8.8.8.8	0x1b99	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.955104113 CET	192.168.2.22	8.8.8.8	0x9c6	Standard query (0)	eu-u.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.963327885 CET	192.168.2.22	8.8.8.8	0x4b40	Standard query (0)	oajs.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.964082003 CET	192.168.2.22	8.8.8.8	0xd06a	Standard query (0)	oajs.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.966769934 CET	192.168.2.22	8.8.8.8	0xf6b5	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.966991901 CET	192.168.2.22	8.8.8.8	0x5b6a	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.969115019 CET	192.168.2.22	8.8.8.8	0x9b8e	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.969327927 CET	192.168.2.22	8.8.8.8	0x24f5	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:07.970556021 CET	192.168.2.22	8.8.8.8	0x8507	Standard query (0)	pdmp.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.970787048 CET	192.168.2.22	8.8.8.8	0xf50b	Standard query (0)	pdmp.tagger.opecloud.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.035598993 CET	192.168.2.22	8.8.8.8	0x4de1	Standard query (0)	cs.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.035871983 CET	192.168.2.22	8.8.8.8	0xfa50	Standard query (0)	cs.minutemedia-prebid.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.036562920 CET	192.168.2.22	8.8.8.8	0xeb5	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.036757946 CET	192.168.2.22	8.8.8.8	0x1931	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.049818039 CET	192.168.2.22	8.8.8.8	0x5c5a	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.050055981 CET	192.168.2.22	8.8.8.8	0x3a53	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.089392900 CET	192.168.2.22	8.8.8.8	0x3334	Standard query (0)	openx-ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.089896917 CET	192.168.2.22	8.8.8.8	0x5815	Standard query (0)	openx-ums.acuityplatform.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.093926907 CET	192.168.2.22	8.8.8.8	0x4e13	Standard query (0)	openx.adhaven.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.094201088 CET	192.168.2.22	8.8.8.8	0x2000	Standard query (0)	openx.adhaven.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.095995903 CET	192.168.2.22	8.8.8.8	0x9ae	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.096234083 CET	192.168.2.22	8.8.8.8	0x522d	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.100260973 CET	192.168.2.22	8.8.8.8	0x9188	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.100492954 CET	192.168.2.22	8.8.8.8	0xc90d	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.100856066 CET	192.168.2.22	8.8.8.8	0x8208	Standard query (0)	pdmp.profiles.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.101054907 CET	192.168.2.22	8.8.8.8	0xae25	Standard query (0)	pdmp.profiles.tagger.opecloud.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.221533060 CET	192.168.2.22	8.8.8.8	0x8fbe	Standard query (0)	prebid-s2s.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.221741915 CET	192.168.2.22	8.8.8.8	0xc94	Standard query (0)	prebid-s2s.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.223385096 CET	192.168.2.22	8.8.8.8	0x8cb1	Standard query (0)	sync.aniview.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.223612070 CET	192.168.2.22	8.8.8.8	0x1dd3	Standard query (0)	sync.aniview.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.224181890 CET	192.168.2.22	8.8.8.8	0x42d8	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.224401951 CET	192.168.2.22	8.8.8.8	0x6a92	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.224782944 CET	192.168.2.22	8.8.8.8	0x1bcf	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.224977970 CET	192.168.2.22	8.8.8.8	0x4341	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.228971958 CET	192.168.2.22	8.8.8.8	0x9d4f	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.229202032 CET	192.168.2.22	8.8.8.8	0xdfc4	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.331214905 CET	192.168.2.22	8.8.8.8	0xbc6f	Standard query (0)	pandg.tapad.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.331382990 CET	192.168.2.22	8.8.8.8	0x5973	Standard query (0)	pandg.tapad.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.358201027 CET	192.168.2.22	8.8.8.8	0x6e0e	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.358376026 CET	192.168.2.22	8.8.8.8	0x8e71	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.425328970 CET	192.168.2.22	8.8.8.8	0x7d3f	Standard query (0)	match.sync.ad.cpe.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.425519943 CET	192.168.2.22	8.8.8.8	0x9041	Standard query (0)	match.sync.ad.cpe.dotomi.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.499980927 CET	192.168.2.22	8.8.8.8	0x1c5b	Standard query (0)	ad-cdn.technoratimedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.500185013 CET	192.168.2.22	8.8.8.8	0xaa55	Standard query (0)	ad-cdn.technoratimedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.671281099 CET	192.168.2.22	8.8.8.8	0x7aa9	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.671456099 CET	192.168.2.22	8.8.8.8	0x3e49	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.760807991 CET	192.168.2.22	8.8.8.8	0xd7f	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.760982037 CET	192.168.2.22	8.8.8.8	0xf001	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.807604074 CET	192.168.2.22	8.8.8.8	0xe8dc	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.807796955 CET	192.168.2.22	8.8.8.8	0xebe0	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.810516119 CET	192.168.2.22	8.8.8.8	0x5ef9	Standard query (0)	s2s.t13.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.810614109 CET	192.168.2.22	8.8.8.8	0xf31e	Standard query (0)	s2s.t13.io	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.940408945 CET	192.168.2.22	8.8.8.8	0x533a	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.940623999 CET	192.168.2.22	8.8.8.8	0x3cce	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.942287922 CET	192.168.2.22	8.8.8.8	0x1a96	Standard query (0)	vop.sundaysky.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.942451000 CET	192.168.2.22	8.8.8.8	0xe1e9	Standard query (0)	vop.sundaysky.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.942812920 CET	192.168.2.22	8.8.8.8	0x9b8a	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.942970991 CET	192.168.2.22	8.8.8.8	0xbdeb	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.943243027 CET	192.168.2.22	8.8.8.8	0x9fea	Standard query (0)	dmp.brand-display.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.943382978 CET	192.168.2.22	8.8.8.8	0xabe6	Standard query (0)	dmp.brand-display.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.943650007 CET	192.168.2.22	8.8.8.8	0xfa1	Standard query (0)	match.justpremium.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.943792105 CET	192.168.2.22	8.8.8.8	0xcf4b	Standard query (0)	match.justpremium.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:08.954771042 CET	192.168.2.22	8.8.8.8	0x91b6	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.954993963 CET	192.168.2.22	8.8.8.8	0xf460	Standard query (0)	eu-u.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:09.032805920 CET	192.168.2.22	8.8.8.8	0xbec0	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.034364939 CET	192.168.2.22	8.8.8.8	0x451c	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:09.034722090 CET	192.168.2.22	8.8.8.8	0x754a	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.034874916 CET	192.168.2.22	8.8.8.8	0x6963	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:09.054616928 CET	192.168.2.22	8.8.8.8	0xa444	Standard query (0)	rbp.mxptint.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.054799080 CET	192.168.2.22	8.8.8.8	0xdb87	Standard query (0)	rbp.mxptint.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:09.158387899 CET	192.168.2.22	8.8.8.8	0xb0c8	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.158731937 CET	192.168.2.22	8.8.8.8	0xd794	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:09.184770107 CET	192.168.2.22	8.8.8.8	0x7104	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.184770107 CET	192.168.2.22	8.8.8.8	0xf8e	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:09.445092916 CET	192.168.2.22	8.8.8.8	0x9a	Standard query (0)	cms-xch-chicago.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.445420980 CET	192.168.2.22	8.8.8.8	0x20fb	Standard query (0)	cms-xch-chicago.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:09.989346027 CET	192.168.2.22	8.8.8.8	0x7f79	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.989346027 CET	192.168.2.22	8.8.8.8	0xc87e	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:09.990088940 CET	192.168.2.22	8.8.8.8	0x1b0b	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.990088940 CET	192.168.2.22	8.8.8.8	0xb3f1	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:09.991111040 CET	192.168.2.22	8.8.8.8	0x7c86	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.991553068 CET	192.168.2.22	8.8.8.8	0xfe8c	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:09.991553068 CET	192.168.2.22	8.8.8.8	0x1875	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.991734028 CET	192.168.2.22	8.8.8.8	0xa2e4	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:09.993050098 CET	192.168.2.22	8.8.8.8	0x4cbf	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.993408918 CET	192.168.2.22	8.8.8.8	0x322d	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:11.511854887 CET	192.168.2.22	8.8.8.8	0xc4ec	Standard query (0)	prebid-s2s.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:11.517432928 CET	192.168.2.22	8.8.8.8	0xad66	Standard query (0)	prebid-s2s.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:11.551486969 CET	192.168.2.22	8.8.8.8	0x54ff	Standard query (0)	e.serverbid.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:11.551685095 CET	192.168.2.22	8.8.8.8	0xb2ad	Standard query (0)	e.serverbid.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:11.918303967 CET	192.168.2.22	8.8.8.8	0xa917	Standard query (0)	rubicon-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:11.918627024 CET	192.168.2.22	8.8.8.8	0x617	Standard query (0)	rubicon-match.dotomi.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:11.934328079 CET	192.168.2.22	8.8.8.8	0x2420	Standard query (0)	sync.ex.co	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:11.934628963 CET	192.168.2.22	8.8.8.8	0xdc64	Standard query (0)	sync.ex.co	65	IN (0x0001)	false
Dec 12, 2023 21:40:12.330337048 CET	192.168.2.22	8.8.8.8	0x4ed	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.333873034 CET	192.168.2.22	8.8.8.8	0x61f5	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:12.337184906 CET	192.168.2.22	8.8.8.8	0xd088	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.337332964 CET	192.168.2.22	8.8.8.8	0xff68	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:12.337760925 CET	192.168.2.22	8.8.8.8	0x84b0	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.338103056 CET	192.168.2.22	8.8.8.8	0x21d0	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:12.448993921 CET	192.168.2.22	8.8.8.8	0xd5a5	Standard query (0)	sonata-notifications.taptapnetworks.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.449192047 CET	192.168.2.22	8.8.8.8	0x1842	Standard query (0)	sonata-notifications.taptapnetworks.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:12.489931107 CET	192.168.2.22	8.8.8.8	0x3f7a	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.490242958 CET	192.168.2.22	8.8.8.8	0x994	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:12.513331890 CET	192.168.2.22	8.8.8.8	0x9149	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.513576984 CET	192.168.2.22	8.8.8.8	0x8a1b	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:12.514451981 CET	192.168.2.22	8.8.8.8	0x27e	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.514652014 CET	192.168.2.22	8.8.8.8	0x7c0a	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:12.514957905 CET	192.168.2.22	8.8.8.8	0x95ed	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.515158892 CET	192.168.2.22	8.8.8.8	0x3597	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:13.222646952 CET	192.168.2.22	8.8.8.8	0x4ec1	Standard query (0)	cdn-ima.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.222855091 CET	192.168.2.22	8.8.8.8	0x746c	Standard query (0)	cdn-ima.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:13.236474037 CET	192.168.2.22	8.8.8.8	0x55e0	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.236632109 CET	192.168.2.22	8.8.8.8	0xd71d	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:13.237883091 CET	192.168.2.22	8.8.8.8	0x68c9	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.238070011 CET	192.168.2.22	8.8.8.8	0x49c	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:13.258280039 CET	192.168.2.22	8.8.8.8	0xbee8	Standard query (0)	usr.undertone.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.278305054 CET	192.168.2.22	8.8.8.8	0x7e3c	Standard query (0)	usr.undertone.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:13.315927982 CET	192.168.2.22	8.8.8.8	0x1aa8	Standard query (0)	invstatic101.creativecdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.316173077 CET	192.168.2.22	8.8.8.8	0x3f76	Standard query (0)	invstatic101.creativecdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:13.316857100 CET	192.168.2.22	8.8.8.8	0x6219	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.317013025 CET	192.168.2.22	8.8.8.8	0x74f0	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:13.317302942 CET	192.168.2.22	8.8.8.8	0xbd34	Standard query (0)	connectid.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.317450047 CET	192.168.2.22	8.8.8.8	0xa8f2	Standard query (0)	connectid.analytics.yahoo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:13.490401983 CET	192.168.2.22	8.8.8.8	0x904b	Standard query (0)	t.pswec.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.490566969 CET	192.168.2.22	8.8.8.8	0x681f	Standard query (0)	t.pswec.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:13.908401966 CET	192.168.2.22	8.8.8.8	0x976f	Standard query (0)	secure.gravatar.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.908723116 CET	192.168.2.22	8.8.8.8	0x70f4	Standard query (0)	secure.gravatar.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.234780073 CET	192.168.2.22	8.8.8.8	0x3978	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.234922886 CET	192.168.2.22	8.8.8.8	0x3617	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.490880013 CET	192.168.2.22	8.8.8.8	0xe21b	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.491023064 CET	192.168.2.22	8.8.8.8	0x2b5e	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.504523993 CET	192.168.2.22	8.8.8.8	0x1a26	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.504693985 CET	192.168.2.22	8.8.8.8	0xd09e	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.547525883 CET	192.168.2.22	8.8.8.8	0x41b3	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.547888041 CET	192.168.2.22	8.8.8.8	0x6ed9	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.549376965 CET	192.168.2.22	8.8.8.8	0x9168	Standard query (0)	cs.yellowblue.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.549511909 CET	192.168.2.22	8.8.8.8	0xf73a	Standard query (0)	cs.yellowblue.io	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.549772024 CET	192.168.2.22	8.8.8.8	0x789f	Standard query (0)	cs.minutemedia-prebid.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.549901962 CET	192.168.2.22	8.8.8.8	0xb51d	Standard query (0)	cs.minutemedia-prebid.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.555423975 CET	192.168.2.22	8.8.8.8	0x60ec	Standard query (0)	sync.aniview.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.555592060 CET	192.168.2.22	8.8.8.8	0x9ad8	Standard query (0)	sync.aniview.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.670813084 CET	192.168.2.22	8.8.8.8	0x98c2	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.670959949 CET	192.168.2.22	8.8.8.8	0xde51	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.675484896 CET	192.168.2.22	8.8.8.8	0x3d2e	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.675648928 CET	192.168.2.22	8.8.8.8	0xf84e	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.711647987 CET	192.168.2.22	8.8.8.8	0x1e88	Standard query (0)	esp.rtbhouse.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.711822987 CET	192.168.2.22	8.8.8.8	0x8b4a	Standard query (0)	esp.rtbhouse.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.728394985 CET	192.168.2.22	8.8.8.8	0x58d8	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.728542089 CET	192.168.2.22	8.8.8.8	0x2e35	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.735187054 CET	192.168.2.22	8.8.8.8	0xc151	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.735349894 CET	192.168.2.22	8.8.8.8	0x60dc	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:14.944433928 CET	192.168.2.22	8.8.8.8	0xe70c	Standard query (0)	match.sync.ad.cpe.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.944571972 CET	192.168.2.22	8.8.8.8	0xf441	Standard query (0)	match.sync.ad.cpe.dotomi.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.158706903 CET	192.168.2.22	8.8.8.8	0x92b9	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.159517050 CET	192.168.2.22	8.8.8.8	0x44c1	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.328393936 CET	192.168.2.22	8.8.8.8	0x7fdd	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.328567982 CET	192.168.2.22	8.8.8.8	0xb8e4	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.330014944 CET	192.168.2.22	8.8.8.8	0xd48c	Standard query (0)	cms-xch-chicago.33across.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.331830978 CET	192.168.2.22	8.8.8.8	0x5da7	Standard query (0)	cms-xch-chicago.33across.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.337635994 CET	192.168.2.22	8.8.8.8	0xb7c7	Standard query (0)	ad-cdn.technoratimedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.337798119 CET	192.168.2.22	8.8.8.8	0xae37	Standard query (0)	ad-cdn.technoratimedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.338920116 CET	192.168.2.22	8.8.8.8	0xb298	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.339075089 CET	192.168.2.22	8.8.8.8	0xd8dd	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.340122938 CET	192.168.2.22	8.8.8.8	0x6fbc	Standard query (0)	match.justpremium.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.340264082 CET	192.168.2.22	8.8.8.8	0x993e	Standard query (0)	match.justpremium.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.350599051 CET	192.168.2.22	8.8.8.8	0xb2e8	Standard query (0)	e.serverbid.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.350760937 CET	192.168.2.22	8.8.8.8	0xf8bb	Standard query (0)	e.serverbid.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.352035046 CET	192.168.2.22	8.8.8.8	0xb800	Standard query (0)	sync.ex.co	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.352196932 CET	192.168.2.22	8.8.8.8	0xbbe3	Standard query (0)	sync.ex.co	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.352782965 CET	192.168.2.22	8.8.8.8	0x2aad	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.352936983 CET	192.168.2.22	8.8.8.8	0x6b58	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.355603933 CET	192.168.2.22	8.8.8.8	0x6d01	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.355767965 CET	192.168.2.22	8.8.8.8	0x7b8	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.507880926 CET	192.168.2.22	8.8.8.8	0x3ba7	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.508068085 CET	192.168.2.22	8.8.8.8	0x8594	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.508963108 CET	192.168.2.22	8.8.8.8	0x316	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.509129047 CET	192.168.2.22	8.8.8.8	0x203b	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.509974003 CET	192.168.2.22	8.8.8.8	0x7bb4	Standard query (0)	usr.undertone.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.510138035 CET	192.168.2.22	8.8.8.8	0xb901	Standard query (0)	usr.undertone.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.511657000 CET	192.168.2.22	8.8.8.8	0x2d33	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.511821032 CET	192.168.2.22	8.8.8.8	0x9b8c	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.513164043 CET	192.168.2.22	8.8.8.8	0x1bf8	Standard query (0)	r.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.513330936 CET	192.168.2.22	8.8.8.8	0x9e92	Standard query (0)	r.bidswitch.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.863863945 CET	192.168.2.22	8.8.8.8	0x3a1b	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.864029884 CET	192.168.2.22	8.8.8.8	0xf8e8	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:15.864294052 CET	192.168.2.22	8.8.8.8	0xc8	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.864419937 CET	192.168.2.22	8.8.8.8	0x2a79	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:16.296511889 CET	192.168.2.22	8.8.8.8	0xcb3e	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.296895981 CET	192.168.2.22	8.8.8.8	0x4aab	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:16.297504902 CET	192.168.2.22	8.8.8.8	0x229e	Standard query (0)	gocm.c.appier.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.297668934 CET	192.168.2.22	8.8.8.8	0x9fd5	Standard query (0)	gocm.c.appier.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:16.298048973 CET	192.168.2.22	8.8.8.8	0x8931	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.298234940 CET	192.168.2.22	8.8.8.8	0x16e3	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:16.298877001 CET	192.168.2.22	8.8.8.8	0xd101	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.299062967 CET	192.168.2.22	8.8.8.8	0x79df	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:17.303395033 CET	192.168.2.22	8.8.8.8	0xa884	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.303556919 CET	192.168.2.22	8.8.8.8	0xca11	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
Dec 12, 2023 21:40:17.304706097 CET	192.168.2.22	8.8.8.8	0x6406	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.304857969 CET	192.168.2.22	8.8.8.8	0x4b86	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:17.305531025 CET	192.168.2.22	8.8.8.8	0xc441	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.305571079 CET	192.168.2.22	8.8.8.8	0x14f5	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:17.305852890 CET	192.168.2.22	8.8.8.8	0xa4f2	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.307029009 CET	192.168.2.22	8.8.8.8	0x8879	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:17.308888912 CET	192.168.2.22	8.8.8.8	0x2246	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.309039116 CET	192.168.2.22	8.8.8.8	0x207e	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:17.338521004 CET	192.168.2.22	8.8.8.8	0x356e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.338689089 CET	192.168.2.22	8.8.8.8	0x5b11	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:17.699336052 CET	192.168.2.22	8.8.8.8	0xa1dc	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.700932980 CET	192.168.2.22	8.8.8.8	0x71	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:17.701822996 CET	192.168.2.22	8.8.8.8	0x5c64	Standard query (0)	j.mrpdata.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.701967955 CET	192.168.2.22	8.8.8.8	0x6cab	Standard query (0)	j.mrpdata.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:18.325613022 CET	192.168.2.22	8.8.8.8	0x3747	Standard query (0)	aep.mxptint.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.325762033 CET	192.168.2.22	8.8.8.8	0xf964	Standard query (0)	aep.mxptint.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:18.334511042 CET	192.168.2.22	8.8.8.8	0x5e47	Standard query (0)	a.rfihub.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.334669113 CET	192.168.2.22	8.8.8.8	0x8838	Standard query (0)	a.rfihub.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:18.335254908 CET	192.168.2.22	8.8.8.8	0x77be	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.335405111 CET	192.168.2.22	8.8.8.8	0xae18	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:18.335679054 CET	192.168.2.22	8.8.8.8	0x5bc8	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.335836887 CET	192.168.2.22	8.8.8.8	0x5cf1	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:18.815395117 CET	192.168.2.22	8.8.8.8	0xa84c	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.815546989 CET	192.168.2.22	8.8.8.8	0x1d81	Standard query (0)	pippio.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:19.353995085 CET	192.168.2.22	8.8.8.8	0xe1e8	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:19.354187965 CET	192.168.2.22	8.8.8.8	0xcaec	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:19.611378908 CET	192.168.2.22	8.8.8.8	0x4abe	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:19.611538887 CET	192.168.2.22	8.8.8.8	0x569f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:20.171088934 CET	192.168.2.22	8.8.8.8	0x5d5d	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.171464920 CET	192.168.2.22	8.8.8.8	0xf3ac	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:20.171875954 CET	192.168.2.22	8.8.8.8	0xf657	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.172044992 CET	192.168.2.22	8.8.8.8	0xf640	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:20.172532082 CET	192.168.2.22	8.8.8.8	0xb95f	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.172697067 CET	192.168.2.22	8.8.8.8	0xe0cc	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:20.173010111 CET	192.168.2.22	8.8.8.8	0x5850	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.173163891 CET	192.168.2.22	8.8.8.8	0xfa91	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:20.250063896 CET	192.168.2.22	8.8.8.8	0x5220	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.250370979 CET	192.168.2.22	8.8.8.8	0x8294	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:20.451076984 CET	192.168.2.22	8.8.8.8	0x871d	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.451215029 CET	192.168.2.22	8.8.8.8	0xb701	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:20.452395916 CET	192.168.2.22	8.8.8.8	0xd113	Standard query (0)	io.narrative.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.452545881 CET	192.168.2.22	8.8.8.8	0xd596	Standard query (0)	io.narrative.io	65	IN (0x0001)	false
Dec 12, 2023 21:40:23.611063957 CET	192.168.2.22	8.8.8.8	0x559e	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.615325928 CET	192.168.2.22	8.8.8.8	0xb0e1	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:23.638261080 CET	192.168.2.22	8.8.8.8	0xb61c	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.639147997 CET	192.168.2.22	8.8.8.8	0xdbbf	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:23.641417980 CET	192.168.2.22	8.8.8.8	0xe127	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.641614914 CET	192.168.2.22	8.8.8.8	0xd3d6	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:25.130989075 CET	192.168.2.22	8.8.8.8	0x250e	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:25.135030031 CET	192.168.2.22	8.8.8.8	0x9f7a	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:25.912226915 CET	192.168.2.22	8.8.8.8	0xd9b	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:25.912386894 CET	192.168.2.22	8.8.8.8	0x3d57	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:26.110893965 CET	192.168.2.22	8.8.8.8	0x2d8f	Standard query (0)	cti.w55c.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.111061096 CET	192.168.2.22	8.8.8.8	0x540b	Standard query (0)	cti.w55c.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:26.111624956 CET	192.168.2.22	8.8.8.8	0xa8fd	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.111824036 CET	192.168.2.22	8.8.8.8	0x78d0	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:26.112426996 CET	192.168.2.22	8.8.8.8	0xaeb9	Standard query (0)	sync.adotmob.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.112581015 CET	192.168.2.22	8.8.8.8	0x5478	Standard query (0)	sync.adotmob.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:26.113243103 CET	192.168.2.22	8.8.8.8	0x1a97	Standard query (0)	um4.eqads.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.113395929 CET	192.168.2.22	8.8.8.8	0x83c4	Standard query (0)	um4.eqads.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:26.187053919 CET	192.168.2.22	8.8.8.8	0xbcea	Standard query (0)	cm.smadex.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.187362909 CET	192.168.2.22	8.8.8.8	0xc335	Standard query (0)	cm.smadex.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:26.287894011 CET	192.168.2.22	8.8.8.8	0xf928	Standard query (0)	sid.storygize.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.288558006 CET	192.168.2.22	8.8.8.8	0x5778	Standard query (0)	sid.storygize.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:26.412415028 CET	192.168.2.22	8.8.8.8	0x23e4	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.412666082 CET	192.168.2.22	8.8.8.8	0x39ed	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:26.773673058 CET	192.168.2.22	8.8.8.8	0x8117	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.773833990 CET	192.168.2.22	8.8.8.8	0x41e6	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.391292095 CET	192.168.2.22	8.8.8.8	0x2dd3	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.391459942 CET	192.168.2.22	8.8.8.8	0x2319	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.582973003 CET	192.168.2.22	8.8.8.8	0xf05f	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.583149910 CET	192.168.2.22	8.8.8.8	0xd58f	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.588120937 CET	192.168.2.22	8.8.8.8	0x7ff6	Standard query (0)	secure.gravatar.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.588291883 CET	192.168.2.22	8.8.8.8	0x8de5	Standard query (0)	secure.gravatar.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.728184938 CET	192.168.2.22	8.8.8.8	0xffea	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.728554964 CET	192.168.2.22	8.8.8.8	0xfa82	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.842936993 CET	192.168.2.22	8.8.8.8	0xe28	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.843314886 CET	192.168.2.22	8.8.8.8	0x8692	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.864767075 CET	192.168.2.22	8.8.8.8	0xcb4f	Standard query (0)	esp.rtbhouse.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.865056038 CET	192.168.2.22	8.8.8.8	0x7995	Standard query (0)	esp.rtbhouse.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.874325991 CET	192.168.2.22	8.8.8.8	0xb4ec	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.874479055 CET	192.168.2.22	8.8.8.8	0xb429	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.884982109 CET	192.168.2.22	8.8.8.8	0xdd54	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.885222912 CET	192.168.2.22	8.8.8.8	0x2d04	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.898267031 CET	192.168.2.22	8.8.8.8	0x221f	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.898427010 CET	192.168.2.22	8.8.8.8	0xc5c7	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.899575949 CET	192.168.2.22	8.8.8.8	0x3109	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.899729013 CET	192.168.2.22	8.8.8.8	0xf8bb	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.908349037 CET	192.168.2.22	8.8.8.8	0xf861	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.908504963 CET	192.168.2.22	8.8.8.8	0x9072	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.910031080 CET	192.168.2.22	8.8.8.8	0x53a5	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.910245895 CET	192.168.2.22	8.8.8.8	0xd3ff	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.910805941 CET	192.168.2.22	8.8.8.8	0xfd3f	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.911000013 CET	192.168.2.22	8.8.8.8	0x8ab7	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.933598042 CET	192.168.2.22	8.8.8.8	0x1d43	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.941962957 CET	192.168.2.22	8.8.8.8	0xce79	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.962131977 CET	192.168.2.22	8.8.8.8	0xcd70	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.962330103 CET	192.168.2.22	8.8.8.8	0xb0d9	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.971199036 CET	192.168.2.22	8.8.8.8	0x9eb4	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.971405029 CET	192.168.2.22	8.8.8.8	0x3707	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:27.974787951 CET	192.168.2.22	8.8.8.8	0x9f7f	Standard query (0)	rcp.c.appier.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.974984884 CET	192.168.2.22	8.8.8.8	0x459c	Standard query (0)	rcp.c.appier.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:28.015007973 CET	192.168.2.22	8.8.8.8	0x82fa	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.015121937 CET	192.168.2.22	8.8.8.8	0xd812	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:28.189409018 CET	192.168.2.22	8.8.8.8	0xc5c5	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.190170050 CET	192.168.2.22	8.8.8.8	0x97b4	Standard query (0)	tg.socdm.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:28.443605900 CET	192.168.2.22	8.8.8.8	0x6185	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.443907022 CET	192.168.2.22	8.8.8.8	0x391c	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:28.444420099 CET	192.168.2.22	8.8.8.8	0x629e	Standard query (0)	dmp.adform.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.444634914 CET	192.168.2.22	8.8.8.8	0x998f	Standard query (0)	dmp.adform.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:28.529011965 CET	192.168.2.22	8.8.8.8	0x473c	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.529186010 CET	192.168.2.22	8.8.8.8	0x2a08	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:28.535459042 CET	192.168.2.22	8.8.8.8	0x1bc	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.535604000 CET	192.168.2.22	8.8.8.8	0x8471	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:28.579054117 CET	192.168.2.22	8.8.8.8	0xba45	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.579224110 CET	192.168.2.22	8.8.8.8	0xe8ad	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:28.579495907 CET	192.168.2.22	8.8.8.8	0xc173	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.579628944 CET	192.168.2.22	8.8.8.8	0x3ae9	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:28.890786886 CET	192.168.2.22	8.8.8.8	0xa1c4	Standard query (0)	dm-us.hybrid.ai	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.890944004 CET	192.168.2.22	8.8.8.8	0x2c11	Standard query (0)	dm-us.hybrid.ai	65	IN (0x0001)	false
Dec 12, 2023 21:40:29.915446043 CET	192.168.2.22	8.8.8.8	0x623b	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:29.915642977 CET	192.168.2.22	8.8.8.8	0x7f9d	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:29.916023016 CET	192.168.2.22	8.8.8.8	0xd8a	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:29.916193008 CET	192.168.2.22	8.8.8.8	0xb4a1	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:30.471668005 CET	192.168.2.22	8.8.8.8	0xe691	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.472227097 CET	192.168.2.22	8.8.8.8	0x7e9c	Standard query (0)	cs.lkqd.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:30.715509892 CET	192.168.2.22	8.8.8.8	0x5ad8	Standard query (0)	a.sportradarserving.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.715735912 CET	192.168.2.22	8.8.8.8	0xf5ad	Standard query (0)	a.sportradarserving.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:30.811592102 CET	192.168.2.22	8.8.8.8	0x6168	Standard query (0)	usync.vrtcal.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.811912060 CET	192.168.2.22	8.8.8.8	0x5a87	Standard query (0)	usync.vrtcal.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:30.862976074 CET	192.168.2.22	8.8.8.8	0x390f	Standard query (0)	warp.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.863256931 CET	192.168.2.22	8.8.8.8	0xd86d	Standard query (0)	warp.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:31.008074045 CET	192.168.2.22	8.8.8.8	0xa4f1	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.008258104 CET	192.168.2.22	8.8.8.8	0x8178	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:31.111119032 CET	192.168.2.22	8.8.8.8	0xd26b	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.111304045 CET	192.168.2.22	8.8.8.8	0xfc3a	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:31.947413921 CET	192.168.2.22	8.8.8.8	0x1a0d	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.947911978 CET	192.168.2.22	8.8.8.8	0x619a	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:31.954392910 CET	192.168.2.22	8.8.8.8	0x77a7	Standard query (0)	cs.lkqd.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.954627037 CET	192.168.2.22	8.8.8.8	0x4b4	Standard query (0)	cs.lkqd.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:31.957211971 CET	192.168.2.22	8.8.8.8	0x6cd9	Standard query (0)	cookies.nextmillmedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.957361937 CET	192.168.2.22	8.8.8.8	0x1d15	Standard query (0)	cookies.nextmillmedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:32.092590094 CET	192.168.2.22	8.8.8.8	0x938f	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.092811108 CET	192.168.2.22	8.8.8.8	0x9ab	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:32.158992052 CET	192.168.2.22	8.8.8.8	0x3f0a	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.159157991 CET	192.168.2.22	8.8.8.8	0x567b	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:32.234169960 CET	192.168.2.22	8.8.8.8	0xa039	Standard query (0)	cdn-guse1-xch.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.234498024 CET	192.168.2.22	8.8.8.8	0x6800	Standard query (0)	cdn-guse1-xch.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:32.275127888 CET	192.168.2.22	8.8.8.8	0x14be	Standard query (0)	usync.vrtcal.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.275181055 CET	192.168.2.22	8.8.8.8	0xb353	Standard query (0)	usync.vrtcal.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:32.835762024 CET	192.168.2.22	8.8.8.8	0x33c	Standard query (0)	cm-supply-web.gammaplatform.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.835948944 CET	192.168.2.22	8.8.8.8	0xaa86	Standard query (0)	cm-supply-web.gammaplatform.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:32.845587015 CET	192.168.2.22	8.8.8.8	0x76f6	Standard query (0)	cookies.nextmillmedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.845741034 CET	192.168.2.22	8.8.8.8	0xcca9	Standard query (0)	cookies.nextmillmedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:32.892232895 CET	192.168.2.22	8.8.8.8	0x9f61	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.892416954 CET	192.168.2.22	8.8.8.8	0xfc7	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:33.098825932 CET	192.168.2.22	8.8.8.8	0x4bb1	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.099056005 CET	192.168.2.22	8.8.8.8	0x2a2d	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:33.232992887 CET	192.168.2.22	8.8.8.8	0xfc65	Standard query (0)	cdn-guse1-xch.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.233213902 CET	192.168.2.22	8.8.8.8	0x5a53	Standard query (0)	cdn-guse1-xch.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:33.528320074 CET	192.168.2.22	8.8.8.8	0x840c	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.528594971 CET	192.168.2.22	8.8.8.8	0x237c	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:33.710361958 CET	192.168.2.22	8.8.8.8	0x3d79	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.710813999 CET	192.168.2.22	8.8.8.8	0x84df	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:33.776104927 CET	192.168.2.22	8.8.8.8	0x8d3c	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.777776957 CET	192.168.2.22	8.8.8.8	0x83f5	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:33.784266949 CET	192.168.2.22	8.8.8.8	0x9d25	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.784518003 CET	192.168.2.22	8.8.8.8	0x25c3	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:34.084558010 CET	192.168.2.22	8.8.8.8	0x3820	Standard query (0)	googleads4.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.084805012 CET	192.168.2.22	8.8.8.8	0xf422	Standard query (0)	googleads4.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:34.421153069 CET	192.168.2.22	8.8.8.8	0xdf85	Standard query (0)	hblg.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.421385050 CET	192.168.2.22	8.8.8.8	0x1ea7	Standard query (0)	hblg.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:34.433451891 CET	192.168.2.22	8.8.8.8	0xddfe	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.433635950 CET	192.168.2.22	8.8.8.8	0x4be5	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:34.480874062 CET	192.168.2.22	8.8.8.8	0xb339	Standard query (0)	triplelift-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.481148958 CET	192.168.2.22	8.8.8.8	0x71d8	Standard query (0)	triplelift-match.dotomi.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:34.570806026 CET	192.168.2.22	8.8.8.8	0xc071	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.571017027 CET	192.168.2.22	8.8.8.8	0xf4a	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:34.699148893 CET	192.168.2.22	8.8.8.8	0x78f4	Standard query (0)	07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.699372053 CET	192.168.2.22	8.8.8.8	0x26ba	Standard query (0)	07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:34.701800108 CET	192.168.2.22	8.8.8.8	0x27df	Standard query (0)	code.createjs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.702053070 CET	192.168.2.22	8.8.8.8	0x93f9	Standard query (0)	code.createjs.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:34.848426104 CET	192.168.2.22	8.8.8.8	0x841e	Standard query (0)	cdn.doubleverify.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.848716974 CET	192.168.2.22	8.8.8.8	0xa499	Standard query (0)	cdn.doubleverify.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:34.849149942 CET	192.168.2.22	8.8.8.8	0x360	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.849417925 CET	192.168.2.22	8.8.8.8	0xe29b	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:34.867002010 CET	192.168.2.22	8.8.8.8	0x5c6a	Standard query (0)	googleads4.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.867237091 CET	192.168.2.22	8.8.8.8	0x4029	Standard query (0)	googleads4.g.doubleclick.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:35.100419998 CET	192.168.2.22	8.8.8.8	0xbcf2	Standard query (0)	hblg.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:35.100603104 CET	192.168.2.22	8.8.8.8	0x5fa7	Standard query (0)	hblg.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:35.151473999 CET	192.168.2.22	8.8.8.8	0x571a	Standard query (0)	secure.insightexpressai.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:35.151784897 CET	192.168.2.22	8.8.8.8	0xc68d	Standard query (0)	secure.insightexpressai.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:35.857479095 CET	192.168.2.22	8.8.8.8	0xa967	Standard query (0)	medianet-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:35.857664108 CET	192.168.2.22	8.8.8.8	0x622c	Standard query (0)	medianet-match.dotomi.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:35.973050117 CET	192.168.2.22	8.8.8.8	0xdd53	Standard query (0)	secure.insightexpressai.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:35.973269939 CET	192.168.2.22	8.8.8.8	0xb338	Standard query (0)	secure.insightexpressai.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:36.260776043 CET	192.168.2.22	8.8.8.8	0x9705	Standard query (0)	trace.mediago.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.261137009 CET	192.168.2.22	8.8.8.8	0x32bb	Standard query (0)	trace.mediago.io	65	IN (0x0001)	false
Dec 12, 2023 21:40:36.476203918 CET	192.168.2.22	8.8.8.8	0x88f4	Standard query (0)	07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.476442099 CET	192.168.2.22	8.8.8.8	0x2a03	Standard query (0)	07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:36.741842985 CET	192.168.2.22	8.8.8.8	0x99b6	Standard query (0)	tps.doubleverify.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.742619991 CET	192.168.2.22	8.8.8.8	0x1ed4	Standard query (0)	tps.doubleverify.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:36.791747093 CET	192.168.2.22	8.8.8.8	0xca3	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.792002916 CET	192.168.2.22	8.8.8.8	0x2083	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:36.914697886 CET	192.168.2.22	8.8.8.8	0x93de	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.914932966 CET	192.168.2.22	8.8.8.8	0x8e7d	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:38.063556910 CET	192.168.2.22	8.8.8.8	0xba32	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:38.063720942 CET	192.168.2.22	8.8.8.8	0x800e	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:41.726263046 CET	192.168.2.22	8.8.8.8	0x755f	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:41.726778030 CET	192.168.2.22	8.8.8.8	0x15d2	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:43.779016972 CET	192.168.2.22	8.8.8.8	0xaa11	Standard query (0)	tpsc-ue1.doubleverify.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:43.779553890 CET	192.168.2.22	8.8.8.8	0x6fd6	Standard query (0)	tpsc-ue1.doubleverify.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:43.847820044 CET	192.168.2.22	8.8.8.8	0x9e40	Standard query (0)	ads.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:43.853509903 CET	192.168.2.22	8.8.8.8	0x1c61	Standard query (0)	ads.scorecardresearch.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:44.040551901 CET	192.168.2.22	8.8.8.8	0xa17f	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:44.040764093 CET	192.168.2.22	8.8.8.8	0x431b	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:44.044962883 CET	192.168.2.22	8.8.8.8	0xaec3	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:44.045192957 CET	192.168.2.22	8.8.8.8	0xa0bc	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:44.090809107 CET	192.168.2.22	8.8.8.8	0xd7d4	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:44.090967894 CET	192.168.2.22	8.8.8.8	0xeb7d	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Dec 12, 2023 21:40:45.063653946 CET	192.168.2.22	8.8.8.8	0xda4d	Standard query (0)	ads.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:45.063843966 CET	192.168.2.22	8.8.8.8	0xcfe1	Standard query (0)	ads.scorecardresearch.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:45.064212084 CET	192.168.2.22	8.8.8.8	0xfbcb	Standard query (0)	fei.pro-market.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:45.064372063 CET	192.168.2.22	8.8.8.8	0xe605	Standard query (0)	fei.pro-market.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:45.073406935 CET	192.168.2.22	8.8.8.8	0x47c4	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:45.073672056 CET	192.168.2.22	8.8.8.8	0x208a	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:45.195075035 CET	192.168.2.22	8.8.8.8	0xa61d	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:45.195276976 CET	192.168.2.22	8.8.8.8	0x4b75	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
Dec 12, 2023 21:40:47.080571890 CET	192.168.2.22	8.8.8.8	0xdc9	Standard query (0)	keywords.mediavine.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:47.080909967 CET	192.168.2.22	8.8.8.8	0x32f1	Standard query (0)	keywords.mediavine.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:47.093928099 CET	192.168.2.22	8.8.8.8	0x73a0	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:47.094196081 CET	192.168.2.22	8.8.8.8	0x75a5	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:48.572952986 CET	192.168.2.22	8.8.8.8	0xfba	Standard query (0)	offers.seteventshowroom.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:48.573386908 CET	192.168.2.22	8.8.8.8	0x1cae	Standard query (0)	offers.seteventshowroom.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:49.057158947 CET	192.168.2.22	8.8.8.8	0x7db7	Standard query (0)	a5588.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:49.057620049 CET	192.168.2.22	8.8.8.8	0x7f8f	Standard query (0)	a5588.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:49.561775923 CET	192.168.2.22	8.8.8.8	0x87a6	Standard query (0)	offers.seteventshowroom.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:49.561887980 CET	192.168.2.22	8.8.8.8	0x9b03	Standard query (0)	offers.seteventshowroom.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:49.859293938 CET	192.168.2.22	8.8.8.8	0x6968	Standard query (0)	a5588.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:49.859394073 CET	192.168.2.22	8.8.8.8	0xe8a2	Standard query (0)	a5588.casalemedia.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:51.004803896 CET	192.168.2.22	8.8.8.8	0xa134	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.004904032 CET	192.168.2.22	8.8.8.8	0x1530	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:51.679439068 CET	192.168.2.22	8.8.8.8	0xdd15	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.679553986 CET	192.168.2.22	8.8.8.8	0x624d	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:51.755556107 CET	192.168.2.22	8.8.8.8	0x327e	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.755599022 CET	192.168.2.22	8.8.8.8	0x90c9	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
Dec 12, 2023 21:40:52.254497051 CET	192.168.2.22	8.8.8.8	0x267d	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:52.254618883 CET	192.168.2.22	8.8.8.8	0x3067	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 12, 2023 21:38:00.422034025 CET	8.8.8.8	192.168.2.22	0x9440	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:00.422034025 CET	8.8.8.8	192.168.2.22	0x9440	No error (0)	clients.l.google.com		192.178.50.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:00.427370071 CET	8.8.8.8	192.168.2.22	0x4dbd	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:00.443167925 CET	8.8.8.8	192.168.2.22	0xd1b7	No error (0)	accounts.google.com		192.178.50.77	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:01.942423105 CET	8.8.8.8	192.168.2.22	0x519e	No error (0)	mathblog.com			65	IN (0x0001)	false
Dec 12, 2023 21:38:01.989146948 CET	8.8.8.8	192.168.2.22	0xc30e	No error (0)	mathblog.com		104.21.64.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:01.989146948 CET	8.8.8.8	192.168.2.22	0xc30e	No error (0)	mathblog.com		172.67.187.225	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:02.914139986 CET	8.8.8.8	192.168.2.22	0xcb4c	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:02.914187908 CET	8.8.8.8	192.168.2.22	0xf0a8	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:02.916698933 CET	8.8.8.8	192.168.2.22	0xd0c0	No error (0)	cdn.mathblog.com		172.67.187.225	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:02.916698933 CET	8.8.8.8	192.168.2.22	0xd0c0	No error (0)	cdn.mathblog.com		104.21.64.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:02.938781977 CET	8.8.8.8	192.168.2.22	0x379d	No error (0)	cdn.mathblog.com			65	IN (0x0001)	false
Dec 12, 2023 21:38:03.218106985 CET	8.8.8.8	192.168.2.22	0x8264	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:03.218828917 CET	8.8.8.8	192.168.2.22	0xdd73	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:03.682389975 CET	8.8.8.8	192.168.2.22	0x18d1	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 12, 2023 21:38:03.682430029 CET	8.8.8.8	192.168.2.22	0xbdfd	No error (0)	www.google.com		142.250.189.132	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:03.922367096 CET	8.8.8.8	192.168.2.22	0x6abd	No error (0)	mathblog.com		104.21.64.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:03.922367096 CET	8.8.8.8	192.168.2.22	0x6abd	No error (0)	mathblog.com		172.67.187.225	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:03.944643021 CET	8.8.8.8	192.168.2.22	0x8a2a	No error (0)	mathblog.com			65	IN (0x0001)	false
Dec 12, 2023 21:38:05.055660009 CET	8.8.8.8	192.168.2.22	0x35ca	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:05.055660009 CET	8.8.8.8	192.168.2.22	0x35ca	No error (0)	securepubads46.g.doubleclick.net		142.250.189.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:05.058660030 CET	8.8.8.8	192.168.2.22	0x5717	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:05.214782953 CET	8.8.8.8	192.168.2.22	0x6fa3	No error (0)	cdn.mathblog.com		172.67.187.225	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:05.214782953 CET	8.8.8.8	192.168.2.22	0x6fa3	No error (0)	cdn.mathblog.com		104.21.64.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:05.236951113 CET	8.8.8.8	192.168.2.22	0xe533	No error (0)	cdn.mathblog.com			65	IN (0x0001)	false
Dec 12, 2023 21:38:05.671721935 CET	8.8.8.8	192.168.2.22	0x69c5	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:05.673702002 CET	8.8.8.8	192.168.2.22	0x8157	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:06.287009954 CET	8.8.8.8	192.168.2.22	0x1bc1	No error (0)	exchange.mediavine.com		52.22.5.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:06.287009954 CET	8.8.8.8	192.168.2.22	0x1bc1	No error (0)	exchange.mediavine.com		3.226.96.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:06.287009954 CET	8.8.8.8	192.168.2.22	0x1bc1	No error (0)	exchange.mediavine.com		34.200.69.89	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:06.287009954 CET	8.8.8.8	192.168.2.22	0x1bc1	No error (0)	exchange.mediavine.com		3.230.74.156	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:06.287009954 CET	8.8.8.8	192.168.2.22	0x1bc1	No error (0)	exchange.mediavine.com		44.214.247.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:06.287009954 CET	8.8.8.8	192.168.2.22	0x1bc1	No error (0)	exchange.mediavine.com		52.203.134.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:06.390925884 CET	8.8.8.8	192.168.2.22	0xfc15	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:06.392112970 CET	8.8.8.8	192.168.2.22	0xef64	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:07.555350065 CET	8.8.8.8	192.168.2.22	0xaf57	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:13.865420103 CET	8.8.8.8	192.168.2.22	0x611e	No error (0)	sda.fyi			65	IN (0x0001)	false
Dec 12, 2023 21:38:13.865803957 CET	8.8.8.8	192.168.2.22	0x74c5	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:13.865803957 CET	8.8.8.8	192.168.2.22	0x74c5	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.013083935 CET	8.8.8.8	192.168.2.22	0x34c7	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:15.013083935 CET	8.8.8.8	192.168.2.22	0x34c7	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.042576075 CET	8.8.8.8	192.168.2.22	0x91ad	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:15.045032024 CET	8.8.8.8	192.168.2.22	0x5440	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.045032024 CET	8.8.8.8	192.168.2.22	0x5440	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.045032024 CET	8.8.8.8	192.168.2.22	0x5440	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.045032024 CET	8.8.8.8	192.168.2.22	0x5440	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.046153069 CET	8.8.8.8	192.168.2.22	0x938e	No error (0)	api.rlcdn.com		34.120.155.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.049124002 CET	8.8.8.8	192.168.2.22	0xad35	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.067209959 CET	8.8.8.8	192.168.2.22	0x1020	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.067209959 CET	8.8.8.8	192.168.2.22	0x1020	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.183984041 CET	8.8.8.8	192.168.2.22	0x62f3	No error (0)	sda.fyi			65	IN (0x0001)	false
Dec 12, 2023 21:38:15.453881979 CET	8.8.8.8	192.168.2.22	0x47ef	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:15.456413984 CET	8.8.8.8	192.168.2.22	0x8dc2	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:15.592787027 CET	8.8.8.8	192.168.2.22	0xb524	No error (0)	exchange.mediavine.com		3.230.74.156	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.592787027 CET	8.8.8.8	192.168.2.22	0xb524	No error (0)	exchange.mediavine.com		34.200.69.89	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.592787027 CET	8.8.8.8	192.168.2.22	0xb524	No error (0)	exchange.mediavine.com		3.226.96.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.592787027 CET	8.8.8.8	192.168.2.22	0xb524	No error (0)	exchange.mediavine.com		52.203.134.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.592787027 CET	8.8.8.8	192.168.2.22	0xb524	No error (0)	exchange.mediavine.com		52.22.5.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:15.592787027 CET	8.8.8.8	192.168.2.22	0xb524	No error (0)	exchange.mediavine.com		44.214.247.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.170372963 CET	8.8.8.8	192.168.2.22	0x38b7	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.170372963 CET	8.8.8.8	192.168.2.22	0x38b7	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.170372963 CET	8.8.8.8	192.168.2.22	0x38b7	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.170372963 CET	8.8.8.8	192.168.2.22	0x38b7	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.481347084 CET	8.8.8.8	192.168.2.22	0x2cff	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.481647015 CET	8.8.8.8	192.168.2.22	0xd066	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.508032084 CET	8.8.8.8	192.168.2.22	0x21af	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.508032084 CET	8.8.8.8	192.168.2.22	0x21af	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.508032084 CET	8.8.8.8	192.168.2.22	0x21af	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.533624887 CET	8.8.8.8	192.168.2.22	0x503d	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.533624887 CET	8.8.8.8	192.168.2.22	0x503d	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.544785976 CET	8.8.8.8	192.168.2.22	0x3fc9	No error (0)	acdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.544785976 CET	8.8.8.8	192.168.2.22	0x3fc9	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.544785976 CET	8.8.8.8	192.168.2.22	0x3fc9	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.544785976 CET	8.8.8.8	192.168.2.22	0x3fc9	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.544785976 CET	8.8.8.8	192.168.2.22	0x3fc9	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.553477049 CET	8.8.8.8	192.168.2.22	0x3ac6	No error (0)	acdn.adnxs.com	secure-adnxs.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.560349941 CET	8.8.8.8	192.168.2.22	0xfcd8	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.560631990 CET	8.8.8.8	192.168.2.22	0xbcd1	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.560631990 CET	8.8.8.8	192.168.2.22	0xbcd1	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.563508987 CET	8.8.8.8	192.168.2.22	0xb072	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.564754009 CET	8.8.8.8	192.168.2.22	0xbda8	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.564754009 CET	8.8.8.8	192.168.2.22	0xbda8	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.564754009 CET	8.8.8.8	192.168.2.22	0xbda8	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.564754009 CET	8.8.8.8	192.168.2.22	0xbda8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.199.146.203	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.564754009 CET	8.8.8.8	192.168.2.22	0xbda8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		52.72.185.197	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.564754009 CET	8.8.8.8	192.168.2.22	0xbda8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.223.14.240	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.564754009 CET	8.8.8.8	192.168.2.22	0xbda8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		100.26.115.0	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.564754009 CET	8.8.8.8	192.168.2.22	0xbda8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.213.239.187	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.564754009 CET	8.8.8.8	192.168.2.22	0xbda8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.219.113.11	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.564754009 CET	8.8.8.8	192.168.2.22	0xbda8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		52.207.176.7	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.564754009 CET	8.8.8.8	192.168.2.22	0xbda8	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.207.140.253	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.565291882 CET	8.8.8.8	192.168.2.22	0x2b05	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.565291882 CET	8.8.8.8	192.168.2.22	0x2b05	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.565291882 CET	8.8.8.8	192.168.2.22	0x2b05	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.565310955 CET	8.8.8.8	192.168.2.22	0xbccf	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.565310955 CET	8.8.8.8	192.168.2.22	0xbccf	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.565895081 CET	8.8.8.8	192.168.2.22	0x798f	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.565895081 CET	8.8.8.8	192.168.2.22	0x798f	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.566498041 CET	8.8.8.8	192.168.2.22	0x4c24	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.566498041 CET	8.8.8.8	192.168.2.22	0x4c24	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.566498041 CET	8.8.8.8	192.168.2.22	0x4c24	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.566498041 CET	8.8.8.8	192.168.2.22	0x4c24	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.52	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.101	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.170	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.159	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.158	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.36	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.4	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.53	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		23.105.14.100	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		216.22.16.37	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.142	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.143	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.567182064 CET	8.8.8.8	192.168.2.22	0x6cff	No error (0)	ssbsync-use1.smartadserver.com		23.105.12.171	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.569003105 CET	8.8.8.8	192.168.2.22	0xa23a	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.569003105 CET	8.8.8.8	192.168.2.22	0xa23a	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.584563017 CET	8.8.8.8	192.168.2.22	0x8cf9	No error (0)	rtb.gumgum.com		3.231.76.254	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.584563017 CET	8.8.8.8	192.168.2.22	0x8cf9	No error (0)	rtb.gumgum.com		23.21.78.89	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.584563017 CET	8.8.8.8	192.168.2.22	0x8cf9	No error (0)	rtb.gumgum.com		34.231.114.219	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.584563017 CET	8.8.8.8	192.168.2.22	0x8cf9	No error (0)	rtb.gumgum.com		23.23.136.233	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.584563017 CET	8.8.8.8	192.168.2.22	0x8cf9	No error (0)	rtb.gumgum.com		34.225.221.211	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.584563017 CET	8.8.8.8	192.168.2.22	0x8cf9	No error (0)	rtb.gumgum.com		50.17.48.108	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.584563017 CET	8.8.8.8	192.168.2.22	0x8cf9	No error (0)	rtb.gumgum.com		18.213.45.27	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.584563017 CET	8.8.8.8	192.168.2.22	0x8cf9	No error (0)	rtb.gumgum.com		107.22.89.190	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.619365931 CET	8.8.8.8	192.168.2.22	0xa684	No error (0)	sync.colossusssp.com		172.240.155.68	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.619365931 CET	8.8.8.8	192.168.2.22	0xa684	No error (0)	sync.colossusssp.com		172.240.155.100	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.619365931 CET	8.8.8.8	192.168.2.22	0xa684	No error (0)	sync.colossusssp.com		172.240.155.84	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.619365931 CET	8.8.8.8	192.168.2.22	0xa684	No error (0)	sync.colossusssp.com		172.240.155.116	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.619365931 CET	8.8.8.8	192.168.2.22	0xa684	No error (0)	sync.colossusssp.com		172.240.155.76	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.619365931 CET	8.8.8.8	192.168.2.22	0xa684	No error (0)	sync.colossusssp.com		172.240.155.108	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.629617929 CET	8.8.8.8	192.168.2.22	0x8b81	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.629617929 CET	8.8.8.8	192.168.2.22	0x8b81	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.629617929 CET	8.8.8.8	192.168.2.22	0x8b81	No error (0)	pixel.33across.com		67.202.105.23	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.630770922 CET	8.8.8.8	192.168.2.22	0x8dd	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.642729998 CET	8.8.8.8	192.168.2.22	0xa90f	No error (0)	contextual.media.net		104.110.176.23	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.776802063 CET	8.8.8.8	192.168.2.22	0xd395	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.842588902 CET	8.8.8.8	192.168.2.22	0x69c4	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.842588902 CET	8.8.8.8	192.168.2.22	0x69c4	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.844223976 CET	8.8.8.8	192.168.2.22	0x1e9e	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.909990072 CET	8.8.8.8	192.168.2.22	0xa758	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.909990072 CET	8.8.8.8	192.168.2.22	0xa758	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.909990072 CET	8.8.8.8	192.168.2.22	0xa758	No error (0)	nase.vap.lijit.com		63.251.86.49	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.909990072 CET	8.8.8.8	192.168.2.22	0xa758	No error (0)	nase.vap.lijit.com		63.251.86.50	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.909990072 CET	8.8.8.8	192.168.2.22	0xa758	No error (0)	nase.vap.lijit.com		63.251.86.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:17.911798954 CET	8.8.8.8	192.168.2.22	0xd65	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:17.911798954 CET	8.8.8.8	192.168.2.22	0xd65	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.391566992 CET	8.8.8.8	192.168.2.22	0x82b7	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.391740084 CET	8.8.8.8	192.168.2.22	0x64d3	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.406512022 CET	8.8.8.8	192.168.2.22	0xc32e	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.406512022 CET	8.8.8.8	192.168.2.22	0xc32e	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.406927109 CET	8.8.8.8	192.168.2.22	0xb3fc	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.406927109 CET	8.8.8.8	192.168.2.22	0xb3fc	No error (0)	image6v2.pubmnet.com	pugm88000nfc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.406927109 CET	8.8.8.8	192.168.2.22	0xb3fc	No error (0)	pugm88000nfc.pubmnet.com		104.36.115.113	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.484987020 CET	8.8.8.8	192.168.2.22	0x7e07	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.484987020 CET	8.8.8.8	192.168.2.22	0x7e07	No error (0)	de.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706374884 CET	8.8.8.8	192.168.2.22	0xfc2f	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706917048 CET	8.8.8.8	192.168.2.22	0xd8f1	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.706917048 CET	8.8.8.8	192.168.2.22	0xd8f1	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824193954 CET	8.8.8.8	192.168.2.22	0x3aad	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824496984 CET	8.8.8.8	192.168.2.22	0x326c	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.824496984 CET	8.8.8.8	192.168.2.22	0x326c	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.835597038 CET	8.8.8.8	192.168.2.22	0x2dd2	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.835597038 CET	8.8.8.8	192.168.2.22	0x2dd2	No error (0)	ce-ue1.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.835597038 CET	8.8.8.8	192.168.2.22	0x2dd2	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.835597038 CET	8.8.8.8	192.168.2.22	0x2dd2	No error (0)	nase.vap.lijit.com		63.251.86.49	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.835597038 CET	8.8.8.8	192.168.2.22	0x2dd2	No error (0)	nase.vap.lijit.com		63.251.86.50	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.835597038 CET	8.8.8.8	192.168.2.22	0x2dd2	No error (0)	nase.vap.lijit.com		63.251.86.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:18.838673115 CET	8.8.8.8	192.168.2.22	0xd9b0	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.838673115 CET	8.8.8.8	192.168.2.22	0xd9b0	No error (0)	ce-ue1.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:18.838673115 CET	8.8.8.8	192.168.2.22	0xd9b0	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.029711008 CET	8.8.8.8	192.168.2.22	0x79b	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.029711008 CET	8.8.8.8	192.168.2.22	0x79b	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.030359983 CET	8.8.8.8	192.168.2.22	0xcd46	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.031059027 CET	8.8.8.8	192.168.2.22	0xdf3b	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.031869888 CET	8.8.8.8	192.168.2.22	0x7b1c	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.031869888 CET	8.8.8.8	192.168.2.22	0x7b1c	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.040318966 CET	8.8.8.8	192.168.2.22	0x3912	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.057543993 CET	8.8.8.8	192.168.2.22	0xa0c	No error (0)	cm.g.doubleclick.net		142.250.217.226	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.058502913 CET	8.8.8.8	192.168.2.22	0x30ac	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.070384026 CET	8.8.8.8	192.168.2.22	0x6feb	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.070384026 CET	8.8.8.8	192.168.2.22	0x6feb	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.070384026 CET	8.8.8.8	192.168.2.22	0x6feb	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.070830107 CET	8.8.8.8	192.168.2.22	0xe1c9	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.070830107 CET	8.8.8.8	192.168.2.22	0xe1c9	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.070830107 CET	8.8.8.8	192.168.2.22	0xe1c9	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.070830107 CET	8.8.8.8	192.168.2.22	0xe1c9	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.070830107 CET	8.8.8.8	192.168.2.22	0xe1c9	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.089229107 CET	8.8.8.8	192.168.2.22	0x64f3	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.089229107 CET	8.8.8.8	192.168.2.22	0x64f3	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.093364954 CET	8.8.8.8	192.168.2.22	0xb892	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.274224997 CET	8.8.8.8	192.168.2.22	0x88b1	No error (0)	hde.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.274224997 CET	8.8.8.8	192.168.2.22	0x88b1	No error (0)	hde.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.414423943 CET	8.8.8.8	192.168.2.22	0x498c	No error (0)	s.amazon-adsystem.com		209.54.182.161	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.416471004 CET	8.8.8.8	192.168.2.22	0x9e3a	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.416471004 CET	8.8.8.8	192.168.2.22	0x9e3a	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.416471004 CET	8.8.8.8	192.168.2.22	0x9e3a	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.416471004 CET	8.8.8.8	192.168.2.22	0x9e3a	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.416471004 CET	8.8.8.8	192.168.2.22	0x9e3a	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.417989969 CET	8.8.8.8	192.168.2.22	0x1ff5	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.425283909 CET	8.8.8.8	192.168.2.22	0x7e5f	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.431813002 CET	8.8.8.8	192.168.2.22	0xe6dd	No error (0)	match.prod.bidr.io		52.86.218.58	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.431813002 CET	8.8.8.8	192.168.2.22	0xe6dd	No error (0)	match.prod.bidr.io		54.145.124.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.431813002 CET	8.8.8.8	192.168.2.22	0xe6dd	No error (0)	match.prod.bidr.io		54.156.40.244	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.431813002 CET	8.8.8.8	192.168.2.22	0xe6dd	No error (0)	match.prod.bidr.io		52.7.232.4	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.431813002 CET	8.8.8.8	192.168.2.22	0xe6dd	No error (0)	match.prod.bidr.io		52.73.40.218	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.431813002 CET	8.8.8.8	192.168.2.22	0xe6dd	No error (0)	match.prod.bidr.io		54.157.55.121	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.431813002 CET	8.8.8.8	192.168.2.22	0xe6dd	No error (0)	match.prod.bidr.io		54.157.204.230	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.431813002 CET	8.8.8.8	192.168.2.22	0xe6dd	No error (0)	match.prod.bidr.io		52.86.134.182	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.486053944 CET	8.8.8.8	192.168.2.22	0x8e97	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.486053944 CET	8.8.8.8	192.168.2.22	0x8e97	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.486053944 CET	8.8.8.8	192.168.2.22	0x8e97	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.486053944 CET	8.8.8.8	192.168.2.22	0x8e97	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.489510059 CET	8.8.8.8	192.168.2.22	0x5d7b	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		211.120.53.204	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		124.146.153.168	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		211.120.53.206	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		124.146.153.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		211.120.53.201	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		124.146.153.165	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		124.146.153.167	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		124.146.153.161	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		124.146.153.170	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		211.120.53.205	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		124.146.153.166	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		124.146.153.164	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		211.120.53.203	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		211.120.53.202	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		211.120.53.200	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		124.146.153.169	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		124.146.153.160	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.490703106 CET	8.8.8.8	192.168.2.22	0xffd7	No error (0)	tg.dr.socdm.com		124.146.153.162	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.591594934 CET	8.8.8.8	192.168.2.22	0x8d0e	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.901597023 CET	8.8.8.8	192.168.2.22	0xc4c4	No error (0)	a.audrte.com		34.251.97.118	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.901597023 CET	8.8.8.8	192.168.2.22	0xc4c4	No error (0)	a.audrte.com		54.154.2.209	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.901597023 CET	8.8.8.8	192.168.2.22	0xc4c4	No error (0)	a.audrte.com		52.16.120.138	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.901597023 CET	8.8.8.8	192.168.2.22	0xc4c4	No error (0)	a.audrte.com		54.246.67.235	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.901597023 CET	8.8.8.8	192.168.2.22	0xc4c4	No error (0)	a.audrte.com		52.48.177.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.901597023 CET	8.8.8.8	192.168.2.22	0xc4c4	No error (0)	a.audrte.com		3.248.68.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.961445093 CET	8.8.8.8	192.168.2.22	0x6f8	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.965183020 CET	8.8.8.8	192.168.2.22	0xb0fe	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.965183020 CET	8.8.8.8	192.168.2.22	0xb0fe	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.965183020 CET	8.8.8.8	192.168.2.22	0xb0fe	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.970437050 CET	8.8.8.8	192.168.2.22	0xb5b8	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.970437050 CET	8.8.8.8	192.168.2.22	0xb5b8	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.970437050 CET	8.8.8.8	192.168.2.22	0xb5b8	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.970437050 CET	8.8.8.8	192.168.2.22	0xb5b8	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.970437050 CET	8.8.8.8	192.168.2.22	0xb5b8	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971286058 CET	8.8.8.8	192.168.2.22	0x7925	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971461058 CET	8.8.8.8	192.168.2.22	0x841f	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971461058 CET	8.8.8.8	192.168.2.22	0x841f	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971461058 CET	8.8.8.8	192.168.2.22	0x841f	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971833944 CET	8.8.8.8	192.168.2.22	0x7611	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971833944 CET	8.8.8.8	192.168.2.22	0x7611	No error (0)	na-ice.360yield.com		18.214.147.224	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971833944 CET	8.8.8.8	192.168.2.22	0x7611	No error (0)	na-ice.360yield.com		44.197.77.254	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971833944 CET	8.8.8.8	192.168.2.22	0x7611	No error (0)	na-ice.360yield.com		3.216.224.228	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971833944 CET	8.8.8.8	192.168.2.22	0x7611	No error (0)	na-ice.360yield.com		52.0.134.40	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971833944 CET	8.8.8.8	192.168.2.22	0x7611	No error (0)	na-ice.360yield.com		3.210.80.44	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971833944 CET	8.8.8.8	192.168.2.22	0x7611	No error (0)	na-ice.360yield.com		18.214.215.239	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971833944 CET	8.8.8.8	192.168.2.22	0x7611	No error (0)	na-ice.360yield.com		52.1.92.31	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.971833944 CET	8.8.8.8	192.168.2.22	0x7611	No error (0)	na-ice.360yield.com		52.204.188.212	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.974368095 CET	8.8.8.8	192.168.2.22	0x89a0	No error (0)	crb.kargo.com		44.194.252.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.974368095 CET	8.8.8.8	192.168.2.22	0x89a0	No error (0)	crb.kargo.com		18.232.190.152	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.974368095 CET	8.8.8.8	192.168.2.22	0x89a0	No error (0)	crb.kargo.com		44.217.198.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.974368095 CET	8.8.8.8	192.168.2.22	0x89a0	No error (0)	crb.kargo.com		34.224.153.9	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.974368095 CET	8.8.8.8	192.168.2.22	0x89a0	No error (0)	crb.kargo.com		44.198.25.64	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.974368095 CET	8.8.8.8	192.168.2.22	0x89a0	No error (0)	crb.kargo.com		3.225.187.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.977186918 CET	8.8.8.8	192.168.2.22	0xa353	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.977186918 CET	8.8.8.8	192.168.2.22	0xa353	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.977229118 CET	8.8.8.8	192.168.2.22	0xe511	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.977229118 CET	8.8.8.8	192.168.2.22	0xe511	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.977229118 CET	8.8.8.8	192.168.2.22	0xe511	No error (0)	nase.vap.lijit.com		63.251.86.49	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.977229118 CET	8.8.8.8	192.168.2.22	0xe511	No error (0)	nase.vap.lijit.com		63.251.86.50	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.977229118 CET	8.8.8.8	192.168.2.22	0xe511	No error (0)	nase.vap.lijit.com		63.251.86.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.980386972 CET	8.8.8.8	192.168.2.22	0x227d	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.980386972 CET	8.8.8.8	192.168.2.22	0x227d	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.980386972 CET	8.8.8.8	192.168.2.22	0x227d	No error (0)	global.px.quantserve.com		192.184.69.201	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.980386972 CET	8.8.8.8	192.168.2.22	0x227d	No error (0)	global.px.quantserve.com		192.184.69.239	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.980386972 CET	8.8.8.8	192.168.2.22	0x227d	No error (0)	global.px.quantserve.com		192.184.69.167	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.980386972 CET	8.8.8.8	192.168.2.22	0x227d	No error (0)	global.px.quantserve.com		192.184.69.252	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.980386972 CET	8.8.8.8	192.168.2.22	0x227d	No error (0)	global.px.quantserve.com		192.184.69.215	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.980421066 CET	8.8.8.8	192.168.2.22	0x909d	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.980421066 CET	8.8.8.8	192.168.2.22	0x909d	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:19.980751038 CET	8.8.8.8	192.168.2.22	0xd620	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:19.981776953 CET	8.8.8.8	192.168.2.22	0x2db0	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.015594959 CET	8.8.8.8	192.168.2.22	0x4462	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.017569065 CET	8.8.8.8	192.168.2.22	0xe749	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.081660032 CET	8.8.8.8	192.168.2.22	0x461f	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.081824064 CET	8.8.8.8	192.168.2.22	0x6a17	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.082104921 CET	8.8.8.8	192.168.2.22	0x1170	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.082104921 CET	8.8.8.8	192.168.2.22	0x1170	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.090399981 CET	8.8.8.8	192.168.2.22	0x3b2c	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.111835957 CET	8.8.8.8	192.168.2.22	0xcb25	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.111835957 CET	8.8.8.8	192.168.2.22	0xcb25	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.111835957 CET	8.8.8.8	192.168.2.22	0xcb25	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.113323927 CET	8.8.8.8	192.168.2.22	0x2128	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.113323927 CET	8.8.8.8	192.168.2.22	0x2128	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.113323927 CET	8.8.8.8	192.168.2.22	0x2128	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.115556002 CET	8.8.8.8	192.168.2.22	0xaf97	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.116610050 CET	8.8.8.8	192.168.2.22	0xbef9	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.116610050 CET	8.8.8.8	192.168.2.22	0xbef9	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.207.23.148	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.116610050 CET	8.8.8.8	192.168.2.22	0xbef9	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.234.129.75	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.116610050 CET	8.8.8.8	192.168.2.22	0xbef9	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.199.214.171	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.116610050 CET	8.8.8.8	192.168.2.22	0xbef9	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.233.75.175	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.117486954 CET	8.8.8.8	192.168.2.22	0xa118	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.117486954 CET	8.8.8.8	192.168.2.22	0xa118	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.119201899 CET	8.8.8.8	192.168.2.22	0xcd2c	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.119201899 CET	8.8.8.8	192.168.2.22	0xcd2c	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.119201899 CET	8.8.8.8	192.168.2.22	0xcd2c	No error (0)	pug-njrpb.pubmnet.com		162.248.18.37	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.125993013 CET	8.8.8.8	192.168.2.22	0xd1d4	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.309547901 CET	8.8.8.8	192.168.2.22	0x6414	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.309547901 CET	8.8.8.8	192.168.2.22	0x6414	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.309547901 CET	8.8.8.8	192.168.2.22	0x6414	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.309547901 CET	8.8.8.8	192.168.2.22	0x6414	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.309547901 CET	8.8.8.8	192.168.2.22	0x6414	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.341198921 CET	8.8.8.8	192.168.2.22	0x835a	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.341198921 CET	8.8.8.8	192.168.2.22	0x835a	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.342255116 CET	8.8.8.8	192.168.2.22	0x4f28	No error (0)	sync.adotmob.com		45.137.176.88	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.342900038 CET	8.8.8.8	192.168.2.22	0xc6f2	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:20.640908003 CET	8.8.8.8	192.168.2.22	0x2837	No error (0)	sync.srv.stackadapt.com		52.86.155.246	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.640908003 CET	8.8.8.8	192.168.2.22	0x2837	No error (0)	sync.srv.stackadapt.com		54.160.62.46	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.640908003 CET	8.8.8.8	192.168.2.22	0x2837	No error (0)	sync.srv.stackadapt.com		54.147.41.158	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.640908003 CET	8.8.8.8	192.168.2.22	0x2837	No error (0)	sync.srv.stackadapt.com		54.211.244.166	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.640908003 CET	8.8.8.8	192.168.2.22	0x2837	No error (0)	sync.srv.stackadapt.com		54.159.41.249	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.640908003 CET	8.8.8.8	192.168.2.22	0x2837	No error (0)	sync.srv.stackadapt.com		54.152.252.123	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.640908003 CET	8.8.8.8	192.168.2.22	0x2837	No error (0)	sync.srv.stackadapt.com		54.209.153.200	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.640908003 CET	8.8.8.8	192.168.2.22	0x2837	No error (0)	sync.srv.stackadapt.com		54.227.169.0	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.663338900 CET	8.8.8.8	192.168.2.22	0xd54c	No error (0)	sync.ipredictive.com		54.146.33.131	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.663338900 CET	8.8.8.8	192.168.2.22	0xd54c	No error (0)	sync.ipredictive.com		54.162.157.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.663338900 CET	8.8.8.8	192.168.2.22	0xd54c	No error (0)	sync.ipredictive.com		52.7.115.38	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.663338900 CET	8.8.8.8	192.168.2.22	0xd54c	No error (0)	sync.ipredictive.com		52.86.247.227	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.663338900 CET	8.8.8.8	192.168.2.22	0xd54c	No error (0)	sync.ipredictive.com		52.72.221.118	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.663338900 CET	8.8.8.8	192.168.2.22	0xd54c	No error (0)	sync.ipredictive.com		52.3.160.15	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.663338900 CET	8.8.8.8	192.168.2.22	0xd54c	No error (0)	sync.ipredictive.com		52.72.99.93	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.663338900 CET	8.8.8.8	192.168.2.22	0xd54c	No error (0)	sync.ipredictive.com		52.73.59.200	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.975233078 CET	8.8.8.8	192.168.2.22	0xfb84	No error (0)	exchange.mediavine.com		52.22.5.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.975233078 CET	8.8.8.8	192.168.2.22	0xfb84	No error (0)	exchange.mediavine.com		3.226.96.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.975233078 CET	8.8.8.8	192.168.2.22	0xfb84	No error (0)	exchange.mediavine.com		34.200.69.89	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.975233078 CET	8.8.8.8	192.168.2.22	0xfb84	No error (0)	exchange.mediavine.com		3.230.74.156	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.975233078 CET	8.8.8.8	192.168.2.22	0xfb84	No error (0)	exchange.mediavine.com		44.214.247.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:20.975233078 CET	8.8.8.8	192.168.2.22	0xfb84	No error (0)	exchange.mediavine.com		52.203.134.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.097290993 CET	8.8.8.8	192.168.2.22	0xe719	No error (0)	33across-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.209646940 CET	8.8.8.8	192.168.2.22	0xea74	No error (0)	33across-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.228151083 CET	8.8.8.8	192.168.2.22	0x2980	No error (0)	pagead-googlehosted.l.google.com		192.178.50.33	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.484110117 CET	8.8.8.8	192.168.2.22	0x2d67	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.484110117 CET	8.8.8.8	192.168.2.22	0x2d67	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.164.84.102	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.484169960 CET	8.8.8.8	192.168.2.22	0xe509	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.487185955 CET	8.8.8.8	192.168.2.22	0xe8d6	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.505415916 CET	8.8.8.8	192.168.2.22	0x6e12	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.505415916 CET	8.8.8.8	192.168.2.22	0x6e12	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.506681919 CET	8.8.8.8	192.168.2.22	0x89ae	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.506681919 CET	8.8.8.8	192.168.2.22	0x89ae	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.506681919 CET	8.8.8.8	192.168.2.22	0x89ae	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.514457941 CET	8.8.8.8	192.168.2.22	0xacfb	No error (0)	sb.scorecardresearch.com		18.238.49.99	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.514457941 CET	8.8.8.8	192.168.2.22	0xacfb	No error (0)	sb.scorecardresearch.com		18.238.49.124	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.514457941 CET	8.8.8.8	192.168.2.22	0xacfb	No error (0)	sb.scorecardresearch.com		18.238.49.52	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.514457941 CET	8.8.8.8	192.168.2.22	0xacfb	No error (0)	sb.scorecardresearch.com		18.238.49.74	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.619818926 CET	8.8.8.8	192.168.2.22	0xffe8	No error (0)	oa.openxcdn.net		34.102.146.192	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.620101929 CET	8.8.8.8	192.168.2.22	0x5f5	No error (0)	pghub.io		35.241.45.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.622539043 CET	8.8.8.8	192.168.2.22	0xf733	No error (0)	cdn.opecloud.com	dta23xhexutk5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.625515938 CET	8.8.8.8	192.168.2.22	0x7baf	No error (0)	cdn.opecloud.com	dta23xhexutk5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.625515938 CET	8.8.8.8	192.168.2.22	0x7baf	No error (0)	dta23xhexutk5.cloudfront.net		18.164.124.81	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.625515938 CET	8.8.8.8	192.168.2.22	0x7baf	No error (0)	dta23xhexutk5.cloudfront.net		18.164.124.56	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.625515938 CET	8.8.8.8	192.168.2.22	0x7baf	No error (0)	dta23xhexutk5.cloudfront.net		18.164.124.32	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.625515938 CET	8.8.8.8	192.168.2.22	0x7baf	No error (0)	dta23xhexutk5.cloudfront.net		18.164.124.93	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:21.810014009 CET	8.8.8.8	192.168.2.22	0x2be1	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.811110973 CET	8.8.8.8	192.168.2.22	0xbcc2	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:21.986104012 CET	8.8.8.8	192.168.2.22	0xc8be	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.099261999 CET	8.8.8.8	192.168.2.22	0xc853	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.099261999 CET	8.8.8.8	192.168.2.22	0xc853	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.100438118 CET	8.8.8.8	192.168.2.22	0x858e	No error (0)	pixel-sync.sitescout.com	pixel-a.sitescout.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.101376057 CET	8.8.8.8	192.168.2.22	0x3235	No error (0)	aax-eu.amazon-adsystem.com		67.220.226.232	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.102686882 CET	8.8.8.8	192.168.2.22	0x467e	No error (0)	pixel-sync.sitescout.com	pixel-a.sitescout.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.102686882 CET	8.8.8.8	192.168.2.22	0x467e	No error (0)	pixel-a.sitescout.com		207.198.113.86	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.113584995 CET	8.8.8.8	192.168.2.22	0xb946	No error (0)	aorta.clickagy.com		34.197.163.191	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.113584995 CET	8.8.8.8	192.168.2.22	0xb946	No error (0)	aorta.clickagy.com		35.169.93.15	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.113584995 CET	8.8.8.8	192.168.2.22	0xb946	No error (0)	aorta.clickagy.com		52.20.73.112	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.113584995 CET	8.8.8.8	192.168.2.22	0xb946	No error (0)	aorta.clickagy.com		44.214.186.206	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.132002115 CET	8.8.8.8	192.168.2.22	0x7d29	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.132002115 CET	8.8.8.8	192.168.2.22	0x7d29	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.133290052 CET	8.8.8.8	192.168.2.22	0xa1f7	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.133290052 CET	8.8.8.8	192.168.2.22	0xa1f7	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.191082954 CET	8.8.8.8	192.168.2.22	0x4016	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.212714911 CET	8.8.8.8	192.168.2.22	0x84ce	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.212714911 CET	8.8.8.8	192.168.2.22	0x84ce	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.212714911 CET	8.8.8.8	192.168.2.22	0x84ce	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.465249062 CET	8.8.8.8	192.168.2.22	0x8ff3	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.466171026 CET	8.8.8.8	192.168.2.22	0x6af2	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.605587959 CET	8.8.8.8	192.168.2.22	0x4d09	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.605587959 CET	8.8.8.8	192.168.2.22	0x4d09	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.606715918 CET	8.8.8.8	192.168.2.22	0x1d1b	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.611166000 CET	8.8.8.8	192.168.2.22	0xf1ee	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.611166000 CET	8.8.8.8	192.168.2.22	0xf1ee	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.611166000 CET	8.8.8.8	192.168.2.22	0xf1ee	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.611166000 CET	8.8.8.8	192.168.2.22	0xf1ee	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.611731052 CET	8.8.8.8	192.168.2.22	0x563a	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.611731052 CET	8.8.8.8	192.168.2.22	0x563a	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.613354921 CET	8.8.8.8	192.168.2.22	0x66f	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.615391016 CET	8.8.8.8	192.168.2.22	0x8165	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.618386984 CET	8.8.8.8	192.168.2.22	0xc4cf	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.618386984 CET	8.8.8.8	192.168.2.22	0xc4cf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.235.210.7	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.618386984 CET	8.8.8.8	192.168.2.22	0xc4cf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.207.153.119	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.618386984 CET	8.8.8.8	192.168.2.22	0xc4cf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		18.208.112.85	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.618386984 CET	8.8.8.8	192.168.2.22	0xc4cf	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.207.23.148	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.619369030 CET	8.8.8.8	192.168.2.22	0xc1e0	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.640733004 CET	8.8.8.8	192.168.2.22	0x2514	No error (0)	crb.kargo.com		44.194.252.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.640733004 CET	8.8.8.8	192.168.2.22	0x2514	No error (0)	crb.kargo.com		18.232.190.152	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.640733004 CET	8.8.8.8	192.168.2.22	0x2514	No error (0)	crb.kargo.com		44.217.198.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.640733004 CET	8.8.8.8	192.168.2.22	0x2514	No error (0)	crb.kargo.com		34.224.153.9	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.640733004 CET	8.8.8.8	192.168.2.22	0x2514	No error (0)	crb.kargo.com		44.198.25.64	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.640733004 CET	8.8.8.8	192.168.2.22	0x2514	No error (0)	crb.kargo.com		3.225.187.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.843579054 CET	8.8.8.8	192.168.2.22	0xcac4	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.843579054 CET	8.8.8.8	192.168.2.22	0xcac4	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.843579054 CET	8.8.8.8	192.168.2.22	0xcac4	No error (0)	pug-njrpb.pubmnet.com		162.248.18.37	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.845607042 CET	8.8.8.8	192.168.2.22	0x4163	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.845607042 CET	8.8.8.8	192.168.2.22	0x4163	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.847933054 CET	8.8.8.8	192.168.2.22	0x1a37	No error (0)	s.amazon-adsystem.com		209.54.182.161	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.854409933 CET	8.8.8.8	192.168.2.22	0xd6ee	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.854409933 CET	8.8.8.8	192.168.2.22	0xd6ee	No error (0)	image4-v2.pubmnet.com	spug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.854409933 CET	8.8.8.8	192.168.2.22	0xd6ee	No error (0)	spug-njrpb.pubmnet.com		162.248.18.34	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:22.854902983 CET	8.8.8.8	192.168.2.22	0xd45d	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.854902983 CET	8.8.8.8	192.168.2.22	0xd45d	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.917717934 CET	8.8.8.8	192.168.2.22	0xa504	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.917932034 CET	8.8.8.8	192.168.2.22	0xb99f	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:22.917999029 CET	8.8.8.8	192.168.2.22	0xf09f	No error (0)	invstatic101.creativecdn.com		34.96.70.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.107441902 CET	8.8.8.8	192.168.2.22	0xa9a4	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.107441902 CET	8.8.8.8	192.168.2.22	0xa9a4	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.107736111 CET	8.8.8.8	192.168.2.22	0x99e6	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.107736111 CET	8.8.8.8	192.168.2.22	0x99e6	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.185653925 CET	8.8.8.8	192.168.2.22	0x9643	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.185653925 CET	8.8.8.8	192.168.2.22	0x9643	No error (0)	idaas-ext.cph.liveintent.com		54.235.170.236	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.185653925 CET	8.8.8.8	192.168.2.22	0x9643	No error (0)	idaas-ext.cph.liveintent.com		44.198.9.46	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.185653925 CET	8.8.8.8	192.168.2.22	0x9643	No error (0)	idaas-ext.cph.liveintent.com		34.197.7.44	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.185653925 CET	8.8.8.8	192.168.2.22	0x9643	No error (0)	idaas-ext.cph.liveintent.com		107.21.52.231	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.185653925 CET	8.8.8.8	192.168.2.22	0x9643	No error (0)	idaas-ext.cph.liveintent.com		3.222.179.146	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.185653925 CET	8.8.8.8	192.168.2.22	0x9643	No error (0)	idaas-ext.cph.liveintent.com		3.212.146.122	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.185653925 CET	8.8.8.8	192.168.2.22	0x9643	No error (0)	idaas-ext.cph.liveintent.com		54.145.255.200	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.185653925 CET	8.8.8.8	192.168.2.22	0x9643	No error (0)	idaas-ext.cph.liveintent.com		52.1.125.115	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.186490059 CET	8.8.8.8	192.168.2.22	0xe483	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.186490059 CET	8.8.8.8	192.168.2.22	0xe483	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.119	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.186490059 CET	8.8.8.8	192.168.2.22	0xe483	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.80	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.186490059 CET	8.8.8.8	192.168.2.22	0xe483	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.186490059 CET	8.8.8.8	192.168.2.22	0xe483	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.91	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.187437057 CET	8.8.8.8	192.168.2.22	0x1f92	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.188311100 CET	8.8.8.8	192.168.2.22	0x7282	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.188311100 CET	8.8.8.8	192.168.2.22	0x7282	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.93.251.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.188311100 CET	8.8.8.8	192.168.2.22	0x7282	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.215.112.158	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.188311100 CET	8.8.8.8	192.168.2.22	0x7282	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		18.215.67.38	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.188311100 CET	8.8.8.8	192.168.2.22	0x7282	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.197.216.192	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:38:23.190711021 CET	8.8.8.8	192.168.2.22	0xaad6	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.192261934 CET	8.8.8.8	192.168.2.22	0x28ec	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.196079969 CET	8.8.8.8	192.168.2.22	0xb785	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.219364882 CET	8.8.8.8	192.168.2.22	0xf9ad	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:38:23.220155001 CET	8.8.8.8	192.168.2.22	0xd6a1	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:52.845616102 CET	8.8.8.8	192.168.2.22	0x4720	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:52.845616102 CET	8.8.8.8	192.168.2.22	0x4720	No error (0)	clients.l.google.com		142.250.217.206	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:52.845702887 CET	8.8.8.8	192.168.2.22	0xb741	No error (0)	accounts.google.com		192.178.50.77	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:52.850616932 CET	8.8.8.8	192.168.2.22	0x9692	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:54.070226908 CET	8.8.8.8	192.168.2.22	0x38c6	No error (0)	www.interactiveds.com.au	interactiveds.com.au		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:54.070226908 CET	8.8.8.8	192.168.2.22	0x38c6	No error (0)	interactiveds.com.au		203.210.102.39	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:54.077595949 CET	8.8.8.8	192.168.2.22	0x74a0	No error (0)	www.interactiveds.com.au	interactiveds.com.au		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:54.988286018 CET	8.8.8.8	192.168.2.22	0x5f41	No error (0)	mathblog.com		104.21.64.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:54.988286018 CET	8.8.8.8	192.168.2.22	0x5f41	No error (0)	mathblog.com		172.67.187.225	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:55.044238091 CET	8.8.8.8	192.168.2.22	0xff3	No error (0)	mathblog.com			65	IN (0x0001)	false
Dec 12, 2023 21:39:55.203794003 CET	8.8.8.8	192.168.2.22	0x9a4a	No error (0)	www.interactiveds.com.au	interactiveds.com.au		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:55.217351913 CET	8.8.8.8	192.168.2.22	0xd309	No error (0)	www.interactiveds.com.au	interactiveds.com.au		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:55.217351913 CET	8.8.8.8	192.168.2.22	0xd309	No error (0)	interactiveds.com.au		203.210.102.39	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:55.801697969 CET	8.8.8.8	192.168.2.22	0x3cb8	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:55.804368019 CET	8.8.8.8	192.168.2.22	0x368b	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:55.846004009 CET	8.8.8.8	192.168.2.22	0xb6f5	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:55.846028090 CET	8.8.8.8	192.168.2.22	0xd911	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:57.016788960 CET	8.8.8.8	192.168.2.22	0xe130	No error (0)	mathblog.com			65	IN (0x0001)	false
Dec 12, 2023 21:39:57.020453930 CET	8.8.8.8	192.168.2.22	0x92d4	No error (0)	mathblog.com		172.67.187.225	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.020453930 CET	8.8.8.8	192.168.2.22	0x92d4	No error (0)	mathblog.com		104.21.64.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.245047092 CET	8.8.8.8	192.168.2.22	0xf632	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:57.246934891 CET	8.8.8.8	192.168.2.22	0x3ec9	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:57.247051954 CET	8.8.8.8	192.168.2.22	0xd1a8	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:57.248006105 CET	8.8.8.8	192.168.2.22	0xfa73	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:39:57.248049021 CET	8.8.8.8	192.168.2.22	0x4a44	No error (0)	www.google.com		142.250.189.132	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.250178099 CET	8.8.8.8	192.168.2.22	0x5873	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 12, 2023 21:39:57.259330034 CET	8.8.8.8	192.168.2.22	0xf4c5	No error (0)	exchange.mediavine.com		3.230.74.156	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.259330034 CET	8.8.8.8	192.168.2.22	0xf4c5	No error (0)	exchange.mediavine.com		52.203.134.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.259330034 CET	8.8.8.8	192.168.2.22	0xf4c5	No error (0)	exchange.mediavine.com		44.214.247.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.259330034 CET	8.8.8.8	192.168.2.22	0xf4c5	No error (0)	exchange.mediavine.com		34.200.69.89	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.259330034 CET	8.8.8.8	192.168.2.22	0xf4c5	No error (0)	exchange.mediavine.com		3.226.96.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:57.259330034 CET	8.8.8.8	192.168.2.22	0xf4c5	No error (0)	exchange.mediavine.com		52.22.5.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:39:58.053096056 CET	8.8.8.8	192.168.2.22	0xfe69	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:00.712816954 CET	8.8.8.8	192.168.2.22	0x1603	No error (0)	interactiveds.com.au		203.210.102.39	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.525532007 CET	8.8.8.8	192.168.2.22	0x8bb2	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.525532007 CET	8.8.8.8	192.168.2.22	0x8bb2	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.530178070 CET	8.8.8.8	192.168.2.22	0xf164	No error (0)	sda.fyi			65	IN (0x0001)	false
Dec 12, 2023 21:40:02.562088966 CET	8.8.8.8	192.168.2.22	0x8b0e	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:02.562110901 CET	8.8.8.8	192.168.2.22	0xcc74	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:02.573831081 CET	8.8.8.8	192.168.2.22	0xafc4	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:02.573831081 CET	8.8.8.8	192.168.2.22	0xafc4	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.573960066 CET	8.8.8.8	192.168.2.22	0x6bd7	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:02.674609900 CET	8.8.8.8	192.168.2.22	0x5b33	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.696785927 CET	8.8.8.8	192.168.2.22	0x62f8	No error (0)	exchange.mediavine.com		52.203.134.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.696785927 CET	8.8.8.8	192.168.2.22	0x62f8	No error (0)	exchange.mediavine.com		3.230.74.156	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.696785927 CET	8.8.8.8	192.168.2.22	0x62f8	No error (0)	exchange.mediavine.com		3.226.96.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.696785927 CET	8.8.8.8	192.168.2.22	0x62f8	No error (0)	exchange.mediavine.com		52.22.5.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.696785927 CET	8.8.8.8	192.168.2.22	0x62f8	No error (0)	exchange.mediavine.com		34.200.69.89	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:02.696785927 CET	8.8.8.8	192.168.2.22	0x62f8	No error (0)	exchange.mediavine.com		44.214.247.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.235294104 CET	8.8.8.8	192.168.2.22	0x706a	No error (0)	oa.openxcdn.net		34.102.146.192	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.238185883 CET	8.8.8.8	192.168.2.22	0xe54e	No error (0)	sb.scorecardresearch.com		18.173.219.84	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.238185883 CET	8.8.8.8	192.168.2.22	0xe54e	No error (0)	sb.scorecardresearch.com		18.173.219.40	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.238185883 CET	8.8.8.8	192.168.2.22	0xe54e	No error (0)	sb.scorecardresearch.com		18.173.219.111	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.238185883 CET	8.8.8.8	192.168.2.22	0xe54e	No error (0)	sb.scorecardresearch.com		18.173.219.113	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.238501072 CET	8.8.8.8	192.168.2.22	0x147e	No error (0)	sda.fyi			65	IN (0x0001)	false
Dec 12, 2023 21:40:03.240221024 CET	8.8.8.8	192.168.2.22	0xf384	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.240221024 CET	8.8.8.8	192.168.2.22	0xf384	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.321883917 CET	8.8.8.8	192.168.2.22	0x8d10	No error (0)	pghub.io		35.241.45.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.323287964 CET	8.8.8.8	192.168.2.22	0xe0c7	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:03.323287964 CET	8.8.8.8	192.168.2.22	0xe0c7	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.164.84.102	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.323391914 CET	8.8.8.8	192.168.2.22	0x489f	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:03.323601961 CET	8.8.8.8	192.168.2.22	0xa0b4	No error (0)	cdn.opecloud.com	dta23xhexutk5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:03.325397968 CET	8.8.8.8	192.168.2.22	0x5f29	No error (0)	cdn.opecloud.com	dta23xhexutk5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:03.325397968 CET	8.8.8.8	192.168.2.22	0x5f29	No error (0)	dta23xhexutk5.cloudfront.net		18.164.124.32	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.325397968 CET	8.8.8.8	192.168.2.22	0x5f29	No error (0)	dta23xhexutk5.cloudfront.net		18.164.124.93	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.325397968 CET	8.8.8.8	192.168.2.22	0x5f29	No error (0)	dta23xhexutk5.cloudfront.net		18.164.124.56	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:03.325397968 CET	8.8.8.8	192.168.2.22	0x5f29	No error (0)	dta23xhexutk5.cloudfront.net		18.164.124.81	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.000925064 CET	8.8.8.8	192.168.2.22	0x600e	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.000925064 CET	8.8.8.8	192.168.2.22	0x600e	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.002772093 CET	8.8.8.8	192.168.2.22	0x59d9	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003223896 CET	8.8.8.8	192.168.2.22	0xf3c4	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003223896 CET	8.8.8.8	192.168.2.22	0xf3c4	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003223896 CET	8.8.8.8	192.168.2.22	0xf3c4	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003223896 CET	8.8.8.8	192.168.2.22	0xf3c4	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003279924 CET	8.8.8.8	192.168.2.22	0xd8a4	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003279924 CET	8.8.8.8	192.168.2.22	0xd8a4	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003279924 CET	8.8.8.8	192.168.2.22	0xd8a4	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003279924 CET	8.8.8.8	192.168.2.22	0xd8a4	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.210.17.75	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003279924 CET	8.8.8.8	192.168.2.22	0xd8a4	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		100.25.234.4	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003279924 CET	8.8.8.8	192.168.2.22	0xd8a4	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		107.23.32.236	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003279924 CET	8.8.8.8	192.168.2.22	0xd8a4	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.193.215.228	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003279924 CET	8.8.8.8	192.168.2.22	0xd8a4	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		18.235.42.252	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003279924 CET	8.8.8.8	192.168.2.22	0xd8a4	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.208.74.235	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003279924 CET	8.8.8.8	192.168.2.22	0xd8a4	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		107.20.140.143	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003279924 CET	8.8.8.8	192.168.2.22	0xd8a4	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		34.236.126.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003797054 CET	8.8.8.8	192.168.2.22	0x6f51	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003797054 CET	8.8.8.8	192.168.2.22	0x6f51	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003797054 CET	8.8.8.8	192.168.2.22	0x6f51	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003891945 CET	8.8.8.8	192.168.2.22	0x2012	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003891945 CET	8.8.8.8	192.168.2.22	0x2012	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003935099 CET	8.8.8.8	192.168.2.22	0x3ef9	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003935099 CET	8.8.8.8	192.168.2.22	0x3ef9	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003935099 CET	8.8.8.8	192.168.2.22	0x3ef9	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.003935099 CET	8.8.8.8	192.168.2.22	0x3ef9	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.004564047 CET	8.8.8.8	192.168.2.22	0x5b73	No error (0)	sync.colossusssp.com		172.240.155.68	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.004564047 CET	8.8.8.8	192.168.2.22	0x5b73	No error (0)	sync.colossusssp.com		172.240.155.100	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.004564047 CET	8.8.8.8	192.168.2.22	0x5b73	No error (0)	sync.colossusssp.com		172.240.155.84	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.004564047 CET	8.8.8.8	192.168.2.22	0x5b73	No error (0)	sync.colossusssp.com		172.240.155.116	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.004564047 CET	8.8.8.8	192.168.2.22	0x5b73	No error (0)	sync.colossusssp.com		172.240.155.76	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.004564047 CET	8.8.8.8	192.168.2.22	0x5b73	No error (0)	sync.colossusssp.com		172.240.155.108	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.005426884 CET	8.8.8.8	192.168.2.22	0x61b4	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.006010056 CET	8.8.8.8	192.168.2.22	0xfe6c	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.006010056 CET	8.8.8.8	192.168.2.22	0xfe6c	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.006010056 CET	8.8.8.8	192.168.2.22	0xfe6c	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.007138014 CET	8.8.8.8	192.168.2.22	0xcb35	No error (0)	rtb.gumgum.com		52.204.15.232	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.007138014 CET	8.8.8.8	192.168.2.22	0xcb35	No error (0)	rtb.gumgum.com		44.197.7.215	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.007138014 CET	8.8.8.8	192.168.2.22	0xcb35	No error (0)	rtb.gumgum.com		54.81.39.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.007138014 CET	8.8.8.8	192.168.2.22	0xcb35	No error (0)	rtb.gumgum.com		3.213.88.59	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.007138014 CET	8.8.8.8	192.168.2.22	0xcb35	No error (0)	rtb.gumgum.com		44.197.19.224	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.007138014 CET	8.8.8.8	192.168.2.22	0xcb35	No error (0)	rtb.gumgum.com		34.231.114.219	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.007138014 CET	8.8.8.8	192.168.2.22	0xcb35	No error (0)	rtb.gumgum.com		3.226.117.219	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.007138014 CET	8.8.8.8	192.168.2.22	0xcb35	No error (0)	rtb.gumgum.com		54.88.114.222	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.070688963 CET	8.8.8.8	192.168.2.22	0x2a02	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.070688963 CET	8.8.8.8	192.168.2.22	0x2a02	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.083369970 CET	8.8.8.8	192.168.2.22	0x3d20	No error (0)	crb.kargo.com		34.224.153.9	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.083369970 CET	8.8.8.8	192.168.2.22	0x3d20	No error (0)	crb.kargo.com		3.225.187.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.083369970 CET	8.8.8.8	192.168.2.22	0x3d20	No error (0)	crb.kargo.com		18.232.190.152	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.083369970 CET	8.8.8.8	192.168.2.22	0x3d20	No error (0)	crb.kargo.com		44.198.25.64	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.083369970 CET	8.8.8.8	192.168.2.22	0x3d20	No error (0)	crb.kargo.com		44.217.198.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.083369970 CET	8.8.8.8	192.168.2.22	0x3d20	No error (0)	crb.kargo.com		44.194.252.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177030087 CET	8.8.8.8	192.168.2.22	0x1f87	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177030087 CET	8.8.8.8	192.168.2.22	0x1f87	No error (0)	na-ice.360yield.com		18.206.143.86	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177030087 CET	8.8.8.8	192.168.2.22	0x1f87	No error (0)	na-ice.360yield.com		34.197.152.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177030087 CET	8.8.8.8	192.168.2.22	0x1f87	No error (0)	na-ice.360yield.com		35.168.129.45	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177030087 CET	8.8.8.8	192.168.2.22	0x1f87	No error (0)	na-ice.360yield.com		34.197.101.60	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177030087 CET	8.8.8.8	192.168.2.22	0x1f87	No error (0)	na-ice.360yield.com		52.1.92.31	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177030087 CET	8.8.8.8	192.168.2.22	0x1f87	No error (0)	na-ice.360yield.com		18.213.5.122	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177030087 CET	8.8.8.8	192.168.2.22	0x1f87	No error (0)	na-ice.360yield.com		3.228.57.242	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177030087 CET	8.8.8.8	192.168.2.22	0x1f87	No error (0)	na-ice.360yield.com		3.213.105.196	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177423954 CET	8.8.8.8	192.168.2.22	0x1680	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177423954 CET	8.8.8.8	192.168.2.22	0x1680	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177423954 CET	8.8.8.8	192.168.2.22	0x1680	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177423954 CET	8.8.8.8	192.168.2.22	0x1680	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177423954 CET	8.8.8.8	192.168.2.22	0x1680	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177474022 CET	8.8.8.8	192.168.2.22	0x27fd	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177474022 CET	8.8.8.8	192.168.2.22	0x27fd	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.177474022 CET	8.8.8.8	192.168.2.22	0x27fd	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.178163052 CET	8.8.8.8	192.168.2.22	0x6775	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.283109903 CET	8.8.8.8	192.168.2.22	0x6aff	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.290941000 CET	8.8.8.8	192.168.2.22	0x127f	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.290941000 CET	8.8.8.8	192.168.2.22	0x127f	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.343911886 CET	8.8.8.8	192.168.2.22	0xf567	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.343911886 CET	8.8.8.8	192.168.2.22	0xf567	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.349584103 CET	8.8.8.8	192.168.2.22	0xe29a	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.349584103 CET	8.8.8.8	192.168.2.22	0xe29a	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.349584103 CET	8.8.8.8	192.168.2.22	0xe29a	No error (0)	gob-njr3.pubmnet.com		104.36.115.111	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.349658966 CET	8.8.8.8	192.168.2.22	0x509c	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.349658966 CET	8.8.8.8	192.168.2.22	0x509c	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.355501890 CET	8.8.8.8	192.168.2.22	0xc2e	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.356107950 CET	8.8.8.8	192.168.2.22	0x3ab5	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.358345032 CET	8.8.8.8	192.168.2.22	0x1511	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.358632088 CET	8.8.8.8	192.168.2.22	0x924e	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.359935999 CET	8.8.8.8	192.168.2.22	0xcd3e	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.359935999 CET	8.8.8.8	192.168.2.22	0xcd3e	No error (0)	us-east-tlx.3lift.com		3.231.136.235	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.359935999 CET	8.8.8.8	192.168.2.22	0xcd3e	No error (0)	us-east-tlx.3lift.com		3.209.112.180	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.359935999 CET	8.8.8.8	192.168.2.22	0xcd3e	No error (0)	us-east-tlx.3lift.com		34.231.81.69	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.359935999 CET	8.8.8.8	192.168.2.22	0xcd3e	No error (0)	us-east-tlx.3lift.com		3.229.6.37	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.359935999 CET	8.8.8.8	192.168.2.22	0xcd3e	No error (0)	us-east-tlx.3lift.com		34.238.221.75	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.359935999 CET	8.8.8.8	192.168.2.22	0xcd3e	No error (0)	us-east-tlx.3lift.com		18.214.71.147	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.359935999 CET	8.8.8.8	192.168.2.22	0xcd3e	No error (0)	us-east-tlx.3lift.com		54.225.224.22	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.359935999 CET	8.8.8.8	192.168.2.22	0xcd3e	No error (0)	us-east-tlx.3lift.com		52.0.187.21	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.388497114 CET	8.8.8.8	192.168.2.22	0x6141	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.512378931 CET	8.8.8.8	192.168.2.22	0x9a5f	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.512378931 CET	8.8.8.8	192.168.2.22	0x9a5f	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.513097048 CET	8.8.8.8	192.168.2.22	0x5259	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.656516075 CET	8.8.8.8	192.168.2.22	0x3d2e	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.656516075 CET	8.8.8.8	192.168.2.22	0x3d2e	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.656516075 CET	8.8.8.8	192.168.2.22	0x3d2e	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.656516075 CET	8.8.8.8	192.168.2.22	0x3d2e	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		3.163.87.30	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.656673908 CET	8.8.8.8	192.168.2.22	0x7820	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.656673908 CET	8.8.8.8	192.168.2.22	0x7820	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.656673908 CET	8.8.8.8	192.168.2.22	0x7820	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.693859100 CET	8.8.8.8	192.168.2.22	0xafa3	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.694021940 CET	8.8.8.8	192.168.2.22	0x1b92	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:04.867398977 CET	8.8.8.8	192.168.2.22	0x551	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:04.867398977 CET	8.8.8.8	192.168.2.22	0x551	No error (0)	de.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.082468033 CET	8.8.8.8	192.168.2.22	0x78f9	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.084315062 CET	8.8.8.8	192.168.2.22	0x4e96	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.084315062 CET	8.8.8.8	192.168.2.22	0x4e96	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.090105057 CET	8.8.8.8	192.168.2.22	0x6c0b	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.090105057 CET	8.8.8.8	192.168.2.22	0x6c0b	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.091550112 CET	8.8.8.8	192.168.2.22	0xee0d	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.092478991 CET	8.8.8.8	192.168.2.22	0x38cc	No error (0)	sync.srv.stackadapt.com		54.152.252.123	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.092478991 CET	8.8.8.8	192.168.2.22	0x38cc	No error (0)	sync.srv.stackadapt.com		54.160.62.46	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.092478991 CET	8.8.8.8	192.168.2.22	0x38cc	No error (0)	sync.srv.stackadapt.com		54.157.109.0	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.092478991 CET	8.8.8.8	192.168.2.22	0x38cc	No error (0)	sync.srv.stackadapt.com		54.197.120.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.092478991 CET	8.8.8.8	192.168.2.22	0x38cc	No error (0)	sync.srv.stackadapt.com		54.205.112.82	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.092478991 CET	8.8.8.8	192.168.2.22	0x38cc	No error (0)	sync.srv.stackadapt.com		54.211.244.166	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.092478991 CET	8.8.8.8	192.168.2.22	0x38cc	No error (0)	sync.srv.stackadapt.com		54.159.41.249	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.092478991 CET	8.8.8.8	192.168.2.22	0x38cc	No error (0)	sync.srv.stackadapt.com		54.152.61.223	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.093569994 CET	8.8.8.8	192.168.2.22	0x5ad0	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.093569994 CET	8.8.8.8	192.168.2.22	0x5ad0	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.093653917 CET	8.8.8.8	192.168.2.22	0xcf38	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.093653917 CET	8.8.8.8	192.168.2.22	0xcf38	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.207.23.148	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.093653917 CET	8.8.8.8	192.168.2.22	0xcf38	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.144.174.156	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.093653917 CET	8.8.8.8	192.168.2.22	0xcf38	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.45.36.109	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.093653917 CET	8.8.8.8	192.168.2.22	0xcf38	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.147.3.219	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.095643044 CET	8.8.8.8	192.168.2.22	0x8d83	No error (0)	sync.ipredictive.com		54.162.157.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.095643044 CET	8.8.8.8	192.168.2.22	0x8d83	No error (0)	sync.ipredictive.com		54.162.68.92	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.095643044 CET	8.8.8.8	192.168.2.22	0x8d83	No error (0)	sync.ipredictive.com		52.72.221.118	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.095643044 CET	8.8.8.8	192.168.2.22	0x8d83	No error (0)	sync.ipredictive.com		52.72.99.93	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.095643044 CET	8.8.8.8	192.168.2.22	0x8d83	No error (0)	sync.ipredictive.com		54.157.57.36	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.095643044 CET	8.8.8.8	192.168.2.22	0x8d83	No error (0)	sync.ipredictive.com		52.4.171.27	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.095643044 CET	8.8.8.8	192.168.2.22	0x8d83	No error (0)	sync.ipredictive.com		52.86.247.227	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.095643044 CET	8.8.8.8	192.168.2.22	0x8d83	No error (0)	sync.ipredictive.com		54.146.33.131	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.096054077 CET	8.8.8.8	192.168.2.22	0x5577	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.098526001 CET	8.8.8.8	192.168.2.22	0x802e	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.099004984 CET	8.8.8.8	192.168.2.22	0xc463	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.099004984 CET	8.8.8.8	192.168.2.22	0xc463	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.099004984 CET	8.8.8.8	192.168.2.22	0xc463	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.099004984 CET	8.8.8.8	192.168.2.22	0xc463	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.099004984 CET	8.8.8.8	192.168.2.22	0xc463	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.138003111 CET	8.8.8.8	192.168.2.22	0xd97b	No error (0)	openx2-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.149005890 CET	8.8.8.8	192.168.2.22	0x2ad2	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.149403095 CET	8.8.8.8	192.168.2.22	0x9a60	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.150985003 CET	8.8.8.8	192.168.2.22	0x60	No error (0)	rtb.adentifi.com		3.228.157.65	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.150985003 CET	8.8.8.8	192.168.2.22	0x60	No error (0)	rtb.adentifi.com		52.21.58.192	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.150985003 CET	8.8.8.8	192.168.2.22	0x60	No error (0)	rtb.adentifi.com		3.210.93.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.150985003 CET	8.8.8.8	192.168.2.22	0x60	No error (0)	rtb.adentifi.com		35.175.93.117	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.150985003 CET	8.8.8.8	192.168.2.22	0x60	No error (0)	rtb.adentifi.com		54.81.245.140	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.150985003 CET	8.8.8.8	192.168.2.22	0x60	No error (0)	rtb.adentifi.com		35.170.109.62	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.150985003 CET	8.8.8.8	192.168.2.22	0x60	No error (0)	rtb.adentifi.com		54.198.64.103	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.150985003 CET	8.8.8.8	192.168.2.22	0x60	No error (0)	rtb.adentifi.com		107.23.119.165	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.164031029 CET	8.8.8.8	192.168.2.22	0xb71c	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.164777994 CET	8.8.8.8	192.168.2.22	0xca61	No error (0)	match.prod.bidr.io		54.159.220.191	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.164777994 CET	8.8.8.8	192.168.2.22	0xca61	No error (0)	match.prod.bidr.io		52.86.218.58	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.164777994 CET	8.8.8.8	192.168.2.22	0xca61	No error (0)	match.prod.bidr.io		54.158.231.117	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.164777994 CET	8.8.8.8	192.168.2.22	0xca61	No error (0)	match.prod.bidr.io		54.166.54.213	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.164777994 CET	8.8.8.8	192.168.2.22	0xca61	No error (0)	match.prod.bidr.io		54.152.0.153	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.164777994 CET	8.8.8.8	192.168.2.22	0xca61	No error (0)	match.prod.bidr.io		54.145.124.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.164777994 CET	8.8.8.8	192.168.2.22	0xca61	No error (0)	match.prod.bidr.io		54.157.75.191	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.164777994 CET	8.8.8.8	192.168.2.22	0xca61	No error (0)	match.prod.bidr.io		52.87.120.123	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.220968008 CET	8.8.8.8	192.168.2.22	0xd282	No error (0)	cm.g.doubleclick.net		192.178.50.66	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.238039017 CET	8.8.8.8	192.168.2.22	0x8c89	No error (0)	openx2-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.239470005 CET	8.8.8.8	192.168.2.22	0xca39	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.239470005 CET	8.8.8.8	192.168.2.22	0xca39	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.257323980 CET	8.8.8.8	192.168.2.22	0x54a2	No error (0)	contextual.media.net		96.17.60.33	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.318917990 CET	8.8.8.8	192.168.2.22	0xdf73	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.319027901 CET	8.8.8.8	192.168.2.22	0x8217	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.319027901 CET	8.8.8.8	192.168.2.22	0x8217	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.164.84.102	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.321942091 CET	8.8.8.8	192.168.2.22	0x23f6	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.322401047 CET	8.8.8.8	192.168.2.22	0x8e81	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:05.351696014 CET	8.8.8.8	192.168.2.22	0xff72	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.351696014 CET	8.8.8.8	192.168.2.22	0xff72	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.351696014 CET	8.8.8.8	192.168.2.22	0xff72	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.351696014 CET	8.8.8.8	192.168.2.22	0xff72	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.432142973 CET	8.8.8.8	192.168.2.22	0x90be	No error (0)	interactiveds.com.au		203.210.102.39	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.773369074 CET	8.8.8.8	192.168.2.22	0xea11	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:05.959049940 CET	8.8.8.8	192.168.2.22	0xd9c2	No error (0)	interactiveds.com.au		203.210.102.39	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.051667929 CET	8.8.8.8	192.168.2.22	0xd9c	No error (0)	pdmp.tagger.opecloud.com		50.19.110.114	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.051667929 CET	8.8.8.8	192.168.2.22	0xd9c	No error (0)	pdmp.tagger.opecloud.com		3.216.75.185	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.051667929 CET	8.8.8.8	192.168.2.22	0xd9c	No error (0)	pdmp.tagger.opecloud.com		34.235.7.99	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.054522038 CET	8.8.8.8	192.168.2.22	0x3b09	No error (0)	config.aps.amazon-adsystem.com		18.173.132.10	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.054522038 CET	8.8.8.8	192.168.2.22	0x3b09	No error (0)	config.aps.amazon-adsystem.com		18.173.132.21	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.054522038 CET	8.8.8.8	192.168.2.22	0x3b09	No error (0)	config.aps.amazon-adsystem.com		18.173.132.105	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.054522038 CET	8.8.8.8	192.168.2.22	0x3b09	No error (0)	config.aps.amazon-adsystem.com		18.173.132.67	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.234750986 CET	8.8.8.8	192.168.2.22	0x9998	No error (0)	oajs.openx.net		34.120.135.53	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.234750986 CET	8.8.8.8	192.168.2.22	0x9998	No error (0)	oajs.openx.net		34.120.107.143	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.234793901 CET	8.8.8.8	192.168.2.22	0x5d5a	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.234793901 CET	8.8.8.8	192.168.2.22	0x5d5a	No error (0)	securepubads46.g.doubleclick.net		142.250.189.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.240078926 CET	8.8.8.8	192.168.2.22	0xb19c	No error (0)	pagead-googlehosted.l.google.com		192.178.50.33	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.240726948 CET	8.8.8.8	192.168.2.22	0xcd7a	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.271663904 CET	8.8.8.8	192.168.2.22	0xdb7c	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.339452982 CET	8.8.8.8	192.168.2.22	0xaebd	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.339452982 CET	8.8.8.8	192.168.2.22	0xaebd	No error (0)	ce-ue1.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.339452982 CET	8.8.8.8	192.168.2.22	0xaebd	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.339452982 CET	8.8.8.8	192.168.2.22	0xaebd	No error (0)	nase.vap.lijit.com		63.251.86.50	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.339452982 CET	8.8.8.8	192.168.2.22	0xaebd	No error (0)	nase.vap.lijit.com		63.251.86.49	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.339452982 CET	8.8.8.8	192.168.2.22	0xaebd	No error (0)	nase.vap.lijit.com		63.251.86.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.341869116 CET	8.8.8.8	192.168.2.22	0x8866	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.341869116 CET	8.8.8.8	192.168.2.22	0x8866	No error (0)	ce-ue1.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.341869116 CET	8.8.8.8	192.168.2.22	0x8866	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.343336105 CET	8.8.8.8	192.168.2.22	0xcc05	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.345513105 CET	8.8.8.8	192.168.2.22	0xce19	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.345513105 CET	8.8.8.8	192.168.2.22	0xce19	No error (0)	cdn.w55c.net		54.163.159.203	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.345513105 CET	8.8.8.8	192.168.2.22	0xce19	No error (0)	cdn.w55c.net		52.73.178.71	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.345513105 CET	8.8.8.8	192.168.2.22	0xce19	No error (0)	cdn.w55c.net		54.157.11.141	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.345513105 CET	8.8.8.8	192.168.2.22	0xce19	No error (0)	cdn.w55c.net		52.86.237.52	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.345513105 CET	8.8.8.8	192.168.2.22	0xce19	No error (0)	cdn.w55c.net		52.72.99.171	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.345513105 CET	8.8.8.8	192.168.2.22	0xce19	No error (0)	cdn.w55c.net		54.209.121.65	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.345513105 CET	8.8.8.8	192.168.2.22	0xce19	No error (0)	cdn.w55c.net		54.210.243.216	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.345513105 CET	8.8.8.8	192.168.2.22	0xce19	No error (0)	cdn.w55c.net		54.236.121.249	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.347172022 CET	8.8.8.8	192.168.2.22	0x2191	No error (0)	oxp.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.385276079 CET	8.8.8.8	192.168.2.22	0xc4c9	No error (0)	pdmp.profiles.tagger.opecloud.com		54.92.250.61	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.385276079 CET	8.8.8.8	192.168.2.22	0xc4c9	No error (0)	pdmp.profiles.tagger.opecloud.com		18.213.25.172	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.385276079 CET	8.8.8.8	192.168.2.22	0xc4c9	No error (0)	pdmp.profiles.tagger.opecloud.com		52.205.97.185	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.385276079 CET	8.8.8.8	192.168.2.22	0xc4c9	No error (0)	pdmp.profiles.tagger.opecloud.com		3.224.183.113	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.385276079 CET	8.8.8.8	192.168.2.22	0xc4c9	No error (0)	pdmp.profiles.tagger.opecloud.com		107.20.5.120	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.385276079 CET	8.8.8.8	192.168.2.22	0xc4c9	No error (0)	pdmp.profiles.tagger.opecloud.com		35.169.157.7	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.385276079 CET	8.8.8.8	192.168.2.22	0xc4c9	No error (0)	pdmp.profiles.tagger.opecloud.com		34.193.202.85	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.385276079 CET	8.8.8.8	192.168.2.22	0xc4c9	No error (0)	pdmp.profiles.tagger.opecloud.com		52.21.44.250	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.405529976 CET	8.8.8.8	192.168.2.22	0x1814	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.405529976 CET	8.8.8.8	192.168.2.22	0x1814	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.405579090 CET	8.8.8.8	192.168.2.22	0xeb7b	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.408787966 CET	8.8.8.8	192.168.2.22	0x633a	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.408787966 CET	8.8.8.8	192.168.2.22	0x633a	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.408849955 CET	8.8.8.8	192.168.2.22	0x1d9c	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.408849955 CET	8.8.8.8	192.168.2.22	0x1d9c	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.408849955 CET	8.8.8.8	192.168.2.22	0x1d9c	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.409918070 CET	8.8.8.8	192.168.2.22	0xaa5e	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.409918070 CET	8.8.8.8	192.168.2.22	0xaa5e	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.411662102 CET	8.8.8.8	192.168.2.22	0x344e	No error (0)	sync-dmp.mobtrakk.com		5.161.124.197	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.411662102 CET	8.8.8.8	192.168.2.22	0x344e	No error (0)	sync-dmp.mobtrakk.com		5.161.62.221	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.411662102 CET	8.8.8.8	192.168.2.22	0x344e	No error (0)	sync-dmp.mobtrakk.com		5.161.188.99	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.411662102 CET	8.8.8.8	192.168.2.22	0x344e	No error (0)	sync-dmp.mobtrakk.com		5.161.187.67	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.411662102 CET	8.8.8.8	192.168.2.22	0x344e	No error (0)	sync-dmp.mobtrakk.com		5.161.195.128	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.411662102 CET	8.8.8.8	192.168.2.22	0x344e	No error (0)	sync-dmp.mobtrakk.com		5.161.92.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.411662102 CET	8.8.8.8	192.168.2.22	0x344e	No error (0)	sync-dmp.mobtrakk.com		5.161.181.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.411662102 CET	8.8.8.8	192.168.2.22	0x344e	No error (0)	sync-dmp.mobtrakk.com		5.161.204.250	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.411715984 CET	8.8.8.8	192.168.2.22	0x5afe	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Dec 12, 2023 21:40:06.436850071 CET	8.8.8.8	192.168.2.22	0x1a5e	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.436850071 CET	8.8.8.8	192.168.2.22	0x1a5e	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.436850071 CET	8.8.8.8	192.168.2.22	0x1a5e	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.436850071 CET	8.8.8.8	192.168.2.22	0x1a5e	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.436850071 CET	8.8.8.8	192.168.2.22	0x1a5e	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.568111897 CET	8.8.8.8	192.168.2.22	0x324a	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.568568945 CET	8.8.8.8	192.168.2.22	0xce98	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.572995901 CET	8.8.8.8	192.168.2.22	0x5e03	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.572995901 CET	8.8.8.8	192.168.2.22	0x5e03	No error (0)	us-east-tlx.3lift.com		44.206.51.132	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.572995901 CET	8.8.8.8	192.168.2.22	0x5e03	No error (0)	us-east-tlx.3lift.com		52.20.26.124	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.572995901 CET	8.8.8.8	192.168.2.22	0x5e03	No error (0)	us-east-tlx.3lift.com		34.238.221.75	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.572995901 CET	8.8.8.8	192.168.2.22	0x5e03	No error (0)	us-east-tlx.3lift.com		3.225.55.12	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.572995901 CET	8.8.8.8	192.168.2.22	0x5e03	No error (0)	us-east-tlx.3lift.com		52.200.24.191	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.572995901 CET	8.8.8.8	192.168.2.22	0x5e03	No error (0)	us-east-tlx.3lift.com		35.170.214.169	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.572995901 CET	8.8.8.8	192.168.2.22	0x5e03	No error (0)	us-east-tlx.3lift.com		100.26.26.175	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.572995901 CET	8.8.8.8	192.168.2.22	0x5e03	No error (0)	us-east-tlx.3lift.com		3.226.34.122	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.574713945 CET	8.8.8.8	192.168.2.22	0xbd14	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.587557077 CET	8.8.8.8	192.168.2.22	0x5122	No error (0)	exchange.mediavine.com		44.214.247.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.587557077 CET	8.8.8.8	192.168.2.22	0x5122	No error (0)	exchange.mediavine.com		3.226.96.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.587557077 CET	8.8.8.8	192.168.2.22	0x5122	No error (0)	exchange.mediavine.com		34.200.69.89	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.587557077 CET	8.8.8.8	192.168.2.22	0x5122	No error (0)	exchange.mediavine.com		52.203.134.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.587557077 CET	8.8.8.8	192.168.2.22	0x5122	No error (0)	exchange.mediavine.com		3.230.74.156	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.587557077 CET	8.8.8.8	192.168.2.22	0x5122	No error (0)	exchange.mediavine.com		52.22.5.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.695054054 CET	8.8.8.8	192.168.2.22	0x7a32	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.695272923 CET	8.8.8.8	192.168.2.22	0x33b2	No error (0)	pixel-sync.sitescout.com	pixel-a.sitescout.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.696175098 CET	8.8.8.8	192.168.2.22	0xc90d	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.697053909 CET	8.8.8.8	192.168.2.22	0x189f	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.697053909 CET	8.8.8.8	192.168.2.22	0x189f	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.697053909 CET	8.8.8.8	192.168.2.22	0x189f	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.697118044 CET	8.8.8.8	192.168.2.22	0x75ff	No error (0)	pixel-sync.sitescout.com	pixel-a.sitescout.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.697118044 CET	8.8.8.8	192.168.2.22	0x75ff	No error (0)	pixel-a.sitescout.com		207.198.113.203	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.698508978 CET	8.8.8.8	192.168.2.22	0x5ab2	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.698508978 CET	8.8.8.8	192.168.2.22	0x5ab2	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.698508978 CET	8.8.8.8	192.168.2.22	0x5ab2	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.707696915 CET	8.8.8.8	192.168.2.22	0x9f32	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.709861994 CET	8.8.8.8	192.168.2.22	0xc8f6	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.778791904 CET	8.8.8.8	192.168.2.22	0x228d	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.778882027 CET	8.8.8.8	192.168.2.22	0xaf1b	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.787934065 CET	8.8.8.8	192.168.2.22	0xd98b	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.787934065 CET	8.8.8.8	192.168.2.22	0xd98b	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.787934065 CET	8.8.8.8	192.168.2.22	0xd98b	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.788868904 CET	8.8.8.8	192.168.2.22	0xa577	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.788868904 CET	8.8.8.8	192.168.2.22	0xa577	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.788868904 CET	8.8.8.8	192.168.2.22	0xa577	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:06.788868904 CET	8.8.8.8	192.168.2.22	0xa577	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.160.65.3	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.864778996 CET	8.8.8.8	192.168.2.22	0x93ab	No error (0)	dsp.adfarm1.adition.com		85.114.159.93	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.864778996 CET	8.8.8.8	192.168.2.22	0x93ab	No error (0)	dsp.adfarm1.adition.com		85.114.159.118	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:06.869992018 CET	8.8.8.8	192.168.2.22	0xe59e	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.004595041 CET	8.8.8.8	192.168.2.22	0xfd83	No error (0)	google-bidout-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.004595041 CET	8.8.8.8	192.168.2.22	0xfd83	No error (0)	google-bidout-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.144150019 CET	8.8.8.8	192.168.2.22	0x62ce	No error (0)	contextual.media.net		96.17.60.33	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.245249033 CET	8.8.8.8	192.168.2.22	0x9817	No error (0)	feed.pghub.io		34.102.243.38	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.535990000 CET	8.8.8.8	192.168.2.22	0x4662	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.535990000 CET	8.8.8.8	192.168.2.22	0x4662	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.536071062 CET	8.8.8.8	192.168.2.22	0x90cf	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Dec 12, 2023 21:40:07.536974907 CET	8.8.8.8	192.168.2.22	0x9d0f	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.536974907 CET	8.8.8.8	192.168.2.22	0x9d0f	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.536974907 CET	8.8.8.8	192.168.2.22	0x9d0f	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.537667990 CET	8.8.8.8	192.168.2.22	0x5ea6	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.537667990 CET	8.8.8.8	192.168.2.22	0x5ea6	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.562244892 CET	8.8.8.8	192.168.2.22	0x840d	No error (0)	cs.krushmedia.com		8.2.110.134	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.562551022 CET	8.8.8.8	192.168.2.22	0x7a23	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.562551022 CET	8.8.8.8	192.168.2.22	0x7a23	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.562551022 CET	8.8.8.8	192.168.2.22	0x7a23	No error (0)	global.px.quantserve.com		192.184.69.167	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.562551022 CET	8.8.8.8	192.168.2.22	0x7a23	No error (0)	global.px.quantserve.com		192.184.69.252	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.562551022 CET	8.8.8.8	192.168.2.22	0x7a23	No error (0)	global.px.quantserve.com		192.184.69.239	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.562551022 CET	8.8.8.8	192.168.2.22	0x7a23	No error (0)	global.px.quantserve.com		192.184.69.215	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.562551022 CET	8.8.8.8	192.168.2.22	0x7a23	No error (0)	global.px.quantserve.com		192.184.69.201	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.563154936 CET	8.8.8.8	192.168.2.22	0xfb93	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.563154936 CET	8.8.8.8	192.168.2.22	0xfb93	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.572351933 CET	8.8.8.8	192.168.2.22	0xdeee	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.572351933 CET	8.8.8.8	192.168.2.22	0xdeee	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.572351933 CET	8.8.8.8	192.168.2.22	0xdeee	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.572351933 CET	8.8.8.8	192.168.2.22	0xdeee	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.572351933 CET	8.8.8.8	192.168.2.22	0xdeee	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.574369907 CET	8.8.8.8	192.168.2.22	0x8ad9	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.574923038 CET	8.8.8.8	192.168.2.22	0x181c	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.575166941 CET	8.8.8.8	192.168.2.22	0x105e	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.628833055 CET	8.8.8.8	192.168.2.22	0xcb1a	No error (0)	aorta.clickagy.com		44.214.186.206	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.628833055 CET	8.8.8.8	192.168.2.22	0xcb1a	No error (0)	aorta.clickagy.com		52.20.73.112	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.628833055 CET	8.8.8.8	192.168.2.22	0xcb1a	No error (0)	aorta.clickagy.com		34.197.163.191	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.628833055 CET	8.8.8.8	192.168.2.22	0xcb1a	No error (0)	aorta.clickagy.com		35.169.93.15	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.760179043 CET	8.8.8.8	192.168.2.22	0x64fc	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.760179043 CET	8.8.8.8	192.168.2.22	0x64fc	No error (0)	image6v2.pubmnet.com	pugm88000nfc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.761703968 CET	8.8.8.8	192.168.2.22	0xf36a	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.761703968 CET	8.8.8.8	192.168.2.22	0xf36a	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.761703968 CET	8.8.8.8	192.168.2.22	0xf36a	No error (0)	ssbsync-use2.smartadserver.com		147.135.94.213	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.761703968 CET	8.8.8.8	192.168.2.22	0xf36a	No error (0)	ssbsync-use2.smartadserver.com		135.148.2.53	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.761703968 CET	8.8.8.8	192.168.2.22	0xf36a	No error (0)	ssbsync-use2.smartadserver.com		147.135.119.118	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.761703968 CET	8.8.8.8	192.168.2.22	0xf36a	No error (0)	ssbsync-use2.smartadserver.com		147.135.94.212	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.761703968 CET	8.8.8.8	192.168.2.22	0xf36a	No error (0)	ssbsync-use2.smartadserver.com		135.148.2.52	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.761703968 CET	8.8.8.8	192.168.2.22	0xf36a	No error (0)	ssbsync-use2.smartadserver.com		147.135.119.119	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.761734962 CET	8.8.8.8	192.168.2.22	0x36c6	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.761734962 CET	8.8.8.8	192.168.2.22	0x36c6	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.761734962 CET	8.8.8.8	192.168.2.22	0x36c6	No error (0)	pugm-vac.pubmnet.com		8.28.7.81	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:07.764341116 CET	8.8.8.8	192.168.2.22	0xff20	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.764341116 CET	8.8.8.8	192.168.2.22	0xff20	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:07.794576883 CET	8.8.8.8	192.168.2.22	0x6ab1	No error (0)	s2s.t13.io		34.107.140.113	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.013467073 CET	8.8.8.8	192.168.2.22	0xcaba	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.016143084 CET	8.8.8.8	192.168.2.22	0x8c54	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.016143084 CET	8.8.8.8	192.168.2.22	0x8c54	No error (0)	cdn.w55c.net		52.5.77.198	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.016143084 CET	8.8.8.8	192.168.2.22	0x8c54	No error (0)	cdn.w55c.net		54.236.121.249	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.016143084 CET	8.8.8.8	192.168.2.22	0x8c54	No error (0)	cdn.w55c.net		52.86.237.52	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.016143084 CET	8.8.8.8	192.168.2.22	0x8c54	No error (0)	cdn.w55c.net		54.163.159.203	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.016143084 CET	8.8.8.8	192.168.2.22	0x8c54	No error (0)	cdn.w55c.net		54.209.121.65	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.016143084 CET	8.8.8.8	192.168.2.22	0x8c54	No error (0)	cdn.w55c.net		52.72.99.171	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.016143084 CET	8.8.8.8	192.168.2.22	0x8c54	No error (0)	cdn.w55c.net		54.157.11.141	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.016143084 CET	8.8.8.8	192.168.2.22	0x8c54	No error (0)	cdn.w55c.net		54.210.243.216	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.083561897 CET	8.8.8.8	192.168.2.22	0xe304	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.083561897 CET	8.8.8.8	192.168.2.22	0xe304	No error (0)	cdn-content.ampproject.org		192.178.50.65	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.087207079 CET	8.8.8.8	192.168.2.22	0x6532	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.095484972 CET	8.8.8.8	192.168.2.22	0x1b99	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.095484972 CET	8.8.8.8	192.168.2.22	0x1b99	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.101156950 CET	8.8.8.8	192.168.2.22	0x4b40	No error (0)	oajs.openx.net		34.120.107.143	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.101156950 CET	8.8.8.8	192.168.2.22	0x4b40	No error (0)	oajs.openx.net		34.120.135.53	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.105531931 CET	8.8.8.8	192.168.2.22	0x5b6a	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.106295109 CET	8.8.8.8	192.168.2.22	0xf6b5	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.106295109 CET	8.8.8.8	192.168.2.22	0xf6b5	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.110004902 CET	8.8.8.8	192.168.2.22	0x8507	No error (0)	pdmp.tagger.opecloud.com		34.235.7.99	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.110004902 CET	8.8.8.8	192.168.2.22	0x8507	No error (0)	pdmp.tagger.opecloud.com		50.19.110.114	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.110004902 CET	8.8.8.8	192.168.2.22	0x8507	No error (0)	pdmp.tagger.opecloud.com		3.216.75.185	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.124372959 CET	8.8.8.8	192.168.2.22	0x9b8e	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.124372959 CET	8.8.8.8	192.168.2.22	0x9b8e	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.124372959 CET	8.8.8.8	192.168.2.22	0x9b8e	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.124372959 CET	8.8.8.8	192.168.2.22	0x9b8e	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.124372959 CET	8.8.8.8	192.168.2.22	0x9b8e	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.173345089 CET	8.8.8.8	192.168.2.22	0xfa50	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.173537970 CET	8.8.8.8	192.168.2.22	0x4de1	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.173537970 CET	8.8.8.8	192.168.2.22	0x4de1	No error (0)	cs.digbearings.com		3.214.250.236	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.173537970 CET	8.8.8.8	192.168.2.22	0x4de1	No error (0)	cs.digbearings.com		34.197.219.74	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.173537970 CET	8.8.8.8	192.168.2.22	0x4de1	No error (0)	cs.digbearings.com		52.206.176.4	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.173537970 CET	8.8.8.8	192.168.2.22	0x4de1	No error (0)	cs.digbearings.com		54.145.99.161	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.187292099 CET	8.8.8.8	192.168.2.22	0x5c5a	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.187292099 CET	8.8.8.8	192.168.2.22	0x5c5a	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.73	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.187292099 CET	8.8.8.8	192.168.2.22	0x5c5a	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.58	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.187292099 CET	8.8.8.8	192.168.2.22	0x5c5a	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.74	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.187292099 CET	8.8.8.8	192.168.2.22	0x5c5a	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.89	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.187292099 CET	8.8.8.8	192.168.2.22	0x5c5a	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.90	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.187292099 CET	8.8.8.8	192.168.2.22	0x5c5a	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.106	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.187292099 CET	8.8.8.8	192.168.2.22	0x5c5a	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.105	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.187292099 CET	8.8.8.8	192.168.2.22	0x5c5a	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.57	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.187700033 CET	8.8.8.8	192.168.2.22	0x3a53	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.198004007 CET	8.8.8.8	192.168.2.22	0xeb5	No error (0)	cs.yellowblue.io		52.206.176.4	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.198004007 CET	8.8.8.8	192.168.2.22	0xeb5	No error (0)	cs.yellowblue.io		34.197.219.74	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.198004007 CET	8.8.8.8	192.168.2.22	0xeb5	No error (0)	cs.yellowblue.io		54.145.99.161	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.198004007 CET	8.8.8.8	192.168.2.22	0xeb5	No error (0)	cs.yellowblue.io		3.214.250.236	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.230245113 CET	8.8.8.8	192.168.2.22	0x3334	No error (0)	openx-ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.233258009 CET	8.8.8.8	192.168.2.22	0x4e13	No error (0)	openx.adhaven.com		35.244.216.234	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.234038115 CET	8.8.8.8	192.168.2.22	0x9ae	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.240128994 CET	8.8.8.8	192.168.2.22	0x9188	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.240128994 CET	8.8.8.8	192.168.2.22	0x9188	No error (0)	securepubads46.g.doubleclick.net		142.250.189.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.240684986 CET	8.8.8.8	192.168.2.22	0xc90d	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.241940975 CET	8.8.8.8	192.168.2.22	0x8208	No error (0)	pdmp.profiles.tagger.opecloud.com		52.205.97.185	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.241940975 CET	8.8.8.8	192.168.2.22	0x8208	No error (0)	pdmp.profiles.tagger.opecloud.com		54.204.24.115	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.241940975 CET	8.8.8.8	192.168.2.22	0x8208	No error (0)	pdmp.profiles.tagger.opecloud.com		34.204.129.136	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.241940975 CET	8.8.8.8	192.168.2.22	0x8208	No error (0)	pdmp.profiles.tagger.opecloud.com		34.193.202.85	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.241940975 CET	8.8.8.8	192.168.2.22	0x8208	No error (0)	pdmp.profiles.tagger.opecloud.com		107.20.5.120	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.241940975 CET	8.8.8.8	192.168.2.22	0x8208	No error (0)	pdmp.profiles.tagger.opecloud.com		3.224.183.113	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.241940975 CET	8.8.8.8	192.168.2.22	0x8208	No error (0)	pdmp.profiles.tagger.opecloud.com		54.92.250.61	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.241940975 CET	8.8.8.8	192.168.2.22	0x8208	No error (0)	pdmp.profiles.tagger.opecloud.com		35.169.157.7	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.359287024 CET	8.8.8.8	192.168.2.22	0x8fbe	No error (0)	prebid-s2s.media.net		34.107.148.139	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.361193895 CET	8.8.8.8	192.168.2.22	0x8cb1	No error (0)	sync.aniview.com	syncsc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.361193895 CET	8.8.8.8	192.168.2.22	0x8cb1	No error (0)	syncsc.aniview.com		96.46.186.182	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.361891031 CET	8.8.8.8	192.168.2.22	0x1dd3	No error (0)	sync.aniview.com	syncsc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.362688065 CET	8.8.8.8	192.168.2.22	0x1bcf	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.362688065 CET	8.8.8.8	192.168.2.22	0x1bcf	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.160.165	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.362688065 CET	8.8.8.8	192.168.2.22	0x1bcf	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.182.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.362688065 CET	8.8.8.8	192.168.2.22	0x1bcf	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.145.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.362688065 CET	8.8.8.8	192.168.2.22	0x1bcf	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.242.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.362688065 CET	8.8.8.8	192.168.2.22	0x1bcf	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.190.53	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.362688065 CET	8.8.8.8	192.168.2.22	0x1bcf	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.194.112	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.362688065 CET	8.8.8.8	192.168.2.22	0x1bcf	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.224.182	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.362688065 CET	8.8.8.8	192.168.2.22	0x1bcf	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.154.226	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.362863064 CET	8.8.8.8	192.168.2.22	0x4341	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.366806984 CET	8.8.8.8	192.168.2.22	0x9d4f	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.366806984 CET	8.8.8.8	192.168.2.22	0x9d4f	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.378199100 CET	8.8.8.8	192.168.2.22	0x42d8	No error (0)	crb.kargo.com		34.224.153.9	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.378199100 CET	8.8.8.8	192.168.2.22	0x42d8	No error (0)	crb.kargo.com		44.198.25.64	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.378199100 CET	8.8.8.8	192.168.2.22	0x42d8	No error (0)	crb.kargo.com		18.232.190.152	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.378199100 CET	8.8.8.8	192.168.2.22	0x42d8	No error (0)	crb.kargo.com		3.225.187.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.378199100 CET	8.8.8.8	192.168.2.22	0x42d8	No error (0)	crb.kargo.com		44.194.252.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.378199100 CET	8.8.8.8	192.168.2.22	0x42d8	No error (0)	crb.kargo.com		44.217.198.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.470307112 CET	8.8.8.8	192.168.2.22	0xbc6f	No error (0)	pandg.tapad.com		34.102.243.38	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.495774031 CET	8.8.8.8	192.168.2.22	0x6e0e	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.495774031 CET	8.8.8.8	192.168.2.22	0x6e0e	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.496244907 CET	8.8.8.8	192.168.2.22	0x8e71	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.564246893 CET	8.8.8.8	192.168.2.22	0x9041	No error (0)	match.sync.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.639549017 CET	8.8.8.8	192.168.2.22	0xaa55	No error (0)	ad-cdn.technoratimedia.com	cs1561.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.640304089 CET	8.8.8.8	192.168.2.22	0x1c5b	No error (0)	ad-cdn.technoratimedia.com	cs1561.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.640304089 CET	8.8.8.8	192.168.2.22	0x1c5b	No error (0)	cs1561.wpc.edgecastcdn.net		152.199.5.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.809395075 CET	8.8.8.8	192.168.2.22	0x3e49	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.810663939 CET	8.8.8.8	192.168.2.22	0x7aa9	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:08.898365021 CET	8.8.8.8	192.168.2.22	0xd7f	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.898365021 CET	8.8.8.8	192.168.2.22	0xd7f	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.949809074 CET	8.8.8.8	192.168.2.22	0x5ef9	No error (0)	s2s.t13.io		34.107.140.113	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.960840940 CET	8.8.8.8	192.168.2.22	0xe8dc	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.960840940 CET	8.8.8.8	192.168.2.22	0xe8dc	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:08.960840940 CET	8.8.8.8	192.168.2.22	0xe8dc	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.078839064 CET	8.8.8.8	192.168.2.22	0x533a	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.080737114 CET	8.8.8.8	192.168.2.22	0x9b8a	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.080876112 CET	8.8.8.8	192.168.2.22	0xbdeb	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.080967903 CET	8.8.8.8	192.168.2.22	0x1a96	No error (0)	vop.sundaysky.com	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.080967903 CET	8.8.8.8	192.168.2.22	0x1a96	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		52.22.12.118	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.080967903 CET	8.8.8.8	192.168.2.22	0x1a96	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		3.220.28.203	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.080967903 CET	8.8.8.8	192.168.2.22	0x1a96	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		34.199.97.234	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.080967903 CET	8.8.8.8	192.168.2.22	0x1a96	No error (0)	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		52.87.93.61	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.081371069 CET	8.8.8.8	192.168.2.22	0x9fea	No error (0)	dmp.brand-display.com		34.160.19.107	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.081651926 CET	8.8.8.8	192.168.2.22	0xcf4b	No error (0)	match.justpremium.com	cookiematch-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.082736015 CET	8.8.8.8	192.168.2.22	0xe1e9	No error (0)	vop.sundaysky.com	ssky-vop-tracking-1576957348.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.085814953 CET	8.8.8.8	192.168.2.22	0xfa1	No error (0)	match.justpremium.com	cookiematch-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.085814953 CET	8.8.8.8	192.168.2.22	0xfa1	No error (0)	cookiematch-us-east-1.prod.justpremium.com		44.194.38.185	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.085814953 CET	8.8.8.8	192.168.2.22	0xfa1	No error (0)	cookiematch-us-east-1.prod.justpremium.com		34.204.24.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.085814953 CET	8.8.8.8	192.168.2.22	0xfa1	No error (0)	cookiematch-us-east-1.prod.justpremium.com		52.200.52.118	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.094161034 CET	8.8.8.8	192.168.2.22	0x91b6	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.094161034 CET	8.8.8.8	192.168.2.22	0x91b6	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.171314955 CET	8.8.8.8	192.168.2.22	0xbec0	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.172432899 CET	8.8.8.8	192.168.2.22	0x754a	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.172528028 CET	8.8.8.8	192.168.2.22	0x451c	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.172573090 CET	8.8.8.8	192.168.2.22	0x6963	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.197431087 CET	8.8.8.8	192.168.2.22	0xa444	No error (0)	rbp.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.298533916 CET	8.8.8.8	192.168.2.22	0xb0c8	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.322710991 CET	8.8.8.8	192.168.2.22	0xf8e	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.322710991 CET	8.8.8.8	192.168.2.22	0xf8e	No error (0)	ce-ue1.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.322710991 CET	8.8.8.8	192.168.2.22	0xf8e	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.323106050 CET	8.8.8.8	192.168.2.22	0x7104	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.323106050 CET	8.8.8.8	192.168.2.22	0x7104	No error (0)	ce-ue1.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.323106050 CET	8.8.8.8	192.168.2.22	0x7104	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:09.323106050 CET	8.8.8.8	192.168.2.22	0x7104	No error (0)	nase.vap.lijit.com		63.251.86.49	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.323106050 CET	8.8.8.8	192.168.2.22	0x7104	No error (0)	nase.vap.lijit.com		63.251.86.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.323106050 CET	8.8.8.8	192.168.2.22	0x7104	No error (0)	nase.vap.lijit.com		63.251.86.50	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:09.582870960 CET	8.8.8.8	192.168.2.22	0x9a	No error (0)	cms-xch-chicago.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129113913 CET	8.8.8.8	192.168.2.22	0x7f79	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129113913 CET	8.8.8.8	192.168.2.22	0x7f79	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		3.213.9.240	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129113913 CET	8.8.8.8	192.168.2.22	0x7f79	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		54.81.68.127	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129113913 CET	8.8.8.8	192.168.2.22	0x7f79	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		18.209.128.131	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129113913 CET	8.8.8.8	192.168.2.22	0x7f79	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.199.51.202	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129380941 CET	8.8.8.8	192.168.2.22	0x7c86	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129380941 CET	8.8.8.8	192.168.2.22	0x7c86	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.186.203	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129380941 CET	8.8.8.8	192.168.2.22	0x7c86	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.44.250.119	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129380941 CET	8.8.8.8	192.168.2.22	0x7c86	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.21.25.82	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129380941 CET	8.8.8.8	192.168.2.22	0x7c86	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.55.153.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129380941 CET	8.8.8.8	192.168.2.22	0x7c86	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.72.18.3	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129380941 CET	8.8.8.8	192.168.2.22	0x7c86	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.72.122.107	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129380941 CET	8.8.8.8	192.168.2.22	0x7c86	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.125.191	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129380941 CET	8.8.8.8	192.168.2.22	0x7c86	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.72.189.162	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129441977 CET	8.8.8.8	192.168.2.22	0x1b0b	No error (0)	thrtle.com		52.71.16.59	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129441977 CET	8.8.8.8	192.168.2.22	0x1b0b	No error (0)	thrtle.com		50.19.110.14	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129441977 CET	8.8.8.8	192.168.2.22	0x1b0b	No error (0)	thrtle.com		204.236.210.31	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129441977 CET	8.8.8.8	192.168.2.22	0x1b0b	No error (0)	thrtle.com		54.158.15.169	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129441977 CET	8.8.8.8	192.168.2.22	0x1b0b	No error (0)	thrtle.com		34.235.53.166	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129441977 CET	8.8.8.8	192.168.2.22	0x1b0b	No error (0)	thrtle.com		54.159.245.111	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129441977 CET	8.8.8.8	192.168.2.22	0x1b0b	No error (0)	thrtle.com		54.156.62.74	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129441977 CET	8.8.8.8	192.168.2.22	0x1b0b	No error (0)	thrtle.com		44.197.22.251	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:10.129504919 CET	8.8.8.8	192.168.2.22	0xc87e	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:10.130517006 CET	8.8.8.8	192.168.2.22	0xfe8c	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:10.131000042 CET	8.8.8.8	192.168.2.22	0x4cbf	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:10.132410049 CET	8.8.8.8	192.168.2.22	0x322d	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:10.136076927 CET	8.8.8.8	192.168.2.22	0x1875	No error (0)	pmp.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:11.650259018 CET	8.8.8.8	192.168.2.22	0xc4ec	No error (0)	prebid-s2s.media.net		34.107.148.139	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:11.691049099 CET	8.8.8.8	192.168.2.22	0xb2ad	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:11.691049099 CET	8.8.8.8	192.168.2.22	0xb2ad	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:11.691049099 CET	8.8.8.8	192.168.2.22	0xb2ad	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:11.691165924 CET	8.8.8.8	192.168.2.22	0x54ff	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:11.691165924 CET	8.8.8.8	192.168.2.22	0x54ff	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:11.691165924 CET	8.8.8.8	192.168.2.22	0x54ff	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:11.691165924 CET	8.8.8.8	192.168.2.22	0x54ff	No error (0)	cx.serverbid.com		159.89.246.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.056603909 CET	8.8.8.8	192.168.2.22	0xa917	No error (0)	rubicon-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.056835890 CET	8.8.8.8	192.168.2.22	0x617	No error (0)	rubicon-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.072248936 CET	8.8.8.8	192.168.2.22	0x2420	No error (0)	sync.ex.co		52.202.38.96	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.072248936 CET	8.8.8.8	192.168.2.22	0x2420	No error (0)	sync.ex.co		34.207.35.169	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.072248936 CET	8.8.8.8	192.168.2.22	0x2420	No error (0)	sync.ex.co		3.215.81.149	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.468667030 CET	8.8.8.8	192.168.2.22	0x4ed	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.468667030 CET	8.8.8.8	192.168.2.22	0x4ed	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.468667030 CET	8.8.8.8	192.168.2.22	0x4ed	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.474945068 CET	8.8.8.8	192.168.2.22	0xd088	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.476629019 CET	8.8.8.8	192.168.2.22	0xff68	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.476629019 CET	8.8.8.8	192.168.2.22	0xff68	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.493839979 CET	8.8.8.8	192.168.2.22	0x84b0	No error (0)	sync.crwdcntrl.net		3.93.99.238	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.493839979 CET	8.8.8.8	192.168.2.22	0x84b0	No error (0)	sync.crwdcntrl.net		44.193.54.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.493839979 CET	8.8.8.8	192.168.2.22	0x84b0	No error (0)	sync.crwdcntrl.net		54.88.134.208	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.493839979 CET	8.8.8.8	192.168.2.22	0x84b0	No error (0)	sync.crwdcntrl.net		34.194.172.133	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.493839979 CET	8.8.8.8	192.168.2.22	0x84b0	No error (0)	sync.crwdcntrl.net		54.83.134.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.493839979 CET	8.8.8.8	192.168.2.22	0x84b0	No error (0)	sync.crwdcntrl.net		34.230.211.254	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.493839979 CET	8.8.8.8	192.168.2.22	0x84b0	No error (0)	sync.crwdcntrl.net		54.209.94.68	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.493839979 CET	8.8.8.8	192.168.2.22	0x84b0	No error (0)	sync.crwdcntrl.net		34.199.141.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.603646040 CET	8.8.8.8	192.168.2.22	0xd5a5	No error (0)	sonata-notifications.taptapnetworks.com		44.215.52.44	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.603646040 CET	8.8.8.8	192.168.2.22	0xd5a5	No error (0)	sonata-notifications.taptapnetworks.com		3.220.198.43	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.628086090 CET	8.8.8.8	192.168.2.22	0x994	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.628086090 CET	8.8.8.8	192.168.2.22	0x994	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.628525972 CET	8.8.8.8	192.168.2.22	0x3f7a	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.628525972 CET	8.8.8.8	192.168.2.22	0x3f7a	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.628525972 CET	8.8.8.8	192.168.2.22	0x3f7a	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.651216984 CET	8.8.8.8	192.168.2.22	0x9149	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.651216984 CET	8.8.8.8	192.168.2.22	0x9149	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.651216984 CET	8.8.8.8	192.168.2.22	0x9149	No error (0)	nase.vap.lijit.com		63.251.86.50	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.651216984 CET	8.8.8.8	192.168.2.22	0x9149	No error (0)	nase.vap.lijit.com		63.251.86.49	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.651216984 CET	8.8.8.8	192.168.2.22	0x9149	No error (0)	nase.vap.lijit.com		63.251.86.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.652708054 CET	8.8.8.8	192.168.2.22	0x8a1b	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.652708054 CET	8.8.8.8	192.168.2.22	0x8a1b	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.653222084 CET	8.8.8.8	192.168.2.22	0x95ed	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.653222084 CET	8.8.8.8	192.168.2.22	0x95ed	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.653222084 CET	8.8.8.8	192.168.2.22	0x95ed	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:12.654234886 CET	8.8.8.8	192.168.2.22	0x27e	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.654234886 CET	8.8.8.8	192.168.2.22	0x27e	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.655240059 CET	8.8.8.8	192.168.2.22	0x3597	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.655240059 CET	8.8.8.8	192.168.2.22	0x3597	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.671802044 CET	8.8.8.8	192.168.2.22	0x7c0a	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:12.671802044 CET	8.8.8.8	192.168.2.22	0x7c0a	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.379514933 CET	8.8.8.8	192.168.2.22	0x4ec1	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.379548073 CET	8.8.8.8	192.168.2.22	0x746c	No error (0)	cdn-ima.33across.com	cdn-ima.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.390501022 CET	8.8.8.8	192.168.2.22	0x55e0	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.390501022 CET	8.8.8.8	192.168.2.22	0x55e0	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.390523911 CET	8.8.8.8	192.168.2.22	0x49c	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.391892910 CET	8.8.8.8	192.168.2.22	0xd71d	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.391892910 CET	8.8.8.8	192.168.2.22	0xd71d	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.392255068 CET	8.8.8.8	192.168.2.22	0x68c9	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.392255068 CET	8.8.8.8	192.168.2.22	0x68c9	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.405987024 CET	8.8.8.8	192.168.2.22	0xbee8	No error (0)	usr.undertone.com	evt.undertone.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.405987024 CET	8.8.8.8	192.168.2.22	0xbee8	No error (0)	evt.undertone.com	d1wsawskf2klzj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.405987024 CET	8.8.8.8	192.168.2.22	0xbee8	No error (0)	d1wsawskf2klzj.cloudfront.net		18.173.132.84	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.405987024 CET	8.8.8.8	192.168.2.22	0xbee8	No error (0)	d1wsawskf2klzj.cloudfront.net		18.173.132.67	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.405987024 CET	8.8.8.8	192.168.2.22	0xbee8	No error (0)	d1wsawskf2klzj.cloudfront.net		18.173.132.19	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.405987024 CET	8.8.8.8	192.168.2.22	0xbee8	No error (0)	d1wsawskf2klzj.cloudfront.net		18.173.132.92	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.418158054 CET	8.8.8.8	192.168.2.22	0x7e3c	No error (0)	usr.undertone.com	evt.undertone.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.418158054 CET	8.8.8.8	192.168.2.22	0x7e3c	No error (0)	evt.undertone.com	d1wsawskf2klzj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.455355883 CET	8.8.8.8	192.168.2.22	0x1aa8	No error (0)	invstatic101.creativecdn.com		34.96.70.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.455810070 CET	8.8.8.8	192.168.2.22	0xa8f2	No error (0)	connectid.analytics.yahoo.com	d1402xccwihzsp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.456680059 CET	8.8.8.8	192.168.2.22	0x74f0	No error (0)	static.criteo.net	static.va1.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.456757069 CET	8.8.8.8	192.168.2.22	0x6219	No error (0)	static.criteo.net	static.va1.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.456757069 CET	8.8.8.8	192.168.2.22	0x6219	No error (0)	static.va1.vip.prod.criteo.net		74.119.119.131	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.458323002 CET	8.8.8.8	192.168.2.22	0xbd34	No error (0)	connectid.analytics.yahoo.com	d1402xccwihzsp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.458323002 CET	8.8.8.8	192.168.2.22	0xbd34	No error (0)	d1402xccwihzsp.cloudfront.net		13.225.214.44	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.458323002 CET	8.8.8.8	192.168.2.22	0xbd34	No error (0)	d1402xccwihzsp.cloudfront.net		13.225.214.11	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.458323002 CET	8.8.8.8	192.168.2.22	0xbd34	No error (0)	d1402xccwihzsp.cloudfront.net		13.225.214.25	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.458323002 CET	8.8.8.8	192.168.2.22	0xbd34	No error (0)	d1402xccwihzsp.cloudfront.net		13.225.214.112	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.628889084 CET	8.8.8.8	192.168.2.22	0x904b	No error (0)	t.pswec.com	pool.proclivity.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.628889084 CET	8.8.8.8	192.168.2.22	0x904b	No error (0)	pool.proclivity.iponweb.net	elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.628889084 CET	8.8.8.8	192.168.2.22	0x904b	No error (0)	elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com		52.70.100.39	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.628889084 CET	8.8.8.8	192.168.2.22	0x904b	No error (0)	elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com		54.209.16.131	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:13.628909111 CET	8.8.8.8	192.168.2.22	0x681f	No error (0)	t.pswec.com	pool.proclivity.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:13.628909111 CET	8.8.8.8	192.168.2.22	0x681f	No error (0)	pool.proclivity.iponweb.net	elb-aws-va-proclivity-712001148.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.056854963 CET	8.8.8.8	192.168.2.22	0x976f	No error (0)	secure.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.375426054 CET	8.8.8.8	192.168.2.22	0x3617	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 12, 2023 21:40:14.375483036 CET	8.8.8.8	192.168.2.22	0x3978	No error (0)	www.google.com		142.250.217.228	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.629193068 CET	8.8.8.8	192.168.2.22	0x2b5e	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.629193068 CET	8.8.8.8	192.168.2.22	0x2b5e	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.631447077 CET	8.8.8.8	192.168.2.22	0xe21b	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.631447077 CET	8.8.8.8	192.168.2.22	0xe21b	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.631447077 CET	8.8.8.8	192.168.2.22	0xe21b	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.642738104 CET	8.8.8.8	192.168.2.22	0xd09e	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.644759893 CET	8.8.8.8	192.168.2.22	0x1a26	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.644759893 CET	8.8.8.8	192.168.2.22	0x1a26	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.73	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.644759893 CET	8.8.8.8	192.168.2.22	0x1a26	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.58	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.644759893 CET	8.8.8.8	192.168.2.22	0x1a26	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.74	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.644759893 CET	8.8.8.8	192.168.2.22	0x1a26	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.89	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.644759893 CET	8.8.8.8	192.168.2.22	0x1a26	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.90	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.644759893 CET	8.8.8.8	192.168.2.22	0x1a26	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.106	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.644759893 CET	8.8.8.8	192.168.2.22	0x1a26	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.105	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.644759893 CET	8.8.8.8	192.168.2.22	0x1a26	No error (0)	rtb-csync-usw1.smartadserver.com		23.83.76.57	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.685359955 CET	8.8.8.8	192.168.2.22	0x41b3	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.687510014 CET	8.8.8.8	192.168.2.22	0xb51d	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.689878941 CET	8.8.8.8	192.168.2.22	0x789f	No error (0)	cs.minutemedia-prebid.com	cs.digbearings.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.689878941 CET	8.8.8.8	192.168.2.22	0x789f	No error (0)	cs.digbearings.com		34.197.219.74	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.689878941 CET	8.8.8.8	192.168.2.22	0x789f	No error (0)	cs.digbearings.com		54.145.99.161	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.689878941 CET	8.8.8.8	192.168.2.22	0x789f	No error (0)	cs.digbearings.com		52.206.176.4	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.689878941 CET	8.8.8.8	192.168.2.22	0x789f	No error (0)	cs.digbearings.com		3.214.250.236	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.691164970 CET	8.8.8.8	192.168.2.22	0x9168	No error (0)	cs.yellowblue.io		34.197.219.74	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.691164970 CET	8.8.8.8	192.168.2.22	0x9168	No error (0)	cs.yellowblue.io		52.206.176.4	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.691164970 CET	8.8.8.8	192.168.2.22	0x9168	No error (0)	cs.yellowblue.io		3.214.250.236	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.691164970 CET	8.8.8.8	192.168.2.22	0x9168	No error (0)	cs.yellowblue.io		54.145.99.161	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.693538904 CET	8.8.8.8	192.168.2.22	0x60ec	No error (0)	sync.aniview.com	syncsc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.693538904 CET	8.8.8.8	192.168.2.22	0x60ec	No error (0)	syncsc.aniview.com		96.46.186.182	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.694494963 CET	8.8.8.8	192.168.2.22	0x9ad8	No error (0)	sync.aniview.com	syncsc.aniview.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.810180902 CET	8.8.8.8	192.168.2.22	0x98c2	No error (0)	www.googletagservices.com		192.178.50.34	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.813762903 CET	8.8.8.8	192.168.2.22	0x3d2e	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.815700054 CET	8.8.8.8	192.168.2.22	0xf84e	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:14.850064993 CET	8.8.8.8	192.168.2.22	0x1e88	No error (0)	esp.rtbhouse.com		35.190.39.111	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.866878986 CET	8.8.8.8	192.168.2.22	0x58d8	No error (0)	s0.2mdn.net		142.250.217.198	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:14.875271082 CET	8.8.8.8	192.168.2.22	0xc151	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.083430052 CET	8.8.8.8	192.168.2.22	0xf441	No error (0)	match.sync.ad.cpe.dotomi.com	convex-rr.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.297111034 CET	8.8.8.8	192.168.2.22	0x92b9	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.468003035 CET	8.8.8.8	192.168.2.22	0xd48c	No error (0)	cms-xch-chicago.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.476120949 CET	8.8.8.8	192.168.2.22	0xae37	No error (0)	ad-cdn.technoratimedia.com	cs1561.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.477122068 CET	8.8.8.8	192.168.2.22	0xd8dd	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.477161884 CET	8.8.8.8	192.168.2.22	0xb298	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.477161884 CET	8.8.8.8	192.168.2.22	0xb298	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.478562117 CET	8.8.8.8	192.168.2.22	0xb7c7	No error (0)	ad-cdn.technoratimedia.com	cs1561.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.478562117 CET	8.8.8.8	192.168.2.22	0xb7c7	No error (0)	cs1561.wpc.edgecastcdn.net		152.199.5.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.480221033 CET	8.8.8.8	192.168.2.22	0x993e	No error (0)	match.justpremium.com	cookiematch-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.483107090 CET	8.8.8.8	192.168.2.22	0x6fbc	No error (0)	match.justpremium.com	cookiematch-us-east-1.prod.justpremium.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.483107090 CET	8.8.8.8	192.168.2.22	0x6fbc	No error (0)	cookiematch-us-east-1.prod.justpremium.com		44.194.38.185	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.483107090 CET	8.8.8.8	192.168.2.22	0x6fbc	No error (0)	cookiematch-us-east-1.prod.justpremium.com		34.204.24.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.483107090 CET	8.8.8.8	192.168.2.22	0x6fbc	No error (0)	cookiematch-us-east-1.prod.justpremium.com		52.200.52.118	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.489845991 CET	8.8.8.8	192.168.2.22	0x7fdd	No error (0)	crb.kargo.com		18.232.190.152	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.489845991 CET	8.8.8.8	192.168.2.22	0x7fdd	No error (0)	crb.kargo.com		44.217.198.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.489845991 CET	8.8.8.8	192.168.2.22	0x7fdd	No error (0)	crb.kargo.com		3.225.187.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.489845991 CET	8.8.8.8	192.168.2.22	0x7fdd	No error (0)	crb.kargo.com		44.194.252.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.489845991 CET	8.8.8.8	192.168.2.22	0x7fdd	No error (0)	crb.kargo.com		44.198.25.64	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.489845991 CET	8.8.8.8	192.168.2.22	0x7fdd	No error (0)	crb.kargo.com		34.224.153.9	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.490139961 CET	8.8.8.8	192.168.2.22	0xf8bb	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.490139961 CET	8.8.8.8	192.168.2.22	0xf8bb	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.490139961 CET	8.8.8.8	192.168.2.22	0xf8bb	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.490340948 CET	8.8.8.8	192.168.2.22	0xb2e8	No error (0)	e.serverbid.com	x.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.490340948 CET	8.8.8.8	192.168.2.22	0xb2e8	No error (0)	x.serverbid.com	exchange.consumabletv.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.490340948 CET	8.8.8.8	192.168.2.22	0xb2e8	No error (0)	exchange.consumabletv.com	cx.serverbid.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.490340948 CET	8.8.8.8	192.168.2.22	0xb2e8	No error (0)	cx.serverbid.com		159.89.246.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.490771055 CET	8.8.8.8	192.168.2.22	0x2aad	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.490771055 CET	8.8.8.8	192.168.2.22	0x2aad	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.491321087 CET	8.8.8.8	192.168.2.22	0xb800	No error (0)	sync.ex.co		3.215.81.149	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.491321087 CET	8.8.8.8	192.168.2.22	0xb800	No error (0)	sync.ex.co		52.202.38.96	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.491321087 CET	8.8.8.8	192.168.2.22	0xb800	No error (0)	sync.ex.co		34.207.35.169	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.494313955 CET	8.8.8.8	192.168.2.22	0x6b58	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Dec 12, 2023 21:40:15.495121002 CET	8.8.8.8	192.168.2.22	0x6d01	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.495121002 CET	8.8.8.8	192.168.2.22	0x6d01	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.646217108 CET	8.8.8.8	192.168.2.22	0x3ba7	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.646217108 CET	8.8.8.8	192.168.2.22	0x3ba7	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.646217108 CET	8.8.8.8	192.168.2.22	0x3ba7	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.646217108 CET	8.8.8.8	192.168.2.22	0x3ba7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		52.204.91.144	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.646217108 CET	8.8.8.8	192.168.2.22	0x3ba7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.94.16.175	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.646217108 CET	8.8.8.8	192.168.2.22	0x3ba7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.196.244.232	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.646217108 CET	8.8.8.8	192.168.2.22	0x3ba7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.219.113.11	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.646217108 CET	8.8.8.8	192.168.2.22	0x3ba7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.197.181.200	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.646217108 CET	8.8.8.8	192.168.2.22	0x3ba7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		35.175.88.165	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.646217108 CET	8.8.8.8	192.168.2.22	0x3ba7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.196.16.148	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.646217108 CET	8.8.8.8	192.168.2.22	0x3ba7	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.158.160.210	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.647540092 CET	8.8.8.8	192.168.2.22	0x316	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.647540092 CET	8.8.8.8	192.168.2.22	0x316	No error (0)	simage2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.647540092 CET	8.8.8.8	192.168.2.22	0x316	No error (0)	pug-njrpb.pubmnet.com		162.248.18.37	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.647623062 CET	8.8.8.8	192.168.2.22	0x203b	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.647623062 CET	8.8.8.8	192.168.2.22	0x203b	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.647799015 CET	8.8.8.8	192.168.2.22	0x8594	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.647799015 CET	8.8.8.8	192.168.2.22	0x8594	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.647799015 CET	8.8.8.8	192.168.2.22	0x8594	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.648255110 CET	8.8.8.8	192.168.2.22	0xb901	No error (0)	usr.undertone.com	evt.undertone.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.648255110 CET	8.8.8.8	192.168.2.22	0xb901	No error (0)	evt.undertone.com	d1wsawskf2klzj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.649979115 CET	8.8.8.8	192.168.2.22	0x2d33	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.649979115 CET	8.8.8.8	192.168.2.22	0x2d33	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.650928974 CET	8.8.8.8	192.168.2.22	0x9b8c	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.650928974 CET	8.8.8.8	192.168.2.22	0x9b8c	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.651731968 CET	8.8.8.8	192.168.2.22	0x1bf8	No error (0)	r.bidswitch.net	pool-use-gce-sc.reims.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.651731968 CET	8.8.8.8	192.168.2.22	0x1bf8	No error (0)	pool-use-gce-sc.reims.iponweb.net		35.211.118.13	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.676676989 CET	8.8.8.8	192.168.2.22	0x9e92	No error (0)	r.bidswitch.net	pool-use-gce-sc.reims.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.681145906 CET	8.8.8.8	192.168.2.22	0x7bb4	No error (0)	usr.undertone.com	evt.undertone.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.681145906 CET	8.8.8.8	192.168.2.22	0x7bb4	No error (0)	evt.undertone.com	d1wsawskf2klzj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:15.681145906 CET	8.8.8.8	192.168.2.22	0x7bb4	No error (0)	d1wsawskf2klzj.cloudfront.net		18.173.132.84	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.681145906 CET	8.8.8.8	192.168.2.22	0x7bb4	No error (0)	d1wsawskf2klzj.cloudfront.net		18.173.132.67	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.681145906 CET	8.8.8.8	192.168.2.22	0x7bb4	No error (0)	d1wsawskf2klzj.cloudfront.net		18.173.132.19	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:15.681145906 CET	8.8.8.8	192.168.2.22	0x7bb4	No error (0)	d1wsawskf2klzj.cloudfront.net		18.173.132.92	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.001816988 CET	8.8.8.8	192.168.2.22	0xc8	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.002443075 CET	8.8.8.8	192.168.2.22	0x3a1b	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:16.002443075 CET	8.8.8.8	192.168.2.22	0x3a1b	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.002490044 CET	8.8.8.8	192.168.2.22	0xf8e8	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:16.435024023 CET	8.8.8.8	192.168.2.22	0x4aab	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:16.435746908 CET	8.8.8.8	192.168.2.22	0xcb3e	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:16.435746908 CET	8.8.8.8	192.168.2.22	0xcb3e	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.435746908 CET	8.8.8.8	192.168.2.22	0xcb3e	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.435746908 CET	8.8.8.8	192.168.2.22	0xcb3e	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.437849998 CET	8.8.8.8	192.168.2.22	0x229e	No error (0)	gocm.c.appier.net	cm119.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:16.437849998 CET	8.8.8.8	192.168.2.22	0x229e	No error (0)	cm119.appier.org		172.105.220.23	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.438282967 CET	8.8.8.8	192.168.2.22	0x8931	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:16.438321114 CET	8.8.8.8	192.168.2.22	0x9fd5	No error (0)	gocm.c.appier.net	cm125.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:16.440526009 CET	8.8.8.8	192.168.2.22	0xd101	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.441154003 CET	8.8.8.8	192.168.2.22	0xa884	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.441154003 CET	8.8.8.8	192.168.2.22	0xa884	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.446283102 CET	8.8.8.8	192.168.2.22	0x6406	No error (0)	synchroscript.deliveryengine.adswizz.com		18.67.39.71	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.446283102 CET	8.8.8.8	192.168.2.22	0x6406	No error (0)	synchroscript.deliveryengine.adswizz.com		18.67.39.17	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.446283102 CET	8.8.8.8	192.168.2.22	0x6406	No error (0)	synchroscript.deliveryengine.adswizz.com		18.67.39.96	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.446283102 CET	8.8.8.8	192.168.2.22	0x6406	No error (0)	synchroscript.deliveryengine.adswizz.com		18.67.39.93	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.446335077 CET	8.8.8.8	192.168.2.22	0xc441	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.447117090 CET	8.8.8.8	192.168.2.22	0xa4f2	No error (0)	bcp.crwdcntrl.net		34.199.141.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.447117090 CET	8.8.8.8	192.168.2.22	0xa4f2	No error (0)	bcp.crwdcntrl.net		44.193.54.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.447117090 CET	8.8.8.8	192.168.2.22	0xa4f2	No error (0)	bcp.crwdcntrl.net		54.88.134.208	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.447117090 CET	8.8.8.8	192.168.2.22	0xa4f2	No error (0)	bcp.crwdcntrl.net		54.83.134.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.447117090 CET	8.8.8.8	192.168.2.22	0xa4f2	No error (0)	bcp.crwdcntrl.net		54.209.94.68	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.447117090 CET	8.8.8.8	192.168.2.22	0xa4f2	No error (0)	bcp.crwdcntrl.net		34.230.211.254	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.447117090 CET	8.8.8.8	192.168.2.22	0xa4f2	No error (0)	bcp.crwdcntrl.net		34.194.172.133	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.447117090 CET	8.8.8.8	192.168.2.22	0xa4f2	No error (0)	bcp.crwdcntrl.net		3.93.99.238	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.447168112 CET	8.8.8.8	192.168.2.22	0x2246	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:17.447168112 CET	8.8.8.8	192.168.2.22	0x2246	No error (0)	gum.va1.vip.prod.criteo.com		74.119.119.139	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.447180986 CET	8.8.8.8	192.168.2.22	0x207e	No error (0)	gum.criteo.com	gum.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:17.476335049 CET	8.8.8.8	192.168.2.22	0x356e	No error (0)	www.google.com		142.250.189.132	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.477210999 CET	8.8.8.8	192.168.2.22	0x5b11	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 12, 2023 21:40:17.837169886 CET	8.8.8.8	192.168.2.22	0xa1dc	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:17.837169886 CET	8.8.8.8	192.168.2.22	0xa1dc	No error (0)	adserver.technoratimedia.com		193.122.130.38	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:17.839163065 CET	8.8.8.8	192.168.2.22	0x71	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:18.469650030 CET	8.8.8.8	192.168.2.22	0x3747	No error (0)	aep.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.473068953 CET	8.8.8.8	192.168.2.22	0x8838	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:18.473186970 CET	8.8.8.8	192.168.2.22	0xae18	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:18.473248959 CET	8.8.8.8	192.168.2.22	0x5bc8	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:18.473248959 CET	8.8.8.8	192.168.2.22	0x5bc8	No error (0)	idaas-ext.cph.liveintent.com		34.199.75.211	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.473248959 CET	8.8.8.8	192.168.2.22	0x5bc8	No error (0)	idaas-ext.cph.liveintent.com		54.82.32.1	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.473248959 CET	8.8.8.8	192.168.2.22	0x5bc8	No error (0)	idaas-ext.cph.liveintent.com		34.232.121.20	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.473248959 CET	8.8.8.8	192.168.2.22	0x5bc8	No error (0)	idaas-ext.cph.liveintent.com		52.1.125.115	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.473248959 CET	8.8.8.8	192.168.2.22	0x5bc8	No error (0)	idaas-ext.cph.liveintent.com		52.87.84.104	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.473248959 CET	8.8.8.8	192.168.2.22	0x5bc8	No error (0)	idaas-ext.cph.liveintent.com		3.223.88.167	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.473248959 CET	8.8.8.8	192.168.2.22	0x5bc8	No error (0)	idaas-ext.cph.liveintent.com		44.195.173.209	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.473248959 CET	8.8.8.8	192.168.2.22	0x5bc8	No error (0)	idaas-ext.cph.liveintent.com		54.166.141.119	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.474132061 CET	8.8.8.8	192.168.2.22	0x5e47	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:18.474268913 CET	8.8.8.8	192.168.2.22	0x5cf1	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:18.474642038 CET	8.8.8.8	192.168.2.22	0x77be	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:18.474642038 CET	8.8.8.8	192.168.2.22	0x77be	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.93.251.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.474642038 CET	8.8.8.8	192.168.2.22	0x77be	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		18.215.67.38	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.474642038 CET	8.8.8.8	192.168.2.22	0x77be	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.197.216.192	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.474642038 CET	8.8.8.8	192.168.2.22	0x77be	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.215.112.158	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:18.953154087 CET	8.8.8.8	192.168.2.22	0xa84c	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:19.493465900 CET	8.8.8.8	192.168.2.22	0xe1e8	No error (0)	googleads.g.doubleclick.net		192.178.50.34	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:19.494926929 CET	8.8.8.8	192.168.2.22	0xcaec	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 12, 2023 21:40:19.750478029 CET	8.8.8.8	192.168.2.22	0x4abe	No error (0)	googleads.g.doubleclick.net		192.178.50.66	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:19.751775980 CET	8.8.8.8	192.168.2.22	0x569f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 12, 2023 21:40:20.309758902 CET	8.8.8.8	192.168.2.22	0x5d5d	No error (0)	a.audrte.com		34.251.97.118	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.309758902 CET	8.8.8.8	192.168.2.22	0x5d5d	No error (0)	a.audrte.com		52.48.177.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.309758902 CET	8.8.8.8	192.168.2.22	0x5d5d	No error (0)	a.audrte.com		54.246.67.235	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.309758902 CET	8.8.8.8	192.168.2.22	0x5d5d	No error (0)	a.audrte.com		52.16.120.138	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.309758902 CET	8.8.8.8	192.168.2.22	0x5d5d	No error (0)	a.audrte.com		54.154.2.209	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.309758902 CET	8.8.8.8	192.168.2.22	0x5d5d	No error (0)	a.audrte.com		3.248.68.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.310923100 CET	8.8.8.8	192.168.2.22	0xf657	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:20.310923100 CET	8.8.8.8	192.168.2.22	0xf657	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.310923100 CET	8.8.8.8	192.168.2.22	0xf657	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.80	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.310923100 CET	8.8.8.8	192.168.2.22	0xf657	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.119	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.310923100 CET	8.8.8.8	192.168.2.22	0xf657	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.91	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.310997963 CET	8.8.8.8	192.168.2.22	0xb95f	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:20.310997963 CET	8.8.8.8	192.168.2.22	0xb95f	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.311052084 CET	8.8.8.8	192.168.2.22	0xe0cc	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:20.311726093 CET	8.8.8.8	192.168.2.22	0xf640	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:20.312827110 CET	8.8.8.8	192.168.2.22	0x5850	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.312827110 CET	8.8.8.8	192.168.2.22	0x5850	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.312827110 CET	8.8.8.8	192.168.2.22	0x5850	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.312827110 CET	8.8.8.8	192.168.2.22	0x5850	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.312827110 CET	8.8.8.8	192.168.2.22	0x5850	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.312827110 CET	8.8.8.8	192.168.2.22	0x5850	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.312827110 CET	8.8.8.8	192.168.2.22	0x5850	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.312827110 CET	8.8.8.8	192.168.2.22	0x5850	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.312827110 CET	8.8.8.8	192.168.2.22	0x5850	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.312827110 CET	8.8.8.8	192.168.2.22	0x5850	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.390144110 CET	8.8.8.8	192.168.2.22	0x5220	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:20.390144110 CET	8.8.8.8	192.168.2.22	0x5220	No error (0)	securepubads46.g.doubleclick.net		142.250.189.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.394160986 CET	8.8.8.8	192.168.2.22	0x8294	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:20.609947920 CET	8.8.8.8	192.168.2.22	0x871d	No error (0)	cs.media.net		23.221.16.23	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.639708042 CET	8.8.8.8	192.168.2.22	0xd113	No error (0)	io.narrative.io		54.234.86.126	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.639708042 CET	8.8.8.8	192.168.2.22	0xd113	No error (0)	io.narrative.io		52.54.213.65	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.639708042 CET	8.8.8.8	192.168.2.22	0xd113	No error (0)	io.narrative.io		35.169.254.179	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:20.639708042 CET	8.8.8.8	192.168.2.22	0xd113	No error (0)	io.narrative.io		54.156.158.209	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.750267029 CET	8.8.8.8	192.168.2.22	0x559e	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:23.750267029 CET	8.8.8.8	192.168.2.22	0x559e	No error (0)	image2v2.pubmnet.com	pug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:23.750267029 CET	8.8.8.8	192.168.2.22	0x559e	No error (0)	pug-njrpb.pubmnet.com		162.248.18.37	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.753582954 CET	8.8.8.8	192.168.2.22	0xb0e1	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:23.753582954 CET	8.8.8.8	192.168.2.22	0xb0e1	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777139902 CET	8.8.8.8	192.168.2.22	0xb61c	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777971029 CET	8.8.8.8	192.168.2.22	0xdbbf	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:23.777971029 CET	8.8.8.8	192.168.2.22	0xdbbf	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:23.781770945 CET	8.8.8.8	192.168.2.22	0xe127	No error (0)	thrtle.com		52.71.16.59	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.781770945 CET	8.8.8.8	192.168.2.22	0xe127	No error (0)	thrtle.com		54.159.245.111	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.781770945 CET	8.8.8.8	192.168.2.22	0xe127	No error (0)	thrtle.com		54.158.15.169	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.781770945 CET	8.8.8.8	192.168.2.22	0xe127	No error (0)	thrtle.com		204.236.210.31	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.781770945 CET	8.8.8.8	192.168.2.22	0xe127	No error (0)	thrtle.com		34.235.53.166	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.781770945 CET	8.8.8.8	192.168.2.22	0xe127	No error (0)	thrtle.com		50.19.110.14	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.781770945 CET	8.8.8.8	192.168.2.22	0xe127	No error (0)	thrtle.com		54.156.62.74	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:23.781770945 CET	8.8.8.8	192.168.2.22	0xe127	No error (0)	thrtle.com		44.197.22.251	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:25.270709991 CET	8.8.8.8	192.168.2.22	0x250e	No error (0)	spl.zeotap.com		172.67.13.182	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:25.270709991 CET	8.8.8.8	192.168.2.22	0x250e	No error (0)	spl.zeotap.com		104.22.25.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:25.270709991 CET	8.8.8.8	192.168.2.22	0x250e	No error (0)	spl.zeotap.com		104.22.24.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:25.274924994 CET	8.8.8.8	192.168.2.22	0x9f7a	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
Dec 12, 2023 21:40:25.276614904 CET	8.8.8.8	192.168.2.22	0x2d0e	No error (0)	pagead-googlehosted.l.google.com		192.178.50.33	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.050340891 CET	8.8.8.8	192.168.2.22	0x3d57	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:26.050633907 CET	8.8.8.8	192.168.2.22	0xd9b	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:26.250237942 CET	8.8.8.8	192.168.2.22	0xa8fd	No error (0)	onetag-sys.com		51.222.39.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.250237942 CET	8.8.8.8	192.168.2.22	0xa8fd	No error (0)	onetag-sys.com		51.222.239.232	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.250237942 CET	8.8.8.8	192.168.2.22	0xa8fd	No error (0)	onetag-sys.com		51.222.39.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.250237942 CET	8.8.8.8	192.168.2.22	0xa8fd	No error (0)	onetag-sys.com		51.222.39.185	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.250237942 CET	8.8.8.8	192.168.2.22	0xa8fd	No error (0)	onetag-sys.com		51.222.239.230	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.250237942 CET	8.8.8.8	192.168.2.22	0xa8fd	No error (0)	onetag-sys.com		51.222.39.187	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.250353098 CET	8.8.8.8	192.168.2.22	0xaeb9	No error (0)	sync.adotmob.com		45.137.176.88	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.251207113 CET	8.8.8.8	192.168.2.22	0x1a97	No error (0)	um4.eqads.com		52.20.2.200	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.251207113 CET	8.8.8.8	192.168.2.22	0x1a97	No error (0)	um4.eqads.com		3.211.158.0	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.253671885 CET	8.8.8.8	192.168.2.22	0x540b	No error (0)	cti.w55c.net	d2vm2ftdj5dnrv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:26.254795074 CET	8.8.8.8	192.168.2.22	0x2d8f	No error (0)	cti.w55c.net	d2vm2ftdj5dnrv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:26.254795074 CET	8.8.8.8	192.168.2.22	0x2d8f	No error (0)	d2vm2ftdj5dnrv.cloudfront.net		18.164.124.115	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.254795074 CET	8.8.8.8	192.168.2.22	0x2d8f	No error (0)	d2vm2ftdj5dnrv.cloudfront.net		18.164.124.67	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.254795074 CET	8.8.8.8	192.168.2.22	0x2d8f	No error (0)	d2vm2ftdj5dnrv.cloudfront.net		18.164.124.90	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.254795074 CET	8.8.8.8	192.168.2.22	0x2d8f	No error (0)	d2vm2ftdj5dnrv.cloudfront.net		18.164.124.125	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.332170963 CET	8.8.8.8	192.168.2.22	0xbcea	No error (0)	cm.smadex.com		13.225.214.50	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.332170963 CET	8.8.8.8	192.168.2.22	0xbcea	No error (0)	cm.smadex.com		13.225.214.101	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.332170963 CET	8.8.8.8	192.168.2.22	0xbcea	No error (0)	cm.smadex.com		13.225.214.90	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.332170963 CET	8.8.8.8	192.168.2.22	0xbcea	No error (0)	cm.smadex.com		13.225.214.96	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.426553965 CET	8.8.8.8	192.168.2.22	0xf928	No error (0)	sid.storygize.net		143.244.208.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.551285028 CET	8.8.8.8	192.168.2.22	0x23e4	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:26.551285028 CET	8.8.8.8	192.168.2.22	0x23e4	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.552201986 CET	8.8.8.8	192.168.2.22	0x39ed	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:26.911860943 CET	8.8.8.8	192.168.2.22	0x8117	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:26.911860943 CET	8.8.8.8	192.168.2.22	0x8117	No error (0)	idaas6.cph.liveintent.com		52.205.232.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.911860943 CET	8.8.8.8	192.168.2.22	0x8117	No error (0)	idaas6.cph.liveintent.com		44.205.176.247	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.911860943 CET	8.8.8.8	192.168.2.22	0x8117	No error (0)	idaas6.cph.liveintent.com		52.45.234.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.911860943 CET	8.8.8.8	192.168.2.22	0x8117	No error (0)	idaas6.cph.liveintent.com		52.21.63.80	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.911860943 CET	8.8.8.8	192.168.2.22	0x8117	No error (0)	idaas6.cph.liveintent.com		34.203.113.97	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.911860943 CET	8.8.8.8	192.168.2.22	0x8117	No error (0)	idaas6.cph.liveintent.com		3.210.24.197	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:26.912547112 CET	8.8.8.8	192.168.2.22	0x41e6	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:27.533066034 CET	8.8.8.8	192.168.2.22	0x2dd3	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.533066034 CET	8.8.8.8	192.168.2.22	0x2dd3	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.533066034 CET	8.8.8.8	192.168.2.22	0x2dd3	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.533066034 CET	8.8.8.8	192.168.2.22	0x2dd3	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.533066034 CET	8.8.8.8	192.168.2.22	0x2dd3	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.533066034 CET	8.8.8.8	192.168.2.22	0x2dd3	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.533066034 CET	8.8.8.8	192.168.2.22	0x2dd3	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.533066034 CET	8.8.8.8	192.168.2.22	0x2dd3	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.533066034 CET	8.8.8.8	192.168.2.22	0x2dd3	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.533066034 CET	8.8.8.8	192.168.2.22	0x2dd3	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.722018003 CET	8.8.8.8	192.168.2.22	0xf05f	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:27.722018003 CET	8.8.8.8	192.168.2.22	0xf05f	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:27.722018003 CET	8.8.8.8	192.168.2.22	0xf05f	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.722018003 CET	8.8.8.8	192.168.2.22	0xf05f	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.722111940 CET	8.8.8.8	192.168.2.22	0xd58f	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:27.722111940 CET	8.8.8.8	192.168.2.22	0xd58f	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:27.727047920 CET	8.8.8.8	192.168.2.22	0x7ff6	No error (0)	secure.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.868774891 CET	8.8.8.8	192.168.2.22	0xffea	No error (0)	cm.g.doubleclick.net		142.250.64.194	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.980916023 CET	8.8.8.8	192.168.2.22	0xe28	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:27.981162071 CET	8.8.8.8	192.168.2.22	0x8692	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:27.981162071 CET	8.8.8.8	192.168.2.22	0x8692	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.004307032 CET	8.8.8.8	192.168.2.22	0xcb4f	No error (0)	esp.rtbhouse.com		35.190.39.111	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.014051914 CET	8.8.8.8	192.168.2.22	0xb4ec	No error (0)	s0.2mdn.net		142.250.217.198	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.027699947 CET	8.8.8.8	192.168.2.22	0xdd54	No error (0)	pmp.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.038953066 CET	8.8.8.8	192.168.2.22	0x221f	No error (0)	synchroscript.deliveryengine.adswizz.com		18.67.39.71	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.038953066 CET	8.8.8.8	192.168.2.22	0x221f	No error (0)	synchroscript.deliveryengine.adswizz.com		18.67.39.93	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.038953066 CET	8.8.8.8	192.168.2.22	0x221f	No error (0)	synchroscript.deliveryengine.adswizz.com		18.67.39.96	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.038953066 CET	8.8.8.8	192.168.2.22	0x221f	No error (0)	synchroscript.deliveryengine.adswizz.com		18.67.39.17	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.039987087 CET	8.8.8.8	192.168.2.22	0x3109	No error (0)	bcp.crwdcntrl.net		3.233.79.191	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.039987087 CET	8.8.8.8	192.168.2.22	0x3109	No error (0)	bcp.crwdcntrl.net		3.93.99.238	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.039987087 CET	8.8.8.8	192.168.2.22	0x3109	No error (0)	bcp.crwdcntrl.net		34.199.141.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.039987087 CET	8.8.8.8	192.168.2.22	0x3109	No error (0)	bcp.crwdcntrl.net		54.88.134.208	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.039987087 CET	8.8.8.8	192.168.2.22	0x3109	No error (0)	bcp.crwdcntrl.net		54.209.94.68	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.039987087 CET	8.8.8.8	192.168.2.22	0x3109	No error (0)	bcp.crwdcntrl.net		44.193.54.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.039987087 CET	8.8.8.8	192.168.2.22	0x3109	No error (0)	bcp.crwdcntrl.net		34.230.211.254	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.039987087 CET	8.8.8.8	192.168.2.22	0x3109	No error (0)	bcp.crwdcntrl.net		54.83.134.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.048326969 CET	8.8.8.8	192.168.2.22	0xf861	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.049196959 CET	8.8.8.8	192.168.2.22	0xd3ff	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.049748898 CET	8.8.8.8	192.168.2.22	0x53a5	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.049748898 CET	8.8.8.8	192.168.2.22	0x53a5	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		18.215.67.38	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.049748898 CET	8.8.8.8	192.168.2.22	0x53a5	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.197.216.192	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.049748898 CET	8.8.8.8	192.168.2.22	0x53a5	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.93.251.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.049748898 CET	8.8.8.8	192.168.2.22	0x53a5	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.215.112.158	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.049804926 CET	8.8.8.8	192.168.2.22	0xfd3f	No error (0)	googleads.g.doubleclick.net		142.250.64.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.050937891 CET	8.8.8.8	192.168.2.22	0x8ab7	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 12, 2023 21:40:28.071235895 CET	8.8.8.8	192.168.2.22	0x1d43	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.071235895 CET	8.8.8.8	192.168.2.22	0x1d43	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.91	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.071235895 CET	8.8.8.8	192.168.2.22	0x1d43	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.78	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.071235895 CET	8.8.8.8	192.168.2.22	0x1d43	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.80	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.071235895 CET	8.8.8.8	192.168.2.22	0x1d43	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.119	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.081799030 CET	8.8.8.8	192.168.2.22	0xce79	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.101767063 CET	8.8.8.8	192.168.2.22	0xcd70	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.111633062 CET	8.8.8.8	192.168.2.22	0x9eb4	No error (0)	sync.crwdcntrl.net		3.93.99.238	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.111633062 CET	8.8.8.8	192.168.2.22	0x9eb4	No error (0)	sync.crwdcntrl.net		54.83.134.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.111633062 CET	8.8.8.8	192.168.2.22	0x9eb4	No error (0)	sync.crwdcntrl.net		34.230.211.254	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.111633062 CET	8.8.8.8	192.168.2.22	0x9eb4	No error (0)	sync.crwdcntrl.net		44.193.54.186	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.111633062 CET	8.8.8.8	192.168.2.22	0x9eb4	No error (0)	sync.crwdcntrl.net		3.233.79.191	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.111633062 CET	8.8.8.8	192.168.2.22	0x9eb4	No error (0)	sync.crwdcntrl.net		54.88.134.208	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.111633062 CET	8.8.8.8	192.168.2.22	0x9eb4	No error (0)	sync.crwdcntrl.net		54.209.94.68	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.111633062 CET	8.8.8.8	192.168.2.22	0x9eb4	No error (0)	sync.crwdcntrl.net		34.194.172.133	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.112507105 CET	8.8.8.8	192.168.2.22	0x9f7f	No error (0)	rcp.c.appier.net	cm124.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.112507105 CET	8.8.8.8	192.168.2.22	0x9f7f	No error (0)	cm124.appier.org		172.105.232.22	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.113204002 CET	8.8.8.8	192.168.2.22	0x459c	No error (0)	rcp.c.appier.net	cm125.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.159638882 CET	8.8.8.8	192.168.2.22	0xd812	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Dec 12, 2023 21:40:28.162187099 CET	8.8.8.8	192.168.2.22	0x82fa	No error (0)	mwzeom.zeotap.com		104.22.24.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.162187099 CET	8.8.8.8	192.168.2.22	0x82fa	No error (0)	mwzeom.zeotap.com		104.22.25.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.162187099 CET	8.8.8.8	192.168.2.22	0x82fa	No error (0)	mwzeom.zeotap.com		172.67.13.182	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		211.120.53.202	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		124.146.153.168	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		124.146.153.170	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		124.146.153.164	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		124.146.153.160	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		211.120.53.205	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		211.120.53.200	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		211.120.53.203	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		211.120.53.201	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		124.146.153.166	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		124.146.153.165	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		124.146.153.161	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		211.120.53.206	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		124.146.153.169	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		124.146.153.167	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		124.146.153.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		124.146.153.162	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.327748060 CET	8.8.8.8	192.168.2.22	0xc5c5	No error (0)	tg.dr.socdm.com		211.120.53.204	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.329305887 CET	8.8.8.8	192.168.2.22	0x97b4	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.582467079 CET	8.8.8.8	192.168.2.22	0x629e	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.615482092 CET	8.8.8.8	192.168.2.22	0x6185	No error (0)	s.ad.smaato.net		108.157.162.121	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.615482092 CET	8.8.8.8	192.168.2.22	0x6185	No error (0)	s.ad.smaato.net		108.157.162.59	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.615482092 CET	8.8.8.8	192.168.2.22	0x6185	No error (0)	s.ad.smaato.net		108.157.162.127	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.615482092 CET	8.8.8.8	192.168.2.22	0x6185	No error (0)	s.ad.smaato.net		108.157.162.67	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.681484938 CET	8.8.8.8	192.168.2.22	0x1bc	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.681484938 CET	8.8.8.8	192.168.2.22	0x1bc	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.690670013 CET	8.8.8.8	192.168.2.22	0x473c	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.691266060 CET	8.8.8.8	192.168.2.22	0x8471	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.717729092 CET	8.8.8.8	192.168.2.22	0xe8ad	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.717878103 CET	8.8.8.8	192.168.2.22	0xba45	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:28.717878103 CET	8.8.8.8	192.168.2.22	0xba45	No error (0)	idaas6.cph.liveintent.com		52.45.234.214	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.717878103 CET	8.8.8.8	192.168.2.22	0xba45	No error (0)	idaas6.cph.liveintent.com		44.205.176.247	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.717878103 CET	8.8.8.8	192.168.2.22	0xba45	No error (0)	idaas6.cph.liveintent.com		52.21.63.80	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.717878103 CET	8.8.8.8	192.168.2.22	0xba45	No error (0)	idaas6.cph.liveintent.com		52.205.232.189	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.717878103 CET	8.8.8.8	192.168.2.22	0xba45	No error (0)	idaas6.cph.liveintent.com		34.203.113.97	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.717878103 CET	8.8.8.8	192.168.2.22	0xba45	No error (0)	idaas6.cph.liveintent.com		3.210.24.197	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.719639063 CET	8.8.8.8	192.168.2.22	0x3ae9	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
Dec 12, 2023 21:40:28.720767975 CET	8.8.8.8	192.168.2.22	0xc173	No error (0)	spl.zeotap.com		104.22.24.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.720767975 CET	8.8.8.8	192.168.2.22	0xc173	No error (0)	spl.zeotap.com		104.22.25.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.720767975 CET	8.8.8.8	192.168.2.22	0xc173	No error (0)	spl.zeotap.com		172.67.13.182	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:28.831432104 CET	8.8.8.8	192.168.2.22	0x998f	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:29.034709930 CET	8.8.8.8	192.168.2.22	0xa1c4	No error (0)	dm-us.hybrid.ai		37.18.24.16	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.055603027 CET	8.8.8.8	192.168.2.22	0x7f9d	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:30.057706118 CET	8.8.8.8	192.168.2.22	0xd8a	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.057706118 CET	8.8.8.8	192.168.2.22	0xd8a	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.065634966 CET	8.8.8.8	192.168.2.22	0x623b	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:30.611665964 CET	8.8.8.8	192.168.2.22	0xe691	No error (0)	cs.lkqd.net		69.20.43.192	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.853636026 CET	8.8.8.8	192.168.2.22	0x5ad8	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:30.853636026 CET	8.8.8.8	192.168.2.22	0x5ad8	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:30.853636026 CET	8.8.8.8	192.168.2.22	0x5ad8	No error (0)	pool-use.zagreb.iponweb.net		35.211.233.246	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.853693008 CET	8.8.8.8	192.168.2.22	0xf5ad	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:30.853693008 CET	8.8.8.8	192.168.2.22	0xf5ad	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:30.949567080 CET	8.8.8.8	192.168.2.22	0x6168	No error (0)	usync.vrtcal.com	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:30.949567080 CET	8.8.8.8	192.168.2.22	0x6168	No error (0)	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		52.9.147.99	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.949567080 CET	8.8.8.8	192.168.2.22	0x6168	No error (0)	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		52.9.108.225	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.949567080 CET	8.8.8.8	192.168.2.22	0x6168	No error (0)	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		52.8.59.84	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.949567080 CET	8.8.8.8	192.168.2.22	0x6168	No error (0)	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		54.241.114.115	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:30.950782061 CET	8.8.8.8	192.168.2.22	0x5a87	No error (0)	usync.vrtcal.com	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:31.104939938 CET	8.8.8.8	192.168.2.22	0x390f	No error (0)	warp.media.net		23.221.16.23	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.148495913 CET	8.8.8.8	192.168.2.22	0xa4f1	No error (0)	sync.intentiq.com		18.173.219.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.148495913 CET	8.8.8.8	192.168.2.22	0xa4f1	No error (0)	sync.intentiq.com		18.173.219.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.148495913 CET	8.8.8.8	192.168.2.22	0xa4f1	No error (0)	sync.intentiq.com		18.173.219.124	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.148495913 CET	8.8.8.8	192.168.2.22	0xa4f1	No error (0)	sync.intentiq.com		18.173.219.12	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.250113964 CET	8.8.8.8	192.168.2.22	0xfc3a	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Dec 12, 2023 21:40:31.251154900 CET	8.8.8.8	192.168.2.22	0xd26b	No error (0)	mwzeom.zeotap.com		104.22.24.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.251154900 CET	8.8.8.8	192.168.2.22	0xd26b	No error (0)	mwzeom.zeotap.com		172.67.13.182	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:31.251154900 CET	8.8.8.8	192.168.2.22	0xd26b	No error (0)	mwzeom.zeotap.com		104.22.25.87	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.085470915 CET	8.8.8.8	192.168.2.22	0x1a0d	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.085470915 CET	8.8.8.8	192.168.2.22	0x1a0d	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.092967987 CET	8.8.8.8	192.168.2.22	0x77a7	No error (0)	cs.lkqd.net		69.20.43.192	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.095618963 CET	8.8.8.8	192.168.2.22	0x6cd9	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:32.095618963 CET	8.8.8.8	192.168.2.22	0x6cd9	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		34.202.194.6	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.095618963 CET	8.8.8.8	192.168.2.22	0x6cd9	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		34.226.187.58	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.095618963 CET	8.8.8.8	192.168.2.22	0x6cd9	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		44.195.133.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.095618963 CET	8.8.8.8	192.168.2.22	0x6cd9	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		54.82.60.91	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.097681046 CET	8.8.8.8	192.168.2.22	0x1d15	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:32.233549118 CET	8.8.8.8	192.168.2.22	0x938f	No error (0)	sync1.intentiq.com		18.173.219.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.233549118 CET	8.8.8.8	192.168.2.22	0x938f	No error (0)	sync1.intentiq.com		18.173.219.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.233549118 CET	8.8.8.8	192.168.2.22	0x938f	No error (0)	sync1.intentiq.com		18.173.219.124	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.233549118 CET	8.8.8.8	192.168.2.22	0x938f	No error (0)	sync1.intentiq.com		18.173.219.12	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.297318935 CET	8.8.8.8	192.168.2.22	0x567b	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:32.298249960 CET	8.8.8.8	192.168.2.22	0x3f0a	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:32.374243021 CET	8.8.8.8	192.168.2.22	0x6800	No error (0)	cdn-guse1-xch.media.net	wildcard.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:32.390844107 CET	8.8.8.8	192.168.2.22	0xa039	No error (0)	cdn-guse1-xch.media.net	wildcard.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:32.413866997 CET	8.8.8.8	192.168.2.22	0xb353	No error (0)	usync.vrtcal.com	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:32.415363073 CET	8.8.8.8	192.168.2.22	0x14be	No error (0)	usync.vrtcal.com	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:32.415363073 CET	8.8.8.8	192.168.2.22	0x14be	No error (0)	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		52.9.147.99	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.415363073 CET	8.8.8.8	192.168.2.22	0x14be	No error (0)	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		52.8.59.84	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.415363073 CET	8.8.8.8	192.168.2.22	0x14be	No error (0)	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		52.9.108.225	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.415363073 CET	8.8.8.8	192.168.2.22	0x14be	No error (0)	load-balancer-usync-1612103133.us-west-1.elb.amazonaws.com		54.241.114.115	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.973855972 CET	8.8.8.8	192.168.2.22	0x33c	No error (0)	cm-supply-web.gammaplatform.com		35.186.154.107	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.983084917 CET	8.8.8.8	192.168.2.22	0x76f6	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:32.983084917 CET	8.8.8.8	192.168.2.22	0x76f6	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		44.195.133.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.983084917 CET	8.8.8.8	192.168.2.22	0x76f6	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		54.82.60.91	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.983084917 CET	8.8.8.8	192.168.2.22	0x76f6	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		34.226.187.58	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.983084917 CET	8.8.8.8	192.168.2.22	0x76f6	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		34.202.194.6	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:32.984172106 CET	8.8.8.8	192.168.2.22	0xcca9	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:33.030848980 CET	8.8.8.8	192.168.2.22	0xfc7	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:33.033633947 CET	8.8.8.8	192.168.2.22	0x9f61	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:33.305949926 CET	8.8.8.8	192.168.2.22	0x4bb1	No error (0)	sync1.intentiq.com		18.173.219.12	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.305949926 CET	8.8.8.8	192.168.2.22	0x4bb1	No error (0)	sync1.intentiq.com		18.173.219.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.305949926 CET	8.8.8.8	192.168.2.22	0x4bb1	No error (0)	sync1.intentiq.com		18.173.219.124	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.305949926 CET	8.8.8.8	192.168.2.22	0x4bb1	No error (0)	sync1.intentiq.com		18.173.219.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.373452902 CET	8.8.8.8	192.168.2.22	0x5a53	No error (0)	cdn-guse1-xch.media.net	wildcard.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:33.373801947 CET	8.8.8.8	192.168.2.22	0xfc65	No error (0)	cdn-guse1-xch.media.net	wildcard.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:33.666436911 CET	8.8.8.8	192.168.2.22	0x840c	No error (0)	a.audrte.com		54.154.2.209	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.666436911 CET	8.8.8.8	192.168.2.22	0x840c	No error (0)	a.audrte.com		34.251.97.118	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.666436911 CET	8.8.8.8	192.168.2.22	0x840c	No error (0)	a.audrte.com		3.248.68.130	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.666436911 CET	8.8.8.8	192.168.2.22	0x840c	No error (0)	a.audrte.com		54.246.67.235	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.666436911 CET	8.8.8.8	192.168.2.22	0x840c	No error (0)	a.audrte.com		52.48.177.163	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.666436911 CET	8.8.8.8	192.168.2.22	0x840c	No error (0)	a.audrte.com		52.16.120.138	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.848901033 CET	8.8.8.8	192.168.2.22	0x3d79	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:33.849620104 CET	8.8.8.8	192.168.2.22	0x84df	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:33.914139032 CET	8.8.8.8	192.168.2.22	0x8d3c	No error (0)	sync.srv.stackadapt.com		54.197.120.184	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.914139032 CET	8.8.8.8	192.168.2.22	0x8d3c	No error (0)	sync.srv.stackadapt.com		54.159.41.249	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.914139032 CET	8.8.8.8	192.168.2.22	0x8d3c	No error (0)	sync.srv.stackadapt.com		54.159.180.193	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.914139032 CET	8.8.8.8	192.168.2.22	0x8d3c	No error (0)	sync.srv.stackadapt.com		54.205.112.82	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.914139032 CET	8.8.8.8	192.168.2.22	0x8d3c	No error (0)	sync.srv.stackadapt.com		54.211.244.166	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.914139032 CET	8.8.8.8	192.168.2.22	0x8d3c	No error (0)	sync.srv.stackadapt.com		54.147.41.158	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.914139032 CET	8.8.8.8	192.168.2.22	0x8d3c	No error (0)	sync.srv.stackadapt.com		54.160.62.46	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.914139032 CET	8.8.8.8	192.168.2.22	0x8d3c	No error (0)	sync.srv.stackadapt.com		52.86.155.246	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:33.945885897 CET	8.8.8.8	192.168.2.22	0x9d25	No error (0)	hbx.media.net		23.221.16.23	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.227221966 CET	8.8.8.8	192.168.2.22	0x3820	No error (0)	googleads4.g.doubleclick.net		192.178.50.34	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.571134090 CET	8.8.8.8	192.168.2.22	0xddfe	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:34.571134090 CET	8.8.8.8	192.168.2.22	0xddfe	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.571134090 CET	8.8.8.8	192.168.2.22	0xddfe	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.571134090 CET	8.8.8.8	192.168.2.22	0xddfe	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.571134090 CET	8.8.8.8	192.168.2.22	0xddfe	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.571577072 CET	8.8.8.8	192.168.2.22	0x4be5	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:34.579941988 CET	8.8.8.8	192.168.2.22	0xdf85	No error (0)	hblg.media.net		23.221.16.23	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.620768070 CET	8.8.8.8	192.168.2.22	0x71d8	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:34.638282061 CET	8.8.8.8	192.168.2.22	0xb339	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:34.709252119 CET	8.8.8.8	192.168.2.22	0xf4a	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:34.712881088 CET	8.8.8.8	192.168.2.22	0xc071	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:34.837682962 CET	8.8.8.8	192.168.2.22	0x26ba	No error (0)	07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com	cf2.rackcdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:34.840070009 CET	8.8.8.8	192.168.2.22	0x93f9	No error (0)	code.createjs.com	san-download-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:34.841800928 CET	8.8.8.8	192.168.2.22	0x78f4	No error (0)	07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com	cf2.rackcdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:34.842685938 CET	8.8.8.8	192.168.2.22	0x27df	No error (0)	code.createjs.com	san-download-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:34.986569881 CET	8.8.8.8	192.168.2.22	0xa499	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:34.987890005 CET	8.8.8.8	192.168.2.22	0x360	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.987890005 CET	8.8.8.8	192.168.2.22	0x360	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.987890005 CET	8.8.8.8	192.168.2.22	0x360	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:34.990027905 CET	8.8.8.8	192.168.2.22	0x841e	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:35.006788969 CET	8.8.8.8	192.168.2.22	0x5c6a	No error (0)	googleads4.g.doubleclick.net		192.178.50.66	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:35.259666920 CET	8.8.8.8	192.168.2.22	0xbcf2	No error (0)	hblg.media.net		23.221.16.23	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:35.289438963 CET	8.8.8.8	192.168.2.22	0x571a	No error (0)	secure.insightexpressai.com	global-wildcard.insightexpressai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:35.290821075 CET	8.8.8.8	192.168.2.22	0xc68d	No error (0)	secure.insightexpressai.com	global-wildcard.insightexpressai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.013935089 CET	8.8.8.8	192.168.2.22	0xa967	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.031857014 CET	8.8.8.8	192.168.2.22	0x622c	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.112230062 CET	8.8.8.8	192.168.2.22	0xdd53	No error (0)	secure.insightexpressai.com	global-wildcard.insightexpressai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.113835096 CET	8.8.8.8	192.168.2.22	0xb338	No error (0)	secure.insightexpressai.com	global-wildcard.insightexpressai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.398751974 CET	8.8.8.8	192.168.2.22	0x9705	No error (0)	trace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.616123915 CET	8.8.8.8	192.168.2.22	0x2a03	No error (0)	07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com	cf2.rackcdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.618957043 CET	8.8.8.8	192.168.2.22	0x88f4	No error (0)	07fb79e47f24ba85a035-23d2fe6d511d84031e1a396b605ffdfb.ssl.cf2.rackcdn.com	cf2.rackcdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.881091118 CET	8.8.8.8	192.168.2.22	0x99b6	No error (0)	tps.doubleverify.com	tps-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.881091118 CET	8.8.8.8	192.168.2.22	0x99b6	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.881091118 CET	8.8.8.8	192.168.2.22	0x99b6	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.882237911 CET	8.8.8.8	192.168.2.22	0x1ed4	No error (0)	tps.doubleverify.com	tps-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.882237911 CET	8.8.8.8	192.168.2.22	0x1ed4	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.929958105 CET	8.8.8.8	192.168.2.22	0x2083	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.929958105 CET	8.8.8.8	192.168.2.22	0x2083	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.929958105 CET	8.8.8.8	192.168.2.22	0x2083	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.930135965 CET	8.8.8.8	192.168.2.22	0xca3	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.930135965 CET	8.8.8.8	192.168.2.22	0xca3	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.930135965 CET	8.8.8.8	192.168.2.22	0xca3	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:36.930135965 CET	8.8.8.8	192.168.2.22	0xca3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.202.175.95	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.930135965 CET	8.8.8.8	192.168.2.22	0xca3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.236.148.39	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.930135965 CET	8.8.8.8	192.168.2.22	0xca3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.94.224.106	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.930135965 CET	8.8.8.8	192.168.2.22	0xca3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.204.147.138	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.930135965 CET	8.8.8.8	192.168.2.22	0xca3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.225.62.105	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.930135965 CET	8.8.8.8	192.168.2.22	0xca3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.6.79.196	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.930135965 CET	8.8.8.8	192.168.2.22	0xca3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.231.140.185	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:36.930135965 CET	8.8.8.8	192.168.2.22	0xca3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.215.44.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:37.055130005 CET	8.8.8.8	192.168.2.22	0x93de	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:38.205282927 CET	8.8.8.8	192.168.2.22	0xba32	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864264965 CET	8.8.8.8	192.168.2.22	0x755f	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864264965 CET	8.8.8.8	192.168.2.22	0x755f	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864264965 CET	8.8.8.8	192.168.2.22	0x755f	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864264965 CET	8.8.8.8	192.168.2.22	0x755f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.215.44.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864264965 CET	8.8.8.8	192.168.2.22	0x755f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.205.152.91	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864264965 CET	8.8.8.8	192.168.2.22	0x755f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.231.140.185	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864264965 CET	8.8.8.8	192.168.2.22	0x755f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.81.4.12	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864264965 CET	8.8.8.8	192.168.2.22	0x755f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.156.16.64	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864264965 CET	8.8.8.8	192.168.2.22	0x755f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.83.248.93	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864264965 CET	8.8.8.8	192.168.2.22	0x755f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.215.234.124	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864264965 CET	8.8.8.8	192.168.2.22	0x755f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.196.19.249	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864896059 CET	8.8.8.8	192.168.2.22	0x15d2	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864896059 CET	8.8.8.8	192.168.2.22	0x15d2	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:41.864896059 CET	8.8.8.8	192.168.2.22	0x15d2	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:43.918193102 CET	8.8.8.8	192.168.2.22	0xaa11	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:43.918193102 CET	8.8.8.8	192.168.2.22	0xaa11	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:43.920114994 CET	8.8.8.8	192.168.2.22	0x6fd6	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:43.987211943 CET	8.8.8.8	192.168.2.22	0x9e40	No error (0)	ads.scorecardresearch.com	d1tcwf12y4kqv3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:43.987211943 CET	8.8.8.8	192.168.2.22	0x9e40	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.160.60.6	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:43.987211943 CET	8.8.8.8	192.168.2.22	0x9e40	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.160.60.107	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:43.987211943 CET	8.8.8.8	192.168.2.22	0x9e40	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.160.60.23	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:43.987211943 CET	8.8.8.8	192.168.2.22	0x9e40	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.160.60.14	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:43.991162062 CET	8.8.8.8	192.168.2.22	0x1c61	No error (0)	ads.scorecardresearch.com	d1tcwf12y4kqv3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:44.179337978 CET	8.8.8.8	192.168.2.22	0xa17f	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:44.179337978 CET	8.8.8.8	192.168.2.22	0xa17f	No error (0)	visitor-us-west-2.omnitagjs.com		54.200.95.152	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:44.179337978 CET	8.8.8.8	192.168.2.22	0xa17f	No error (0)	visitor-us-west-2.omnitagjs.com		35.163.115.57	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:44.179337978 CET	8.8.8.8	192.168.2.22	0xa17f	No error (0)	visitor-us-west-2.omnitagjs.com		54.68.213.114	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:44.179337978 CET	8.8.8.8	192.168.2.22	0xa17f	No error (0)	visitor-us-west-2.omnitagjs.com		52.40.169.197	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:44.179337978 CET	8.8.8.8	192.168.2.22	0xa17f	No error (0)	visitor-us-west-2.omnitagjs.com		52.88.192.204	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:44.179337978 CET	8.8.8.8	192.168.2.22	0xa17f	No error (0)	visitor-us-west-2.omnitagjs.com		44.231.162.210	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:44.179337978 CET	8.8.8.8	192.168.2.22	0xa17f	No error (0)	visitor-us-west-2.omnitagjs.com		34.208.38.108	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:44.179337978 CET	8.8.8.8	192.168.2.22	0xa17f	No error (0)	visitor-us-west-2.omnitagjs.com		44.240.16.56	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:44.181001902 CET	8.8.8.8	192.168.2.22	0x431b	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:44.186057091 CET	8.8.8.8	192.168.2.22	0xa0bc	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:44.187217951 CET	8.8.8.8	192.168.2.22	0xaec3	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:44.233558893 CET	8.8.8.8	192.168.2.22	0xd7d4	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:45.219187975 CET	8.8.8.8	192.168.2.22	0xcfe1	No error (0)	ads.scorecardresearch.com	d1tcwf12y4kqv3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:45.221384048 CET	8.8.8.8	192.168.2.22	0xda4d	No error (0)	ads.scorecardresearch.com	d1tcwf12y4kqv3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:45.221384048 CET	8.8.8.8	192.168.2.22	0xda4d	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.160.60.6	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:45.221384048 CET	8.8.8.8	192.168.2.22	0xda4d	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.160.60.107	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:45.221384048 CET	8.8.8.8	192.168.2.22	0xda4d	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.160.60.23	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:45.221384048 CET	8.8.8.8	192.168.2.22	0xda4d	No error (0)	d1tcwf12y4kqv3.cloudfront.net		18.160.60.14	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:45.223589897 CET	8.8.8.8	192.168.2.22	0xfbcb	No error (0)	fei.pro-market.net		107.178.240.89	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:45.261975050 CET	8.8.8.8	192.168.2.22	0x47c4	No error (0)	cs.media.net		23.221.16.23	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:45.333185911 CET	8.8.8.8	192.168.2.22	0xa61d	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:45.334688902 CET	8.8.8.8	192.168.2.22	0x4b75	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:47.223246098 CET	8.8.8.8	192.168.2.22	0xdc9	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:47.223261118 CET	8.8.8.8	192.168.2.22	0x32f1	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:47.253629923 CET	8.8.8.8	192.168.2.22	0x73a0	No error (0)	sync.intentiq.com		18.173.219.12	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:47.253629923 CET	8.8.8.8	192.168.2.22	0x73a0	No error (0)	sync.intentiq.com		18.173.219.51	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:47.253629923 CET	8.8.8.8	192.168.2.22	0x73a0	No error (0)	sync.intentiq.com		18.173.219.124	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:47.253629923 CET	8.8.8.8	192.168.2.22	0x73a0	No error (0)	sync.intentiq.com		18.173.219.5	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:48.772685051 CET	8.8.8.8	192.168.2.22	0xfba	No error (0)	offers.seteventshowroom.com		13.35.116.46	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:48.772685051 CET	8.8.8.8	192.168.2.22	0xfba	No error (0)	offers.seteventshowroom.com		13.35.116.12	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:48.772685051 CET	8.8.8.8	192.168.2.22	0xfba	No error (0)	offers.seteventshowroom.com		13.35.116.52	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:48.772685051 CET	8.8.8.8	192.168.2.22	0xfba	No error (0)	offers.seteventshowroom.com		13.35.116.91	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:49.196759939 CET	8.8.8.8	192.168.2.22	0x7db7	No error (0)	a5588.casalemedia.com		209.204.229.29	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:49.704082012 CET	8.8.8.8	192.168.2.22	0x87a6	No error (0)	offers.seteventshowroom.com		108.138.128.88	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:49.704082012 CET	8.8.8.8	192.168.2.22	0x87a6	No error (0)	offers.seteventshowroom.com		108.138.128.12	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:49.704082012 CET	8.8.8.8	192.168.2.22	0x87a6	No error (0)	offers.seteventshowroom.com		108.138.128.114	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:49.704082012 CET	8.8.8.8	192.168.2.22	0x87a6	No error (0)	offers.seteventshowroom.com		108.138.128.65	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:49.998559952 CET	8.8.8.8	192.168.2.22	0x6968	No error (0)	a5588.casalemedia.com		209.204.229.29	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.143877029 CET	8.8.8.8	192.168.2.22	0xa134	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.143877029 CET	8.8.8.8	192.168.2.22	0xa134	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.817723989 CET	8.8.8.8	192.168.2.22	0x624d	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:51.818785906 CET	8.8.8.8	192.168.2.22	0xdd15	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2023 21:40:51.818785906 CET	8.8.8.8	192.168.2.22	0xdd15	No error (0)	idaas-ext.cph.liveintent.com		3.233.244.31	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.818785906 CET	8.8.8.8	192.168.2.22	0xdd15	No error (0)	idaas-ext.cph.liveintent.com		34.197.232.1	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.818785906 CET	8.8.8.8	192.168.2.22	0xdd15	No error (0)	idaas-ext.cph.liveintent.com		34.197.7.44	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.818785906 CET	8.8.8.8	192.168.2.22	0xdd15	No error (0)	idaas-ext.cph.liveintent.com		3.222.98.107	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.818785906 CET	8.8.8.8	192.168.2.22	0xdd15	No error (0)	idaas-ext.cph.liveintent.com		54.82.32.1	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.818785906 CET	8.8.8.8	192.168.2.22	0xdd15	No error (0)	idaas-ext.cph.liveintent.com		3.223.88.167	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.818785906 CET	8.8.8.8	192.168.2.22	0xdd15	No error (0)	idaas-ext.cph.liveintent.com		52.23.84.206	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.818785906 CET	8.8.8.8	192.168.2.22	0xdd15	No error (0)	idaas-ext.cph.liveintent.com		54.91.189.9	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.894649029 CET	8.8.8.8	192.168.2.22	0x327e	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:51.894649029 CET	8.8.8.8	192.168.2.22	0x327e	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:52.392971039 CET	8.8.8.8	192.168.2.22	0x267d	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 12, 2023 21:40:52.392971039 CET	8.8.8.8	192.168.2.22	0x267d	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.22	49165	192.178.50.78	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:00 UTC	732	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=109.0.5414.120&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-109.0.5414.120 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:00 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-iyxfbVuXWCaxaCEodnqDwg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 12 Dec 2023 20:38:00 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6189 X-Daystart: 45480 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-12 20:38:00 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 31 38 39 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 34 35 34 38 30 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6189" elapsed_seconds="45480"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-12-12 20:38:00 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-12-12 20:38:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.22	49166	192.178.50.77	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:00 UTC	849	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; SOCS=CAESHAgCEhJnd3NfMjAyMzA4MDEtMF9SQzMaAmVuIAEaBgiAi8amBg; AEC=Ad49MVFCiIL4dH3NdVUPM9qw5tUX8unGaMgN_qTAwv0uoiOzKAI-JttOlg; __Secure-ENID=14.SE=LM-NkPAvbCtuNhK73uRS1U27fKMegq7R6_Ue_GnOGI1dekNKandC6Dto1fKS9ocnnyUmf2MAXGM269U9HhkgndYLxWy3FrZaGzh_yODdv1ouU12fBCNmRhMUwM3dzKbRlYRnbKhIQz9fV5WGdCRRjXQx5RGii6FbIw100Hc46oWQ6bysmy2hqA
2023-12-12 20:38:00 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-12-12 20:38:01 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 12 Dec 2023 20:38:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-NCdUDnnvFgR5Z_KqkDJFNg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-12 20:38:01 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-12-12 20:38:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.22	49167	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:02 UTC	713	OUT	GET /polynomial-root-finding-with-the-jenkins-traub-algorithm/ HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:02 UTC	977	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close content-security-policy: block-all-mixed-content vary: Accept-Encoding, Cookie last-modified: Mon, 11 Dec 2023 09:28:31 GMT x-presslabs-stats: HIT; 0.099s; 16 queries; desktop; ttl 172800s; refresh in 46229s x-request-id: 506c457d2ba8ed2fe18b48754a30dcf8 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3FM%2Fx0Ozi7GJrl2WkSJTwvfBsVbvVS7lyNU8Ly14WY1UHTWUqWXbvkqIEPf52KYBKnyuxjxi770kndbng3cGh5LX0SZsK9NsIwJL6lem61jfzrKio4B5sosABIDR%2FRY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4c9afe874a0-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:02 UTC	392	IN	Data Raw: 37 34 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 53 69 74 65 22 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 20 41 6c 77 61 79 73 20 66 6f 72 63 65 20 6c 61 74 65 73 74 20 49 45 20 72 65 6e 64 65 72 69 6e 67 20 65 6e 67 69 6e 65 20 28 65 76 65 6e 20 69 6e 20 69 6e 74 72 61 6e 65 74 29 20 26 20 43 68 72 6f 6d 65 20 46 72 61 6d 65 20 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 5d 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 Data Ascii: 74c4<!DOCTYPE html><html class="no-js" lang="en-US"><head itemscope itemtype="http://schema.org/WebSite"><meta charset="UTF-8">... Always force latest IE rendering engine (even in intranet) & Chrome Frame -->...[if IE ]><meta http-equiv="X-U
2023-12-12 20:38:02 UTC	1369	IN	Data Raw: 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 Data Ascii: <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black">
2023-12-12 20:38:02 UTC	1369	IN	Data Raw: 72 74 69 63 6c 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 50 6f 6c 79 6e 6f 6d 69 61 6c 20 52 6f 6f 74 2d 66 69 6e 64 69 6e 67 20 77 69 74 68 20 74 68 65 20 4a 65 6e 6b 69 6e 73 2d 54 72 61 75 62 20 41 6c 67 6f 72 69 74 68 6d 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 4a 65 6e 6b 69 6e 73 2d 54 72 61 75 62 20 41 6c 67 6f 72 69 74 68 6d 20 69 73 20 61 20 73 74 61 6e 64 61 72 64 20 69 6e 20 74 68 65 20 66 69 65 6c 64 20 6f 66 20 6e 75 6d 65 72 69 63 61 6c 20 63 6f 6d 70 75 74 61 74 69 6f 6e 20 6f 66 20 70 6f 6c 79 6e 6f 6d 69 61 6c 20 72 6f 6f 74 73 2c 20 66 75 6e 64 Data Ascii: rticle" /><meta property="og:title" content="Polynomial Root-finding with the Jenkins-Traub Algorithm" /><meta property="og:description" content="The Jenkins-Traub Algorithm is a standard in the field of numerical computation of polynomial roots, fund
2023-12-12 20:38:02 UTC	1369	IN	Data Raw: 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 44 61 76 69 64 20 42 69 6e 6e 65 72 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 20 63 6c 61 73 73 3d 22 79 6f 61 73 74 2d 73 63 68 65 6d 61 2d 67 72 61 70 68 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 57 65 62 50 61 67 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e Data Ascii: <meta name="author" content="David Binner" /><meta name="twitter:card" content="summary_large_image" /><script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://mathblog.
2023-12-12 20:38:02 UTC	1369	IN	Data Raw: 62 6c 6f 67 2e 63 6f 6d 2f 70 6f 6c 79 6e 6f 6d 69 61 6c 2d 72 6f 6f 74 2d 66 69 6e 64 69 6e 67 2d 77 69 74 68 2d 74 68 65 2d 6a 65 6e 6b 69 6e 73 2d 74 72 61 75 62 2d 61 6c 67 6f 72 69 74 68 6d 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 73 6f 63 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 65 2f 69 72 3f 74 3d 61 6e 74 6f 6e 69 6f 63 61 6e 67 69 61 2d 32 30 26 61 6d 70 3b 6c 3d 61 73 32 26 61 6d 70 3b 6f 3d 31 26 61 6d 70 3b 61 3d 30 34 38 36 34 31 34 35 34 58 22 2c 22 63 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 73 6f 63 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 65 2f 69 72 3f 74 3d 61 6e 74 6f 6e 69 6f 63 61 6e 67 69 61 2d 32 30 26 61 6d 70 3b 6c 3d 61 73 32 26 61 Data Ascii: blog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#primaryimage","url":"https://www.assoc-amazon.com/e/ir?t=antoniocangia-20&l=as2&o=1&a=048641454X","contentUrl":"https://www.assoc-amazon.com/e/ir?t=antoniocangia-20&l=as2&a
2023-12-12 20:38:02 UTC	1369	IN	Data Raw: 69 64 65 6e 74 69 63 6f 6e 26 72 3d 67 22 2c 22 63 61 70 74 69 6f 6e 22 3a 22 44 61 76 69 64 20 42 69 6e 6e 65 72 22 7d 2c 22 73 61 6d 65 41 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 6b 69 74 69 2e 63 61 22 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 61 75 74 68 6f 72 2f 62 69 6e 6e 65 72 2f 22 7d 5d 7d 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 21 2d 2d 20 2f 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 2e 20 2d 2d 3e 0a 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 73 63 72 69 70 74 73 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e Data Ascii: identicon&r=g","caption":"David Binner"},"sameAs":["https://akiti.ca"],"url":"https://mathblog.com/author/binner/"}]}</script>... / Yoast SEO plugin. --><link rel='dns-prefetch' href='//scripts.mediavine.com' /><style id='classic-theme-styles-inlin
2023-12-12 20:38:02 UTC	1369	IN	Data Raw: 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 30 38 2c 31 33 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 32 2c 31 38 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e 65 61 72 2d Data Ascii: (135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-
2023-12-12 20:38:02 UTC	1369	IN	Data Raw: 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 3a 20 33 36 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 3a 20 34 32 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 32 30 3a 20 30 2e 34 34 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 33 30 3a 20 30 2e 36 37 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 34 30 3a 20 31 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 35 30 3a 20 31 2e 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 36 30 3a 20 Data Ascii: e--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60:
2023-12-12 20:38:02 UTC	1369	IN	Data Raw: 72 65 28 3a 6e 6f 74 28 2e 61 6c 69 67 6e 6c 65 66 74 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 72 69 67 68 74 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 66 75 6c 6c 29 29 7b 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 67 6c 6f 62 61 6c 2d 2d 63 6f 6e 74 65 6e 74 2d 73 69 7a 65 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 77 69 64 65 7b 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 67 6c 6f 62 61 6c 2d 2d 77 69 64 65 2d 73 69 7a 65 29 3b 7d 62 6f Data Ascii: re(:not(.alignleft):not(.alignright):not(.alignfull)){max-width: var(--wp--style--global--content-size);margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignwide{max-width: var(--wp--style--global--wide-size);}bo
2023-12-12 20:38:02 UTC	1369	IN	Data Raw: 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 Data Ascii: r{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.22	49168	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:02 UTC	630	OUT	GET / HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:03 UTC	981	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close content-security-policy: block-all-mixed-content vary: Accept-Encoding, Cookie last-modified: Tue, 12 Dec 2023 20:17:50 GMT x-presslabs-stats: HIT; 0.100s; 2 queries; desktop; ttl 3600s; refresh in 2388s x-request-id: 2aaef84ea48de532f627097ed5369a1a strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N9nlFsJSjm%2FggdOtMGd0TKwbwdPiagCELXUJKDrRFnWi6E4NdqLY5iyhl2BDVO14ILKG%2BoRzCl9dQoiH%2FpXACsFNXb3%2FrAH0iCgaWad4ROSm46Ay0g%2F%2BK2NZWoJsObU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4cbae183365-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:03 UTC	388	IN	Data Raw: 37 62 64 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 53 69 74 65 22 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 20 41 6c 77 61 79 73 20 66 6f 72 63 65 20 6c 61 74 65 73 74 20 49 45 20 72 65 6e 64 65 72 69 6e 67 20 65 6e 67 69 6e 65 20 28 65 76 65 6e 20 69 6e 20 69 6e 74 72 61 6e 65 74 29 20 26 20 43 68 72 6f 6d 65 20 46 72 61 6d 65 20 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 5d 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 Data Ascii: 7bdc<!DOCTYPE html><html class="no-js" lang="en-US"><head itemscope itemtype="http://schema.org/WebSite"><meta charset="UTF-8">... Always force latest IE rendering engine (even in intranet) & Chrome Frame -->...[if IE ]><meta http-equiv="X-U
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 Data Ascii: <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black">
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 42 6c 6f 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 65 6d 61 74 69 63 73 20 69 73 20 77 6f 6e 64 65 72 66 75 6c 21 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 42 6c 6f 67 22 20 2f 3e 0a 09 3c Data Ascii: ntent="website" /><meta property="og:title" content="MathBlog" /><meta property="og:description" content="Mathematics is wonderful!" /><meta property="og:url" content="https://mathblog.com/" /><meta property="og:site_name" content="MathBlog" /><
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 74 2f 63 73 73 27 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 69 6c 65 5f 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f Data Ascii: t/css'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{backgro
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 28 32 30 37 2c 34 36 2c 34 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 Data Ascii: rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220)
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 37 30 3a 20 33 2e 33 38 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 38 30 3a 20 35 2e 30 36 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 6e 61 74 75 72 61 6c 3a 20 36 70 78 20 36 70 78 20 39 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 64 65 65 70 3a 20 31 32 70 78 20 31 32 70 78 20 35 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 73 68 61 72 70 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 Data Ascii: eset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--pre
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 65 78 7b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 7b 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 20 3e 20 2a 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 7b 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 20 3e 20 2a 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c Data Ascii: ex{display: flex;}body .is-layout-flex{flex-wrap: wrap;align-items: center;}body .is-layout-flex > {margin: 0;}body .is-layout-grid{display: grid;}body .is-layout-grid > {margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-col
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 Data Ascii: r(--wp--preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 Data Ascii: wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{bor
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e Data Ascii: -gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-oran

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.22	49170	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	629	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:03 UTC	754	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:03 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Fri, 01 Dec 2023 15:04:24 GMT ETag: "6569f5f8-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JE4cnZIHpQaDUVB%2F%2FTugcOr7txui1X8EH%2BB33r%2B3Hg8eOE3vGV%2BLQfDAITTql7%2F2IOHsMKI6YSiA2wSBPjuuAXbjOyAHCf3A8O3%2FBh2o49nu7Na5xuX5fAHIafZSo7c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4cf0f282576-MIA X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Thu, 14 Dec 2023 20:38:03 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2023-12-12 20:38:03 UTC	615	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href
2023-12-12 20:38:03 UTC	624	IN	Data Raw: 72 65 66 2c 61 2b 6c 2e 6c 65 6e 67 74 68 29 29 7d 63 61 74 63 68 28 69 29 7b 65 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 75 29 2c 63 3d 30 3b 63 3c 72 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 74 72 79 7b 76 61 72 20 6f 3d 72 5b 63 5d 2c 61 3d 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 69 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 66 29 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 6e 28 69 2c 30 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6c 29 3b 61 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 64 2c 6f 29 7d 7d 63 61 74 63 68 28 68 29 7b 65 28 68 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d Data Ascii: ref,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.22	49172	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	583	OUT	GET /wp-content/plugins/wp-review-pro/assets/css/wp-review.css HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:03 UTC	975	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-478f" x-cache-groups: assets x-request-id: 40818d35446a8dae799af50345e8d3e8 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=maSaP%2F3bVrOq%2BNQitLPw9jxUfNsau8rtsUJ%2BWhX%2FhjAi6LYRVakQZcKyOCD9tDYewKSZD%2Bg7Xrnmt0EdFC0Crw9GyYIJllLVybsHEetKAZw%2BMwg8atZ%2FQBjpn%2BApxnaQDTBh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4cf6bad0314-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:03 UTC	394	IN	Data Raw: 34 37 38 66 0d 0a 2f 2a 0a 2a 20 50 6c 75 67 69 6e 20 4e 61 6d 65 3a 20 57 50 20 52 65 76 69 65 77 20 50 72 6f 0a 2a 20 50 6c 75 67 69 6e 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 6d 79 74 68 65 6d 65 73 68 6f 70 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 77 70 2d 72 65 76 69 65 77 2d 70 72 6f 2f 0a 2a 20 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 43 72 65 61 74 65 20 72 65 76 69 65 77 73 21 20 43 68 6f 6f 73 65 20 66 72 6f 6d 20 53 74 61 72 73 2c 20 50 65 72 63 65 6e 74 61 67 65 73 2c 20 43 69 72 63 6c 65 73 20 6f 72 20 50 6f 69 6e 74 73 20 66 6f 72 20 72 65 76 69 65 77 20 73 63 6f 72 65 73 2e 20 53 75 70 70 6f 72 74 73 20 52 65 74 69 6e 61 20 44 69 73 70 6c 61 79 2c 20 57 50 4d 55 20 26 20 55 6e 6c 69 6d 69 74 65 64 20 43 6f 6c 6f 72 20 53 63 68 65 6d 65 73 2e 0a Data Ascii: 478f/** Plugin Name: WP Review Pro* Plugin URI: http://mythemeshop.com/plugins/wp-review-pro/* Description: Create reviews! Choose from Stars, Percentages, Circles or Points for review scores. Supports Retina Display, WPMU & Unlimited Color Schemes.
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 2e 72 65 76 69 65 77 2d 74 69 74 6c 65 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 36 66 36 66 36 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 37 65 37 65 37 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 35 70 78 3b 0a 7d 0a 2e 72 65 76 69 65 77 2d 77 72 61 70 70 65 72 20 2e 72 65 76 69 65 77 2d 6c 69 73 74 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 Data Ascii: clear: both; box-sizing: border-box;}.review-title { background-color: #f6f6f6; border-bottom: 1px solid #e7e7e7; margin: 0; padding: 10px 15px;}.review-wrapper .review-list { margin: 0; list-style: none; padding: 0
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 72 65 76 69 65 77 2d 72 65 73 75 6c 74 2d 77 72 61 70 70 65 72 20 69 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 70 78 3b 0a 7d 0a 2e 72 65 76 69 65 77 65 64 2d 69 74 65 6d 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 31 35 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 37 65 37 65 37 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 2e 72 65 76 69 65 77 65 64 Data Ascii: review-result-wrapper i { font-style: normal; font-size: 16px; padding: 0 1px;}.reviewed-item { display: inline-block; padding: 10px 15px; border-bottom: 1px solid #e7e7e7; width: 100%; box-sizing: border-box;}.reviewed
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 6b 3b 0a 7d 0a 2e 70 65 72 63 65 6e 74 61 67 65 2d 69 63 6f 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 74 6f 70 3a 20 2d 31 34 70 78 3b 0a 7d 0a 2e 72 65 76 69 65 77 2d 74 6f 74 61 6c 2d 73 74 61 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 72 65 76 69 65 77 2d 73 74 61 72 2e 72 65 76 69 65 77 2d 74 6f 74 61 6c 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 20 7d 0a 2e 77 70 2d 72 65 76 69 65 77 2d 6c 6f Data Ascii: k;}.percentage-icon { font-size: 22px; position: relative; top: -14px;}.review-total-star { position: relative; margin-top: 5px; margin: 0 auto; float: right;}.review-star.review-total { position: relative }.wp-review-lo
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 6c 65 2d 70 6f 69 6e 74 20 2e 72 65 76 69 65 77 2d 6c 69 73 74 20 6c 69 20 7b 20 70 61 64 64 69 6e 67 3a 20 31 34 70 78 20 31 35 70 78 20 7d 0a 2e 72 65 76 69 65 77 2d 70 6f 69 6e 74 20 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 2d 77 72 61 70 70 65 72 2c 20 2e 72 65 76 69 65 77 2d 70 65 72 63 65 6e 74 61 67 65 20 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 72 65 76 69 65 77 2d 70 6f 69 6e 74 20 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 2d 77 72 61 70 70 65 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: le-point .review-list li { padding: 14px 15px }.review-point .review-result-wrapper, .review-percentage .review-result-wrapper { background: rgba(0,0,0,0.1); width: 100%; height: 22px;}.review-point .review-result-wrapper { background-color
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 6e 67 2e 77 70 2d 72 65 76 69 65 77 2d 63 6f 6d 6d 65 6e 74 2d 72 61 74 69 6e 67 2d 70 65 72 63 65 6e 74 61 67 65 20 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 2d 77 72 61 70 70 65 72 2c 20 2e 77 70 2d 72 65 76 69 65 77 2d 75 73 65 72 2d 72 61 74 69 6e 67 2e 77 70 2d 72 65 76 69 65 77 2d 75 73 65 72 2d 72 61 74 69 6e 67 2d 70 65 72 63 65 6e 74 61 67 65 20 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 2d 77 72 61 70 70 65 72 20 7b 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 20 7d 0a 2e 77 70 2d 72 65 76 69 65 77 2d 75 73 65 72 2d 72 61 74 69 6e 67 2e 77 70 2d 72 65 76 69 65 77 2d 75 73 65 72 2d 72 61 74 69 6e 67 2d 70 6f 69 6e 74 2e 68 61 73 2d 72 61 74 65 64 20 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 2d 77 72 61 70 70 65 72 2c 20 2e 77 70 2d 72 65 76 69 Data Ascii: ng.wp-review-comment-rating-percentage .review-result-wrapper, .wp-review-user-rating.wp-review-user-rating-percentage .review-result-wrapper { cursor: pointer }.wp-review-user-rating.wp-review-user-rating-point.has-rated .review-result-wrapper, .wp-revi
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 65 77 2d 70 65 72 63 65 6e 74 61 67 65 3a 68 6f 76 65 72 20 2e 77 70 2d 72 65 76 69 65 77 2d 79 6f 75 72 2d 72 61 74 69 6e 67 2c 20 2e 77 70 2d 72 65 76 69 65 77 2d 69 6e 70 75 74 2d 73 65 74 20 2e 72 65 76 69 65 77 2d 70 65 72 63 65 6e 74 61 67 65 20 2e 77 70 2d 72 65 76 69 65 77 2d 79 6f 75 72 2d 72 61 74 69 6e 67 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 7d 0a 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 2d 74 65 78 74 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 6c 65 66 74 3a 20 34 70 78 3b 0a 20 20 20 20 74 6f 70 3a 20 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 Data Ascii: ew-percentage:hover .wp-review-your-rating, .wp-review-input-set .review-percentage .wp-review-your-rating { display: block }.review-result-text { position: absolute; left: 4px; top: 0px; font-size: 16px; line-height: 22px; displa
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 76 69 65 77 2d 74 6f 74 61 6c 2d 62 6f 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 7d 0a 2e 72 65 76 69 65 77 2d 63 69 72 63 6c 65 2e 72 65 76 69 65 77 2d 74 6f 74 61 6c 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 70 78 3b 0a 7d 0a 2f 2a 2a 0a 20 2a 20 54 77 65 6e 74 79 20 73 65 72 69 65 73 20 74 68 65 6d 65 73 20 63 6f 6d 70 61 74 69 62 69 6c 74 79 0a 20 2a 2f 0a 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 2e 72 65 76 69 65 77 2d 74 69 74 6c 65 2c 20 23 63 6f 6e 74 65 6e 74 20 2e 72 65 76 69 65 77 2d 74 69 74 6c 65 20 7b 20 6d 61 72 67 69 6e 3a 20 30 20 7d 0a 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 2e 72 65 76 69 65 77 2d 73 75 6d 6d 61 72 79 2d 74 69 74 6c 65 2c 20 23 63 6f Data Ascii: view-total-box { display: none }.review-circle.review-total { height: 100px; width: 100px;}/** * Twenty series themes compatibilty */.entry-content .review-title, #content .review-title { margin: 0 }.entry-content .review-summary-title, #co
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 3b 0a 7d 0a 2e 72 65 76 69 65 77 2d 74 6f 74 61 6c 2d 73 74 61 72 2e 61 6c 6c 6f 77 65 64 2d 74 6f 2d 72 61 74 65 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 75 73 65 72 2d 74 6f 74 61 6c 2d 77 72 61 70 70 65 72 20 2e 75 73 65 72 2d 72 65 76 69 65 77 2d 74 69 74 6c 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 77 70 2d 72 65 76 69 65 77 2d 75 73 65 72 2d 72 61 74 69 6e 67 20 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 2d 77 72 61 70 70 65 72 20 73 70 61 6e 20 7b 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 20 7d 0a 2e 77 70 2d 72 65 76 69 65 77 2d 75 73 65 72 2d 72 61 74 69 6e 67 20 2e 72 65 76 Data Ascii: ;}.review-total-star.allowed-to-rate { float: right; margin: 0;}.user-total-wrapper .user-review-title { font-weight: bold; margin: 0;}.wp-review-user-rating .review-result-wrapper span { cursor: pointer }.wp-review-user-rating .rev
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 6f 6d 6d 65 6e 74 2d 72 61 74 69 6e 67 20 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 2d 77 72 61 70 70 65 72 20 73 70 61 6e 3a 68 6f 76 65 72 20 7e 20 73 70 61 6e 20 69 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 32 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0a 7d 0a 2e 77 70 2d 72 65 76 69 65 77 2d 63 6f 6d 6d 65 6e 74 2d 72 61 74 69 6e 67 20 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 2d 77 72 61 70 70 65 72 3a 68 6f 76 65 72 20 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 7d 0a 2e 77 70 2d 72 65 76 69 65 77 2d 66 65 65 64 62 61 63 6b 20 2e 72 65 76 69 65 77 2d 62 74 6e 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 Data Ascii: omment-rating .review-result-wrapper span:hover ~ span i { opacity: 0.2; color: currentColor;}.wp-review-comment-rating .review-result-wrapper:hover .review-result { display: none }.wp-review-feedback .review-btn { display: inline-block;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.22	49177	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	564	OUT	GET /wp-content/themes/mts_schema/style.css HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:03 UTC	986	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:39 GMT etag: W/"6529fd8b-87c9" x-cache-groups: assets x-request-id: dc214db52154cecdbbc158355e883878 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 1999440 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nCbRN9uhbKpwDh60iNSygK6aZ0GsokR%2B%2BuqSUmB5EjfGDaGtPaV5bIR4OHHCd9Q5dVP558XYO83IktiXF6%2F0GvBMzLD9Xq%2ByebhsWsA%2F0RaQQ5l4q%2B3nPUheXqbVHc2EquS%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4cfa9ac5c76-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:03 UTC	383	IN	Data Raw: 37 62 64 38 0d 0a 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 61 75 64 69 6f 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 6e 76 61 73 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 65 74 61 69 6c 73 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 65 6d 62 65 64 2c 66 69 65 6c 64 73 65 74 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 Data Ascii: 7bd8a,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,em,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,lege
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 68 2c 74 68 65 61 64 2c 74 69 6d 65 2c 74 72 2c 74 74 2c 75 2c 75 6c 2c 76 61 72 2c 76 69 64 65 6f 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 6f 6c 2c 75 6c 7b 6c 69 73 Data Ascii: h,thead,time,tr,tt,u,ul,var,video{margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline}html{-webkit-font-smoothing:antialiased}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}ol,ul{lis
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 3a 23 32 32 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 3a 3a 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 32 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 23 70 61 67 65 2c 2e 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 34 30 70 78 7d 2e 70 6f 73 74 2d 73 69 6e 67 6c 65 2d 63 6f 6e 74 65 6e 74 20 68 31 2c 2e 70 6f 73 74 2d 73 69 6e 67 6c 65 2d 63 6f 6e 74 65 6e 74 20 68 32 2c 2e 70 6f 73 74 2d 73 Data Ascii: kground:#222;color:#fff;text-shadow:none}::selection{background:#222;color:#fff;text-shadow:none}#page,.container{position:relative;margin-right:auto;margin-left:auto;max-width:1200px;min-width:240px}.post-single-content h1,.post-single-content h2,.post-s
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 69 76 23 72 65 67 75 6c 61 72 2d 68 65 61 64 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 70 61 64 64 69 6e 67 3a 30 7d 23 6c 6f 67 6f 20 61 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 63 6f 6c 6f 72 3a 23 32 32 32 7d 23 68 65 61 64 65 72 20 23 6c 6f 67 6f 20 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 6c 6f 67 6f 20 69 6d 67 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 6c 6f 67 6f 2d 77 72 61 70 7b 6d 61 72 67 69 6e 3a 34 39 70 78 20 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 68 Data Ascii: gin-bottom:0}div#regular-header{overflow:hidden;clear:both;padding:0}#logo a{text-transform:uppercase;float:left;line-height:1;color:#222}#header #logo a{font-size:28px;color:#fff}#logo img{float:left}.logo-wrap{margin:49px 0;overflow:hidden;float:left}#h
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 3e 75 6c 3e 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 6e 61 76 69 67 61 74 69 6f 6e 20 2e 74 6f 67 67 6c 65 2d 63 61 72 65 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 72 65 67 75 6c 61 72 5f 68 65 61 64 65 72 20 64 69 76 23 70 72 69 6d 61 72 79 2d 6e 61 76 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 7d 23 70 72 69 6d 61 72 79 2d 6e 61 76 69 67 61 74 69 6f 6e 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 23 70 72 69 6d 61 72 79 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 75 6c 7b 77 69 64 74 68 3a 32 30 30 70 78 7d 23 70 72 69 6d 61 72 79 2d 6e 61 76 69 67 61 Data Ascii: >ul>li:first-child>a{padding-left:0}.navigation .toggle-caret{display:none}.regular_header div#primary-nav{float:left;width:100%;border-bottom:1px solid #eee}#primary-navigation{float:right}#primary-navigation .navigation ul ul{width:200px}#primary-naviga
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 65 61 72 7d 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 6c 69 20 61 2c 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 6c 69 20 61 3a 6c 69 6e 6b 2c 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 6c 69 20 61 3a 76 69 73 69 74 65 64 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 6e 61 76 69 67 61 74 69 6f 6e 3e 75 6c 3e 2e 63 75 72 72 65 6e 74 20 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 63 6f 6c 6f 72 3a 23 35 61 35 61 35 61 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 6c 69 20 6c 69 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 75 6c 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 Data Ascii: ear}.navigation ul li a,.navigation ul li a:link,.navigation ul li a:visited{display:inline-block}.navigation>ul>.current a{background:0 0;color:#5a5a5a!important}.navigation ul li li{background:#fff;border-bottom:0}.navigation ul ul{position:absolute;wid
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 61 64 6d 69 6e 2d 62 61 72 20 2e 73 74 69 63 6b 79 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 61 63 74 69 76 65 7b 74 6f 70 3a 33 32 70 78 7d 2e 73 74 69 63 6b 79 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 35 73 20 6c 69 6e 65 61 72 7d 2e 61 72 74 69 63 6c 65 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 33 36 30 70 78 29 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 35 70 78 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 68 61 64 6f 77 Data Ascii: tant;-webkit-backface-visibility:hidden}.admin-bar .sticky-navigation-active{top:32px}.sticky-navigation a{transition:.25s linear}.article{width:calc(100% - 360px);float:left;margin-bottom:35px;padding:20px;background:#fff;box-sizing:border-box;box-shadow
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 68 75 6d 62 6e 61 69 6c 20 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 74 69 74 6c 65 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 73 69 6e 67 6c 65 2d 74 69 74 6c 65 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 70 61 67 65 20 68 31 2e 74 69 74 6c 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 70 6f 73 74 2d 69 6e 66 6f 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6c 6f 72 3a 23 61 61 61 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 68 65 61 64 65 72 20 2e 70 6f 73 74 2d 69 6e 66 6f Data Ascii: humbnail img{margin-bottom:0;width:100%;float:left}.title{clear:both}.single-title{float:left;width:100%}.page h1.title{padding-top:0;margin-bottom:0}.post-info{display:block;color:#aaa;float:left;clear:both;width:100%;margin-bottom:20px}header .post-info
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 69 73 74 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 61 72 74 69 63 6c 65 20 2e 69 63 6f 6e 6c 69 73 74 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 74 77 65 65 74 73 20 6c 69 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 62 5f 69 66 72 61 6d 65 5f 77 69 64 67 65 74 2c 2e 66 62 5f 69 66 72 61 6d 65 5f 77 69 64 67 65 74 20 73 70 61 6e 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 69 64 67 65 74 5f 6e 61 76 5f 6d 65 6e 75 20 2e 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 3e 61 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 69 64 67 65 74 5f 6e 61 76 5f 6d 65 6e Data Ascii: ist{padding-left:0}article .iconlist li{list-style-type:none}.tweets li{margin-bottom:15px!important}.fb_iframe_widget,.fb_iframe_widget span{max-width:100%;width:100%!important}.widget_nav_menu .menu-item-has-children>a:after{display:none}.widget_nav_men
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 70 72 6f 64 75 63 74 5f 73 65 61 72 63 68 2c 23 73 69 64 65 62 61 72 20 2e 77 69 64 67 65 74 2e 77 69 64 67 65 74 5f 73 65 61 72 63 68 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 32 32 7d 23 73 69 64 65 62 61 72 20 2e 77 69 64 67 65 74 2e 77 69 64 67 65 74 5f 73 65 61 72 63 68 20 68 33 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 73 65 61 72 63 68 66 6f 72 6d 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 61 72 74 69 63 6c 65 20 23 73 65 61 72 63 68 66 6f 72 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 23 73 65 61 72 63 68 66 6f 72 6d 20 66 69 65 6c 64 73 65 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a Data Ascii: product_search,#sidebar .widget.widget_search{background:#222}#sidebar .widget.widget_search h3{color:#fff}#searchform{padding:0;float:left;clear:both;width:100%;position:relative}.article #searchform{max-width:300px}#searchform fieldset{float:left;width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.22	49175	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	573	OUT	GET /wp-content/themes/mts_schema/css/responsive.css HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:03 UTC	959	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Tue, 28 Nov 2023 15:35:16 GMT etag: W/"656608b4-3026" x-cache-groups: assets x-request-id: 9a2f4ae85943f05e148a501c3b74ded9 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3hwi1h8p0kyYTnEuuivgGR2dEgdlmeHisfYdcW6uUxmyWFN8T3uNmAfPkCeWcoMnHweLO3xhvVqSzjtocWOcLiEW8k5RVUOvK3a1CNwrYOWre6XCPptrD4o8JfiPpQROSDvi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4cfac776daf-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:03 UTC	410	IN	Data Raw: 33 30 32 36 0d 0a 68 74 6d 6c 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 7d 0a 2e 6d 61 69 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 20 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 33 36 36 70 78 29 20 7b 20 0a 20 20 20 20 2e 73 68 61 72 65 69 74 20 7b 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 2d 31 34 30 70 78 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 33 30 30 70 78 29 20 7b 20 0a 20 20 20 20 2e 73 68 61 72 65 69 74 20 7b 0a 20 20 20 20 20 20 20 20 70 Data Ascii: 3026html { overflow-x: hidden; -webkit-text-size-adjust: 100%;}.main-container { max-width: 100% }@media screen and (max-width:1366px) { .shareit { margin: 0 0 0 -140px }}@media screen and (max-width:1300px) { .shareit { p
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 73 68 61 72 65 2d 69 74 65 6d 20 7b 20 6d 61 72 67 69 6e 3a 20 30 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 35 32 70 78 29 20 7b 20 0a 20 20 20 20 23 70 61 67 65 2c 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 20 39 36 25 20 7d 0a Data Ascii: ; margin: 0!important; padding-top: 10px!important; border: none!important; box-shadow: none!important; } .share-item { margin: 0 }}@media screen and (max-width:1152px) { #page, .container { max-width: 96% }
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6c 6f 67 6f 2d 77 72 61 70 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 Data Ascii: float: none; letter-spacing: 0; } .logo-wrap { margin-bottom: 10px; margin-top: 0; width: 100%; margin-top: 20px; text-align: center; } .widget-header { max-width: 100%;
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 61 72 79 2d 6e 61 76 69 67 61 74 69 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6d 65 6e 75 20 61 2c 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6d 65 6e 75 20 2e 66 61 20 3e 20 61 2c 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6d 65 6e 75 20 2e 66 61 20 3e 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 61 76 69 67 61 74 69 Data Ascii: ary-navigation { width: 100%!important; position: relative!important; } .navigation .menu a, .navigation .menu .fa > a, .navigation .menu .fa > a { color: #fff!important; background: transparent; } .navigati
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 69 6e 64 65 6e 74 3a 20 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 61 23 70 75 6c 6c 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 e2 98 b0 22 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 46 6f 6e 74 41 77 65 73 6f 6d 65 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 2e 73 66 48 6f 76 65 72 20 61 2c 20 2e 6e 61 76 69 67 61 74 69 Data Ascii: text-indent: 0px; } a#pull:after { content: ""; display: inline-block; position: absolute; right: 15px; top: 10px; font-family: FontAwesome; } .navigation ul .sfHover a, .navigati
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 62 6c 6f 63 6b 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 6c 69 3a 68 6f 76 65 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 20 7d 0a 20 20 20 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 6c 69 20 61 2c 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 75 6c 20 61 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 20 75 6c 20 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 Data Ascii: block; } .navigation ul li:hover { background: none } .navigation ul li a, .navigation ul ul a { padding: 9px 0!important; width: 100%; border: none; } .navigation ul ul { position: static; width
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 6d 65 6e 75 20 2e 77 70 6d 6d 2d 73 75 62 63 61 74 65 67 6f 72 69 65 73 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 69 6e 64 65 6e 74 3a 20 30 3b 0a 20 20 20 20 7d 0a 20 20 20 20 23 77 70 6d 6d 2d 6d 65 67 61 6d 65 6e 75 20 2e 77 70 6d 6d 2d 70 6f 73 74 73 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 20 7d 0a 20 20 20 20 23 77 70 6d 6d 2d 6d 65 67 61 6d 65 6e 75 20 2e 77 70 6d 6d 2d 70 6f 73 74 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 21 69 6d 70 6f 72 Data Ascii: menu .wpmm-subcategories { width: 100%; text-indent: 0; } #wpmm-megamenu .wpmm-posts { width: 100% } #wpmm-megamenu .wpmm-post { width: 100%!important; padding: 0 10px!important; text-align: center!impor
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 29 20 7b 20 0a 20 20 20 20 23 73 65 63 6f 6e 64 61 72 79 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 61 72 74 69 63 6c 65 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 20 7d 0a 20 20 20 20 23 63 6f 6e 74 65 6e 74 5f 62 6f 78 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 Data Ascii: en and (max-width:720px) { #secondary-navigation a { padding-top: 10px!important; padding-bottom: 10px!important; } .article { width: 100% } #content_box { padding-right: 0px; padding-left: 0px!important;
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 70 72 69 6d 61 72 79 2d 73 6c 69 64 65 72 20 2e 73 6c 69 64 65 2d 74 69 74 6c 65 2c 20 2e 6c 61 74 65 73 74 50 6f 73 74 20 2e 74 69 74 6c 65 20 61 2c 20 2e 73 69 6e 67 6c 65 2d 74 69 74 6c 65 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 20 7d 0a 20 20 20 20 2e 72 65 6c 61 74 65 64 2d 70 6f 73 74 73 20 2e 6c 61 74 65 73 74 50 6f 73 74 20 2e 74 69 74 6c 65 20 61 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 38 30 70 78 29 20 7b 20 0a 20 20 20 20 2e 6e 61 76 69 67 Data Ascii: %; margin-right: 0; } .primary-slider .slide-title, .latestPost .title a, .single-title { font-size: 24px!important } .related-posts .latestPost .title a { font-size: 16px!important }}@media screen and (max-width:480px) { .navig
2023-12-12 20:38:03 UTC	972	IN	Data Raw: 72 3a 20 62 6f 74 68 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 37 30 70 78 29 20 7b 20 0a 20 20 20 20 2e 6c 61 74 65 73 74 50 6f 73 74 2d 72 65 76 69 65 77 2d 77 72 61 70 70 65 72 20 2e 72 65 76 69 65 77 2d 74 6f 74 61 6c 2d 73 74 61 72 20 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 30 30 70 78 29 20 7b 20 0a 20 20 20 20 61 72 74 69 63 6c 65 20 68 65 61 64 65 Data Ascii: r: both; width: 100%; }}@media screen and (max-width:470px) { .latestPost-review-wrapper .review-total-star { position: relative; right: 0; top: 0; }}@media screen and (max-width:400px) { article heade

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.22	49176	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	577	OUT	GET /wp-content/themes/mts_schema/css/magnific-popup.css HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:03 UTC	980	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-1714" x-cache-groups: assets x-request-id: 8965ba3ae0fb09bd1db9e8f9c1f38769 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 70696 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MXzz6bbLzp9V7LqmpYAPJBbs%2BOQG03ZR9CrLJcpGkFchRxUDn%2BKX85R2TxtTycqCmOYCOsq%2Fz69sM4KLu%2FQLsgyWQ%2BX46pUTJ5HHe9lxgwe4myLRxncAmLU7aDYGOrIqt71v"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4cfcd9f74b2-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:03 UTC	389	IN	Data Raw: 31 37 31 34 0d 0a 2e 6d 66 70 2d 62 67 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 34 32 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 62 30 62 30 62 3b 6f 70 61 63 69 74 79 3a 30 2e 38 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 3b 7d 0a 2e 6d 66 70 2d 77 72 61 70 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 34 33 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 Data Ascii: 1714.mfp-bg{top:0;left:0;width:100%;height:100%;z-index:1042;overflow:hidden;position:fixed;background:#0b0b0b;opacity:0.8;filter:alpha(opacity=80);}.mfp-wrap{top:0;left:0;width:100%;height:100%;z-index:1043;position:fixed;outline:none!important;-webki
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 3b 7d 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7d 0a 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c Data Ascii: ng:border-box;-moz-box-sizing:border-box;box-sizing:border-box;padding:0 8px;}.mfp-container:before{content:'';display:inline-block;height:100%;vertical-align:middle;}.mfp-content{position:relative;display:inline-block;vertical-align:middle;text-align:l
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 32 38 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 42 61 73 6b 65 72 76 69 6c 6c 65 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 31 38 70 78 20 31 30 70 78 3b 7d 0a 2e 6d 66 70 2d 63 6c 6f 73 65 3a 61 63 74 69 76 65 7b 74 6f 70 3a 31 70 78 3b 7d 0a 2e 6d 66 70 2d 63 6c 6f 73 65 2d 62 74 6e 2d 69 6e 20 2e 6d 66 70 2d 63 6c 6f 73 65 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 7d 0a 2e 6d 66 70 2d 69 6d 61 67 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6c 6f 73 65 2c 2e 6d 66 70 2d 69 66 72 61 6d 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6c 6f 73 65 7b 63 6f 6c 6f 72 3a 23 46 46 46 3b 72 69 67 68 74 3a 2d 36 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 70 Data Ascii: 28px;font-family:Arial, Baskerville, monospace;padding:0 0 18px 10px;}.mfp-close:active{top:1px;}.mfp-close-btn-in .mfp-close{color:#333;}.mfp-image-holder .mfp-close,.mfp-iframe-holder .mfp-close{color:#FFF;right:-6px;text-align:right;padding-right:6p
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 32 37 70 78 20 73 6f 6c 69 64 20 23 33 66 33 66 33 66 3b 7d 0a 2e 6d 66 70 2d 69 66 72 61 6d 65 2d 68 6f 6c 64 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 30 70 78 3b 7d 0a 2e 6d 66 70 2d 69 66 72 61 6d 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 3b 7d 0a 2e 6d 66 70 2d 69 66 72 61 6d 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6c 6f 73 65 7b 74 6f 70 3a 2d 34 30 70 78 3b 7d 0a 2e 6d 66 70 2d 69 66 72 61 6d 65 2d 73 63 61 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f Data Ascii: {border-left:27px solid #3f3f3f;}.mfp-iframe-holder{padding-top:40px;padding-bottom:40px;}.mfp-iframe-holder .mfp-content{line-height:0;width:100%;max-width:900px;}.mfp-iframe-holder .mfp-close{top:-40px;}.mfp-iframe-scaler{width:100%;height:0;overflo
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 69 6e 67 2d 74 6f 70 3a 34 34 70 78 3b 7d 0a 2e 6d 66 70 2d 69 65 37 20 2e 6d 66 70 2d 63 6c 6f 73 65 7b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 7d 0a 2e 6d 66 70 2d 61 6c 69 67 6e 2d 74 6f 70 20 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 2c 2e 6d 66 70 2d 6c 6f 61 64 69 6e 67 2e 6d 66 70 2d 66 69 67 75 72 65 2c 2e 6d 66 70 2d 73 2d 72 65 61 64 79 20 2e 6d 66 70 2d 70 72 65 6c 6f 61 64 65 72 2c 2e 6d 66 70 2d 73 2d 65 72 72 6f 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 2e 6d 66 70 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 2c 2e 6d 66 70 2d 63 6c 6f 73 65 3a 66 6f 63 75 73 2c 2e 6d 66 70 2d 61 72 72 6f 77 3a 68 6f 76 65 72 2c 2e 6d 66 70 2d 61 72 72 6f Data Ascii: ing-top:44px;}.mfp-ie7 .mfp-close{top:0;right:0;padding-top:0;}.mfp-align-top .mfp-container:before,.mfp-loading.mfp-figure,.mfp-s-ready .mfp-preloader,.mfp-s-error .mfp-content{display:none;}.mfp-close:hover,.mfp-close:focus,.mfp-arrow:hover,.mfp-arro
2023-12-12 20:38:03 UTC	51	IN	Data Raw: 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 70 78 3b 7d 0a 7d 0d 0a Data Ascii: -container{padding-left:6px;padding-right:6px;}}
2023-12-12 20:38:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.22	49174	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	587	OUT	GET /wp-content/plugins/wp-table-reloaded/css/plugin.css?ver=1.9.4 HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:03 UTC	966	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-3d4" x-cache-groups: assets x-request-id: 9e138270687bd401be465870ac7e7c78 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PsTKUc4nvKVOKlo44N5N1noY6KOVKw9m4kD2QWEB0XHyupb5%2FjFilxZEzIc2h9uYjRZy2fE%2BykBP8ME2tzey6RcrjAPbJEkxGd1MRAMlPc%2BJVm4b5Q2b%2FDu3p3T1rBVGknEY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4cfe90e31fb-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:03 UTC	403	IN	Data Raw: 33 64 34 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 2a 20 20 54 68 69 73 20 43 53 53 20 66 69 6c 65 20 62 65 6c 6f 6e 67 73 20 74 6f 20 57 50 2d 54 61 62 6c 65 20 52 65 6c 6f 61 64 65 64 21 20 20 20 2a 0d 0a 2a 20 20 44 4f 20 4e 4f 54 20 6d 61 6b 65 20 61 6e 79 20 63 68 61 6e 67 65 73 20 68 65 72 65 2c 20 61 64 64 20 74 68 65 6d 20 74 6f 20 74 68 65 20 2a 0d 0a 2a 20 22 43 75 73 74 6f 6d 20 43 53 53 22 20 74 65 78 74 61 72 65 61 20 69 6e 20 74 68 65 20 22 50 6c 75 67 69 6e 20 4f 70 74 69 6f 6e 73 22 21 20 2a 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: 3d4/************************************************ This CSS file belongs to WP-Table Reloaded! DO NOT make any changes here, add them to the "Custom CSS" textarea in the "Plugin Options"! *****************************************
2023-12-12 20:38:03 UTC	584	IN	Data Raw: 74 2d 73 69 7a 65 3a 20 38 70 74 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 7d 0d 0a 2e 77 70 2d 74 61 62 6c 65 2d 72 65 6c 6f 61 64 65 64 20 74 68 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 36 45 45 45 45 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 46 46 46 46 46 46 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 34 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 33 44 33 44 33 44 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 2e 77 70 2d 74 61 62 6c 65 2d 72 65 6c 6f 61 64 65 64 20 74 64 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 33 44 33 44 33 44 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 34 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: t-size: 8pt;width: 100%;text-align: left;}.wp-table-reloaded th {background-color: #E6EEEE;border: 1px solid #FFFFFF;padding: 4px;color: #3D3D3D!important;}.wp-table-reloaded td {color: #3D3D3D;padding: 4px;background-co
2023-12-12 20:38:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.22	49173	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	591	OUT	GET /wp-content/plugins/wp-table-reloaded/css/datatables.css?ver=1.9.4 HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:03 UTC	980	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:03 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-919" x-cache-groups: assets x-request-id: 6c3c35b954b34c2282f4e44a25ec31e6 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 159613 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wQP3HQiZPY6N7ZvtgmLTEUoALCD3xur%2BNUgN2AqxaonDO4RqLshG9PhZwZxPQOUSaDVNHIVao%2FZuzjghgirKfc6xk7kuF0rOz8nR%2Bj24X%2FtBOLNlYAZE8s%2FYISfkektBy95O"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4cfd84067c2-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:03 UTC	389	IN	Data Raw: 39 31 39 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0d 0a 2a 20 20 54 68 69 73 20 43 53 53 20 66 69 6c 65 20 62 65 6c 6f 6e 67 73 20 74 6f 20 57 50 2d 54 61 62 6c 65 20 52 65 6c 6f 61 64 65 64 21 20 20 20 2a 0d 0a 2a 20 20 20 20 44 4f 20 4e 4f 54 20 6d 61 6b 65 20 61 6e 79 20 63 68 61 6e 67 65 73 20 68 65 72 65 2c 20 62 75 74 20 69 6e 20 74 68 65 20 20 20 20 2a 0d 0a 2a 20 22 43 75 73 74 6f 6d 20 43 53 53 22 20 74 65 78 74 61 72 65 61 20 69 6e 20 74 68 65 20 22 50 6c 75 67 69 6e 20 4f 70 74 69 6f 6e 73 22 21 20 2a 0d 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: 919/************************************************ This CSS file belongs to WP-Table Reloaded! DO NOT make any changes here, but in the "Custom CSS" textarea in the "Plugin Options"! *****************************************
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 74 61 62 6c 65 2d 72 65 6c 6f 61 64 65 64 20 2e 73 6f 72 74 69 6e 67 5f 61 73 63 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 44 42 44 44 38 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 61 73 63 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 20 72 69 67 68 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 70 2d 74 61 62 6c 65 2d 72 65 6c 6f 61 64 65 64 20 2e 73 6f 72 74 69 6e 67 5f 64 65 73 63 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 44 42 44 44 38 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 64 65 73 63 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 20 72 69 67 68 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 61 74 61 54 61 62 6c 65 73 5f 77 72 61 70 70 65 72 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 Data Ascii: table-reloaded .sorting_asc {background: #8DBDD8 url(../img/asc.gif) no-repeat center right;}.wp-table-reloaded .sorting_desc {background: #8DBDD8 url(../img/desc.gif) no-repeat center right;}.dataTables_wrapper { position: relative
2023-12-12 20:38:03 UTC	578	IN	Data Raw: 6a 70 67 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 69 6e 67 5f 66 75 6c 6c 5f 6e 75 6d 62 65 72 73 20 7b 0d 0a 09 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 69 6e 67 5f 66 75 6c 6c 5f 6e 75 6d 62 65 72 73 20 73 70 61 6e 2e 70 61 67 69 6e 61 74 65 5f 62 75 74 74 6f 6e 2c 20 2e 70 61 67 69 6e 67 5f 66 75 6c 6c 5f 6e 75 6d 62 65 72 73 20 73 70 61 6e 2e 70 61 67 69 6e 61 74 65 5f 61 63 74 69 76 65 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 0d 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 Data Ascii: jpg);}.paging_full_numbers {width: 400px;height: 22px;line-height: 22px;}.paging_full_numbers span.paginate_button, .paging_full_numbers span.paginate_active {border: 1px solid #aaa;-webkit-border-radius: 5px;-moz-border-radi
2023-12-12 20:38:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.22	49178	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	594	OUT	GET /images/math-books.png HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:03 UTC	981	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:03 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-5b57" x-cache-groups: assets x-request-id: 0a27506d5aea07cd8e1302d428acde4e x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 1130854 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zWQeTikV56BwmOyugXC%2BGQO6QRDo%2FqmrbztaraCqxBdtY%2FuJlafrOOhgZjL0F1Pe71LcDEnP9vDvUx2FvYHbUO8%2FmYfIt%2FUmOQS5kc6BbukWQUSYZAGd9eLkpLSZuqQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d0f9e60971-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:03 UTC	388	IN	Data Raw: 35 62 35 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 ee 08 03 00 00 00 27 75 ea 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 80 50 4c 54 45 34 36 37 6c 6e 6f f0 e5 cf da e6 eb ad 8d 69 e8 e9 e7 fb fb fb 26 25 26 91 8e 8c dc c9 a6 e6 d4 b2 e0 df dc f4 df 74 0b 08 07 6e 90 a5 ce b4 8c ba b4 aa 92 75 6d ee f3 f6 b6 ae a7 eb de c9 44 46 47 5b 65 6b 4f 34 30 c6 da dc 69 47 38 c5 a1 75 f7 f7 fb eb ee f0 90 67 57 74 50 45 89 58 49 a4 99 90 bd d5 d6 55 56 58 f1 de 86 6c 33 2d c3 bc b1 ae a4 9a 6e 23 17 3c 42 44 1f 18 16 f7 fb fb 85 b0 cb fb fb f7 ba b7 b5 f4 f3 ee 9a ce ec d9 c3 98 c7 c7 c5 f7 e4 85 67 78 82 29 20 1b a9 a8 a5 54 5b 61 4c 52 56 d4 de e3 Data Ascii: 5b57PNGIHDR'utEXtSoftwareAdobe ImageReadyqe<PLTE467lnoi&%&tnumDFG[ekO40iG8ugWtPEXIUVXl3-n#<BDgx) T[aLRV
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 9a 94 7a 80 81 1f 20 21 a6 b1 ad 23 1e 1f 5b 5f 5d a3 a0 9f b7 b0 b0 da d1 d5 4f 4d 50 4d 4e 4b 40 3f 37 ce c1 bd 1a 1a 1a 1d 1e 1a f3 f3 f3 27 2d 2a f7 f7 f7 f3 f3 f7 f7 f7 f3 f7 f3 f3 f3 f7 f9 f7 f3 f7 f3 f7 f3 f0 ef f2 f9 f9 f9 f8 f8 f8 34 77 13 0f 00 00 59 6d 49 44 41 54 78 da ac 7d 8b 43 1a 47 f7 f6 6e a2 2e 6a 50 d0 2c d6 3b a5 a0 10 a3 d1 82 a0 d5 92 b0 c5 ba 89 86 26 62 8c 86 90 0f 82 85 22 06 91 5b 8c bf 57 f8 d7 bf 73 ce cc ec 2e a8 89 be 7d 07 44 bc a4 f5 99 e7 9c e7 5c 66 76 47 aa 2f c1 03 06 bd b0 f1 ad de 39 be e1 f3 82 bd bf c0 37 17 e2 d1 b4 bc 65 5f 34 2f 2e e0 a3 8e 2f b7 3c f8 a7 9d 26 1b f0 0d f1 76 a7 dd 6e c2 03 5f 76 5a 6d 18 f0 d2 6c d1 27 fc a2 d5 a2 17 cb e7 7f 37 24 06 9a e3 c7 57 e3 4d 27 f8 0b 06 dc c4 5a ef c2 5e 47 d4 75 86 Data Ascii: z !#[_]OMPMNK@?7'-*4wYmIDATx}CGn.jP,;&b"[Ws.}D\fvG/97e_4/./<&vn_vZml'7$WM'Z^Gu
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: dc 01 98 08 87 1c d0 2b 6a 64 6e 54 ce 21 ee d2 1c e3 fa 06 f8 4c 1e 46 57 59 bc 40 99 a4 69 80 34 aa c4 b3 87 7a ab af d3 1e ac 3a 67 a5 bd dd f9 fd 7b 24 b2 e4 eb e4 e0 00 71 b8 67 f8 51 4f 0f 3c f1 63 f8 57 01 fe 60 aa 77 91 60 3b 38 7a 20 7e d1 56 0b 05 72 3e 77 31 10 00 f2 17 4f 02 81 8c c3 e1 4c 29 81 50 a8 e4 0e a8 30 29 32 fc d8 b6 77 22 cb b6 51 08 89 0e 6e f4 dd 93 40 aa 28 02 27 8f 9b 51 97 2c f7 3e 29 e5 6d 25 f0 8b 37 98 45 d5 9f 5a 26 a2 af db ae 6f 0f f5 df f5 f5 a5 a5 83 5f 39 f4 5f 7f 7d f4 2b a8 1a 7c 5a a6 44 c6 a0 fd e0 aa 77 d1 71 2a 1e ec b9 98 0b 64 d2 a9 53 2d 94 aa ba 1d 8e b9 42 3c 05 36 70 ea 4b 15 4b 73 0e 1b 4c c3 a8 c3 63 b7 f9 72 f6 80 dd 9e 5a 9c 4b 2a 36 f0 7c 87 2d 6a 23 b2 e7 0c d8 5d 13 b1 88 aa 88 df 5e f5 ed bb 73 79 Data Ascii: +jdnT!LFWY@i4z:g{$qgQO<cW`w`;8z ~Vr>w1OL)P0)2w"Qn@('Q,>)m%7EZ&o_9_}+\|ZDwqdS-B<6pKKsLcrZK6\|-j#]^sy
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: f3 f9 1c a8 18 4c 04 4c 05 7a f2 dc dc 9c a5 8e 37 f0 3b c8 14 28 9b 77 b8 9d 25 74 c6 d1 b8 ea b0 81 31 f8 80 e7 9c 6f 2e 09 3a 4f 06 31 97 50 00 d8 e2 2a a4 88 e8 30 99 80 5f 96 20 51 1a 95 94 d1 78 20 a7 16 e6 4e 47 33 81 aa 7c 23 e7 06 68 fe f9 14 d9 c6 af 6d 73 dc fc 1d e7 d7 fb f0 37 ac b7 7c eb ed 1d b4 8e 57 fc 03 e0 bf 59 86 e0 bb 97 4d 64 c7 e2 95 4a e5 6c 6f ef 24 1a 05 1d a5 69 80 89 80 27 9b 8c 12 9b 0a 87 31 7c 18 0f 44 7b c3 01 7f 12 cc 82 3b 9e 5f 9c cb 96 1d a3 3e 88 06 28 13 8a 9c 93 b3 6e 60 57 f6 95 94 42 a2 58 ac ca 3e 34 0b 77 51 4a 67 57 01 4f 2e 6d 77 41 de 80 a9 a4 05 f5 a9 41 3c a1 a6 1f 3a 4a 36 fc ca cd 7f e0 70 ac f4 b5 7e c4 ba 58 82 23 f6 e1 f9 60 90 e6 e1 c1 20 da 02 a1 ef 77 b8 73 d1 bd f8 58 3c 1e df 83 54 db 99 eb b1 91 Data Ascii: LLz7;(w%t1o.:O1P*0_ Qx NG3\|#hms7\|WYMdJlo$i'1\|D{;_>(n`WBX>4wQJgWO.mwAA<:J6p~X#` wsX<T
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 0c b4 12 9a a3 29 fa 36 77 91 37 2b 6c 1e de b4 ff a5 c1 87 63 15 1e dd d0 db d3 ba 16 9d 78 f4 08 9f 47 5a 92 79 3e 28 00 98 bb a6 46 24 ce fa f2 04 07 3f b7 cc 58 47 51 63 9c 33 e8 38 58 09 6b d3 6c 4d 81 e6 aa dd 64 0b f7 e6 72 63 9b 2f c3 e0 8e 9f ff 34 eb 4b dc 24 00 31 9f 8a 5d 7a 7b b5 bb 64 bc 5f 62 13 04 76 71 cd d5 ef 0b 3d 13 a3 c0 4e 26 0f 1e 2f cd 4e 60 13 63 62 e2 dd 51 8a e3 46 d2 01 7a cc 03 ac 8f 4d 3c 3e 18 58 1e 46 53 9f 98 9b 18 ee 47 d6 2b 5a c0 60 3b 50 65 f0 19 f2 aa 76 78 52 ba e0 c8 7b 77 db b4 f0 42 2b ed c6 82 4a b3 c5 77 8e 9a 6b 11 6c b1 96 ef e2 b8 a2 a9 b0 3c 44 32 be fb ed 3b cb 8d 3f ce ea d0 e0 c3 31 15 0c 5e c2 c0 8e ac c7 8f de 31 63 7e 77 14 27 e8 0d 44 0e 9e ee 8f 9d 48 08 7d e0 01 b0 3e 31 bc b9 89 f0 fb 91 75 cd 6f Data Ascii: )6w7+lcxGZy>(F$?XGQc38XklMdrc/4K$1]z{d_bvq=N&/N`cbQFzM<>XFSG+Z`;PevxR{wB+Jwkl<D2;?1^1c~w'DH}>1uo
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 31 97 dd 3c da f2 66 99 bc 93 ab c7 00 7a c5 2e 64 0e 15 1e a1 3f 26 e8 7e 04 51 c3 a4 06 32 1a 3b d2 4d 8e 0e 43 47 e8 ba 52 60 83 41 c7 11 60 2f 21 78 14 56 cb f0 3b 59 40 1d 80 c7 c6 8b 8d ed f9 ed b1 78 f4 03 24 ec cd f6 6d db e4 da ed 7f 9b cd 11 74 0f 87 8e c9 ac 94 f5 8e 43 16 8f a9 ec e6 96 57 22 e4 4c e5 38 eb e0 eb 0f a0 60 7f d7 83 be be 8c d0 13 f6 6c c5 e8 53 90 af 2b 94 c3 62 af aa d0 01 bd 58 20 dc 30 23 08 bb 06 c2 88 d2 a8 1c 2a c4 fa 0b 02 0f 06 3f 0f b4 8f 67 3e 5c d5 db cd 8e 1c af fd 3f 4d 64 5b af a2 68 f0 d8 a7 61 f9 1c 0c 33 87 47 d8 8c 75 cc 68 3c 04 3d 3b 01 06 3f 30 0c 62 30 6c 61 1d 4d 9c 12 59 05 12 c3 98 02 b8 c1 08 0a 28 73 0c 7a b1 a0 10 72 98 0e 9c 12 30 f8 00 c1 07 7b 2f 2a 25 80 1e c8 02 df 30 02 2f 90 f7 17 1b f1 99 b5 Data Ascii: 1<fz.d?&~Q2;MCGR`A`/!xV;Y@x$mtCW"L8`lS+bX 0#?g>\?Md[ha3Guh<=;?0b0laMY(szr0{/%0/
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 83 5f 06 83 ef ef e9 e9 79 f7 f7 f2 f2 c0 e3 01 32 78 f4 e0 1a 59 bd ff 7d d0 8f b5 39 a3 dd 80 4e 91 1d cb 55 44 5f b4 e5 73 e5 22 33 78 90 b9 3c fc 4a 91 a0 33 ec db 50 b7 66 9e 9f ee 82 af 5f bf dc db 34 78 20 9c 5d 5c bb 63 c6 3e 6b 0e ff 83 49 68 5e 01 eb 27 58 ba a5 44 26 2b 65 d5 7c de 9f 05 5f d7 74 21 f1 40 3a 41 8f 19 ac 1f bd eb 21 5f 07 d6 d1 e0 89 f1 10 44 77 e5 bd bf 61 53 b0 44 a9 31 e8 12 53 78 45 f8 3a 92 9e 2a db 03 72 39 c0 f2 d8 5a d6 06 06 1f 98 67 c8 19 f4 17 63 33 e3 8b df be ed b4 cc 2b be 8d 96 b5 65 0a 70 8d 12 ad 7e d2 d0 42 0c 6e 77 25 7e 09 58 77 45 62 22 b0 13 fa f2 89 1c 4b cb 80 5f f4 29 28 8f c5 94 46 a5 e0 f6 f8 c1 63 2c 5f 7a c0 d7 07 1e 0c 90 af 17 19 e7 81 80 e4 b7 57 d1 d7 8b 4c e5 19 eb 6a ac 4a 71 1d 92 f8 34 fa 7b Data Ascii: _y2xY}9NUD_s"3x<J3Pf_4x ]\c>kIh^'XD&+e\|_t!@:A!_DwaSD1SxE:*r9Zgc3+ep~Bnw%~XwEb"K_)(Fc,_zWLjJq4{
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: c0 fa ce 45 fb 66 ec 5d d0 2d 26 ff 5f b0 7e 66 04 76 28 54 cf f2 b2 ab 11 9f c5 5d 15 86 cc 59 58 5f 7e f0 f8 71 ff bb 9e cd bf b1 17 cd 7c 5d ad d9 ab 76 97 14 28 2c 3c 1b 6a d0 de d8 6a 55 1b 7a 1d 2e 2a 8d 82 35 ae 17 75 39 55 2d d4 52 1e c8 fb 8a 7c 0f 75 35 45 95 db bc 28 59 e7 9f cf 83 cc cd ae 7f d9 b9 d8 b1 c6 f3 76 f7 3d 0a 5b d6 6f b4 fe 0b d6 4b 61 99 92 78 7f c5 64 1d ea 14 5d 9b 99 91 2c 8b 8d fe 2e d6 a9 43 85 d9 1c 63 1d 2a 20 bf 2b 6c 8f bc 0c da 51 df d8 46 9a 85 85 6a 81 07 37 91 ce 29 aa a7 58 2c 40 ce 5f c5 6b 4c 30 fd 0d 05 54 62 7d 7e 63 db 84 fe fc f9 f4 34 42 6f b6 6f 19 66 4d d3 69 f8 f7 87 8e 49 bc 61 f1 59 55 f6 44 f4 f1 78 3c a5 9b 5b 2a c8 e0 e5 48 08 59 7f 7c f0 18 ea f5 4d 6a 4b 32 d6 63 ae 70 78 c8 15 a9 06 17 58 36 87 0d Data Ascii: Ef]-&_~fv(T]YX_~q\|]v(,<jjUz.5u9U-R\|u5E(Yv=[oKaxd],.Cc +lQFj7)X,@_kL0Tb}~c4BoofMiIaYUDx<[*HY\|MjK2cpxX6
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: 82 1b 8f eb 5f 4c d6 6f 87 df fa 37 06 bf 82 ac 8b d2 0d b1 6b 6c 07 8d 66 ca 9c 19 dc 4e 78 70 7b 3c 30 dc 03 35 ab 4f 18 fc 59 95 6d 8f d2 a1 62 0d 06 1b c1 85 85 20 75 22 1b 85 34 2f 5a 1b ec a2 f8 a4 2a 49 a1 9a 8a 37 4a 28 1a d0 31 b8 65 3b 42 db f3 ad 2d 84 7e 5f 4f bf 3f 74 2e 73 7e cc df cc 05 57 dd ba ce 2a a0 2b f6 80 73 19 b3 b9 77 13 16 83 2f 46 54 60 55 4b e2 72 2a 96 30 f6 6a 6c e1 99 8b fc 3d 59 65 be 8e d7 cb 21 74 9b 5c 03 af af fa 93 89 1a 01 07 83 2f 87 3b 58 e7 95 9b f0 f5 d6 ed 34 df 60 0b f7 d8 4b 03 d0 99 c2 97 63 c4 3a 33 79 bf 64 19 8c 74 d5 80 be 49 32 37 b1 2c 0c 1e 7d fd 0c 53 9a 21 7f 48 51 42 81 a0 cb de 60 3d 9a 82 a1 f0 c9 06 00 47 5f 6f a8 52 40 29 6a c0 ba 6c b0 1e cb 18 d0 79 f1 82 0a 7f 34 f8 7f df 6e 49 64 bf 63 fe f7 Data Ascii: _Lo7klfNxp{<05OYmb u"4/ZI7J(1e;B-~_O?t.s~W+sw/FT`UKr*0jl=Ye!t\/;X4`Kc:3ydtI27,}S!HQB`=G_oR@)jly4nIdc
2023-12-12 20:38:03 UTC	1369	IN	Data Raw: fd 1e f9 d2 d5 3d ae e7 b5 b2 ce ca 56 4d 5f ed 7b f2 e4 72 e4 af a9 87 af 3e ac f9 c5 6a 23 29 7c 91 a0 e7 72 d3 51 22 dd b9 9e f3 00 f2 40 04 62 9b 2b 16 86 82 15 5b 6e d4 92 8c 05 6b c8 3a 57 78 e3 56 66 90 2d 17 43 6a 26 6f 0d 6e c4 3a 98 fb e2 79 09 fc dd 7d bc b2 f2 e5 74 66 fd 41 c7 b2 5a fb fa b2 72 e7 f2 f2 fd 7d bd d9 2b 9f 88 2d 25 5c e5 00 ba ed 24 ec 39 43 cd f7 97 54 91 c8 86 d1 d7 91 75 20 65 3d 3a 3b 3d 33 3e 33 bd 9e cb 21 eb 81 32 78 44 43 97 02 c1 20 96 6b 45 bc d6 a5 c1 b6 0e 51 f9 82 12 d7 60 be 9e 91 ab a1 42 1a 12 e5 b8 a1 f0 1c fa f6 b6 77 06 77 95 6c 45 a3 d3 ce d2 2c b0 de 67 ee a4 68 b5 ef e6 f1 d2 f7 ed bd 79 6d 43 3c 06 b7 18 8f eb 28 ea b2 04 38 92 69 b4 5b 8f 60 1d 64 4e 18 fc 3a 18 7c 74 76 66 06 69 cf 71 5f 1f 0a c6 6a 85 Data Ascii: =VM_{r>j#)\|rQ"@b+[nk:WxVf-Cj&on:y}tfAZr}+-%\$9CTu e=:;=3>3!2xDC kEQ`BwwlE,ghymC<(8i[`dN:\|tvfiq_j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.22	49181	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	547	OUT	GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:04 UTC	992	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 26 May 2023 11:33:35 GMT etag: W/"6470990f-155ba" x-cache-groups: assets x-request-id: 1409c2bcd08202e3be64b8865cf1f370 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 316972 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ax5Hnat%2BPMPRsnDtVFpyA4QtBv64MhyfMa%2Fr5BpZYO5KQqKmBV06Bmt8PhcRg%2Ftx2fyAiunA1mSIXFr7S0Nd7cNBL5WRr58vpei0UYnElg2UA7M9hnqP5VeBThhY7TnWxRWF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d35fadb3e5-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:04 UTC	377	IN	Data Raw: 37 62 64 32 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bd2/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 65 3d 5b 5d 2c 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 61 65 3d 6f 65 2e 73 6c 69 63 65 2c 67 3d 6f 65 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 73 3d 6f 65 2e 70 75 73 68 2c 73 65 3d 6f 65 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 69 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 75 65 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 75 65 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6c 65 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: e strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 65 2c 74 2c 65 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 61 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 Data Ascii: (this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(ae.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(ce.grep(this,function(e,t){return(
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 6f 6e 28 65 2c 74 2c 6e 29 7b 6d 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f 6e 63 65 7d 2c 6e 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 30 3b 69 66 28 63 28 65 29 29 7b 66 6f 72 28 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 69 29 7b 69 66 28 31 3d 3d 3d 69 7c 7c 39 3d Data Ascii: on(e,t,n){m(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(c(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(i){if(1===i\|\|9=
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 67 65 2b 22 2b 24 22 2c 22 67 22 29 3b 63 65 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 7c 7c 21 28 21 6e 7c 7c 31 21 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 65 2e 63 6f 6e 74 61 69 6e 73 3f 65 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 6e 29 29 29 7d 3b 76 61 72 20 66 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 66 75 6e 63 74 Data Ascii: :\\\\.)*)"+ge+"+$","g");ce.contains=function(e,t){var n=t&&t.parentNode;return e===n\|\|!(!n\|\|1!==n.nodeType\|\|!(e.contains?e.contains(n):e.compareDocumentPosition&&16&e.compareDocumentPosition(n)))};var f=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;funct
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 29 28 3f 3a 5c 5c 28 22 2b 67 65 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 67 65 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 67 65 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 66 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 67 65 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 67 65 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 Data Ascii: )(?:\$"+ge+"(even\|odd\|(([+-]\|)(\\d)n\|)"+ge+"(?:([+-]\|)"+ge+"(\\d+)\|))"+ge+"\$\|)","i"),bool:new RegExp("^(?:"+f+")$","i"),needsContext:new RegExp("^"+ge+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+ge+"((?:-\\d)?\\d)"+ge+"*\$\|)(?=[^-]\|$)","
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 29 2c 6e 7d 69 66 28 21 28 68 5b 74 2b 22 20 22 5d 7c 7c 64 26 26 64 2e 74 65 73 74 28 74 29 29 29 7b 69 66 28 63 3d 74 2c 66 3d 65 2c 31 3d 3d 3d 70 26 26 28 78 2e 74 65 73 74 28 74 29 7c 7c 6d 2e 74 65 73 74 28 74 29 29 29 7b 28 66 3d 48 2e 74 65 73 74 28 74 29 26 26 7a 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 65 26 26 6c 65 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 63 65 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 28 73 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 59 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b Data Ascii: ),n}if(!(h[t+" "]\|\|d&&d.test(t))){if(c=t,f=e,1===p&&(x.test(t)\|\|m.test(t))){(f=H.test(t)&&z(e.parentNode)\|\|e)==e&&le.scope\|\|((s=e.getAttribute("id"))?s=ce.escapeSelector(s):e.setAttribute("id",s=S)),o=(l=Y(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 54 26 26 39 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 72 3d 28 54 3d 6e 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 43 3d 21 63 65 2e 69 73 58 4d 4c 44 6f 63 28 54 29 2c 69 3d 72 2e 6d 61 74 63 68 65 73 7c 7c 72 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 2c 79 65 21 3d 54 26 26 28 74 3d 54 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 74 2e 74 6f 70 21 3d 3d 74 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 52 29 2c 6c 65 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 Data Ascii: T&&9===n.nodeType&&n.documentElement&&(r=(T=n).documentElement,C=!ce.isXMLDoc(T),i=r.matches\|\|r.webkitMatchesSelector\|\|r.msMatchesSelector,ye!=T&&(t=T.defaultView)&&t.top!==t&&t.addEventListener("unload",R),le.getById=$(function(e){return r.appendChild(e)
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 43 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 64 3d 5b 5d 2c 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 53 2b 22 27 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 53 2b 22 2d 5c 72 5c 5c 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 Data Ascii: eof t.getElementsByClassName&&C)return t.getElementsByClassName(e)},d=[],$(function(e){var t;r.appendChild(e).innerHTML="<a id='"+S+"' href='' disabled='disabled'></a><select id='"+S+"-\r\\' disabled='disabled'><option selected=''></option></select>",e.qu
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 2c 49 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 56 28 65 29 2c 43 26 26 21 68 5b 74 2b 22 20 22 5d 26 26 28 21 64 7c 7c 21 64 2e 74 65 73 74 28 74 29 29 29 74 72 79 7b 76 61 72 20 6e 3d 69 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 6e 7c 7c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 72 65 74 75 72 6e 20 30 3c 49 28 74 2c 54 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 49 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e Data Ascii: ,I.matchesSelector=function(e,t){if(V(e),C&&!h[t+" "]&&(!d\|\|!d.test(t)))try{var n=i.call(e,t);if(n\|\|le.disconnectedMatch\|\|e.document&&11!==e.document.nodeType)return n}catch(e){h(t,!0)}return 0<I(t,T,null,[e]).length},I.contains=function(e,t){return(e.own

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.22	49182	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	555	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:04 UTC	988	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 09 Jun 2023 05:49:24 GMT etag: W/"6482bd64-3509" x-cache-groups: assets x-request-id: b0ea1c9181cfd4f9a1f77ba5749ece2c x-presslabs-cache: MISS expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 704647 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YReqqJkNmjlCe3Kwi8OT7XSrCrQq7RfTxFOqe45FKoVLeFAWw5OWfurZDxKooz0zeEpH8FSn2Mt2yx%2BM1rOtq0Esre7SiC3v9rHHmieYDw13EQ1An6czA2oBHfVSCCa9Ufe3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d35c2a8da0-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:04 UTC	381	IN	Data Raw: 33 35 30 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 3509/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 30 3c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 2f 5e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 29 7c 7c 5b 5d 2c 6f 3d 72 2e 65 78 65 63 28 74 29 7c 7c 5b 5d 2c 61 3d 31 3b 61 3c 3d 33 3b 61 2b 2b 29 7b 69 66 28 2b 6f 5b 61 5d 3c 2b 6e 5b 61 5d 29 72 65 74 75 72 6e 20 31 3b 69 66 28 2b 6e 5b 61 5d 3c 2b 6f 5b 61 5d 29 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 30 7d 28 73 2e 66 6e 2e 6a 71 75 65 72 79 2c 65 29 7d 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 3d 22 33 2e 34 2e 31 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 Data Ascii: (function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 28 22 4e 6f 20 77 61 72 6e 69 6e 67 20 6d 65 73 73 61 67 65 20 70 72 6f 76 69 64 65 64 22 29 3b 72 65 74 75 72 6e 20 61 28 65 2c 74 2c 72 2c 6e 2c 6f 29 2c 30 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 74 2c 72 2c 6e 29 2c 30 7d 73 2e 6d 69 67 72 61 74 65 44 65 64 75 70 6c 69 63 61 74 65 57 61 72 6e 69 6e 67 73 3d 21 30 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 3d 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 73 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 28 73 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 73 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 3d 7b 7d 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 Data Ascii: ("No warning message provided");return a(e,t,r,n,o),0}function i(e,t,r,n){return a(e,t,r,n),0}s.migrateDeduplicateWarnings=!0,s.migrateWarnings=[],void 0===s.migrateTrace&&(s.migrateTrace=!0),s.migrateReset=function(){o={},s.migrateWarnings.length=0},"Bac
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 7d 2c 22 73 69 7a 65 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 73 69 7a 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 3b 20 75 73 65 20 74 68 65 20 2e 6c 65 6e 67 74 68 20 70 72 6f 70 65 72 74 79 22 29 2c 63 28 73 2c 22 70 61 72 73 65 4a 53 4f 4e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 70 61 72 73 65 4a 53 4f 4e 22 2c 22 6a 51 75 65 72 79 2e 70 61 72 73 65 4a 53 4f 4e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 4a 53 4f 4e 2e 70 61 72 73 65 22 29 2c 63 28 73 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 73 2e 68 6f 6c 64 52 65 61 64 Data Ascii: return this.length},"size","jQuery.fn.size() is deprecated and removed; use the .length property"),c(s,"parseJSON",function(){return JSON.parse.apply(null,arguments)},"parseJSON","jQuery.parseJSON is deprecated; use JSON.parse"),c(s,"holdReady",s.holdRead
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 65 3f 66 5b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 2c 22 74 79 70 65 22 2c 22 6a 51 75 65 72 79 2e 74 79 70 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 46 75 6e 63 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 22 69 73 46 75 6e 63 74 69 6f 6e 22 2c 22 6a 51 75 65 72 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 57 69 6e 64 6f 77 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 Data Ascii: ==typeof e?f[Object.prototype.toString.call(e)]\|\|"object":typeof e},"type","jQuery.type is deprecated"),c(s,"isFunction",function(e){return"function"==typeof e},"isFunction","jQuery.isFunction() is deprecated"),c(s,"isWindow",function(e){return null!=e&&e
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 29 7d 2c 22 72 65 6d 6f 76 65 41 74 74 72 2d 62 6f 6f 6c 22 29 2c 69 28 73 2e 66 6e 2c 22 74 6f 67 67 6c 65 43 6c 61 73 73 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 62 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 75 28 22 74 6f 67 67 6c 65 43 6c 61 73 73 2d 62 6f 6f 6c 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 20 62 6f 6f 6c 65 61 6e 20 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 Data Ascii: ments)},"removeAttr-bool"),i(s.fn,"toggleClass",function(t){return void 0!==t&&"boolean"!=typeof t?b.apply(this,arguments):(u("toggleClass-bool","jQuery.fn.toggleClass( boolean ) is deprecated"),this.each(function(){var e=this.getAttribute&&this.getAttrib
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 74 61 72 74 3a 21 30 2c 6c 69 6e 65 48 65 69 67 68 74 3a 21 30 2c 6f 70 61 63 69 74 79 3a 21 30 2c 6f 72 64 65 72 3a 21 30 2c 6f 72 70 68 61 6e 73 3a 21 30 2c 77 69 64 6f 77 73 3a 21 30 2c 7a 49 6e 64 65 78 3a 21 30 2c 7a 6f 6f 6d 3a 21 30 7d 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 78 79 3f 73 2e 63 73 73 4e 75 6d 62 65 72 3d 6e 65 77 20 50 72 6f 78 79 28 41 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 22 6a 51 75 65 72 79 2e 63 73 73 4e 75 6d 62 65 72 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 52 65 66 6c 65 63 74 2e 67 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: tart:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,widows:!0,zIndex:!0,zoom:!0},"undefined"!=typeof Proxy?s.cssNumber=new Proxy(A,{get:function(){return u("css-number","jQuery.cssNumber is deprecated"),Reflect.get.apply(this,arguments)},set:function(){r
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 5b 74 68 69 73 2e 65 61 73 69 6e 67 5d 2e 6c 65 6e 67 74 68 26 26 28 75 28 22 65 61 73 69 6e 67 2d 6f 6e 65 2d 61 72 67 22 2c 22 27 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 22 2b 74 68 69 73 2e 65 61 73 69 6e 67 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 27 20 73 68 6f 75 6c 64 20 75 73 65 20 6f 6e 6c 79 20 6f 6e 65 20 61 72 67 75 6d 65 6e 74 22 29 2c 73 2e 65 61 73 69 6e 67 5b 74 68 69 73 2e 65 61 73 69 6e 67 5d 3d 48 29 2c 6b 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 65 61 73 69 6e 67 2d 6f 6e 65 2d 61 72 67 22 29 2c 53 3d 73 2e 66 78 2e 69 6e 74 65 72 76 61 6c 2c 50 3d 22 6a 51 75 65 72 79 2e 66 78 2e 69 6e 74 65 72 76 61 6c 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 2c 6e 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f Data Ascii: [this.easing].length&&(u("easing-one-arg","'jQuery.easing."+this.easing.toString()+"' should use only one argument"),s.easing[this.easing]=H),k.apply(this,arguments)},"easing-one-arg"),S=s.fx.interval,P="jQuery.fx.interval is deprecated",n.requestAnimatio
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 65 76 65 6e 74 22 29 2c 73 2e 65 61 63 68 28 5b 22 6c 6f 61 64 22 2c 22 75 6e 6c 6f 61 64 22 2c 22 65 72 72 6f 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 73 2e 66 6e 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 3b 72 65 74 75 72 6e 22 6c 6f 61 64 22 3d 3d 3d 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 5b 30 5d 3f 4d 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 3a 28 75 28 22 73 68 6f 72 74 68 61 6e 64 2d 72 65 6d 6f 76 65 64 2d 76 33 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 22 2b 74 2b 22 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 65 2e 73 70 6c 69 63 65 28 30 2c 30 2c 74 29 2c 61 Data Ascii: event"),s.each(["load","unload","error"],function(e,t){i(s.fn,t,function(){var e=Array.prototype.slice.call(arguments,0);return"load"===t&&"string"==typeof e[0]?M.apply(this,e):(u("shorthand-removed-v3","jQuery.fn."+t+"() is deprecated"),e.splice(0,0,t),a
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 6e 2e 75 6e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2e 66 6e 2c 22 68 6f 76 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 65 29 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 74 7c 7c 65 29 7d 2c 22 70 72 65 2d 6f 6e 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 68 6f 76 65 72 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 74 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 3b 72 65 74 75 72 6e 20 74 2e 62 6f 64 79 2e 69 6e 6e 65 72 48 Data Ascii: n.undelegate() is deprecated"),c(s.fn,"hover",function(e,t){return this.on("mouseenter",e).on("mouseleave",t\|\|e)},"pre-on-methods","jQuery.fn.hover() is deprecated");function T(e){var t=n.document.implementation.createHTMLDocument("");return t.body.innerH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.22	49183	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	559	OUT	GET /wp-content/themes/mts_schema/js/customscript.js HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:04 UTC	1000	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-211b" x-cache-groups: assets x-request-id: 9cfa8564cb4dd8e3f13cd6d17d2bcf1e x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 1118754 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=px8wFtokvYfZ%2F04LSUQmzrDoiQmzxZ1cVyDvzXtHl%2Fj1GtFk7S8x%2BeFv4A%2F4csNr5tZVcU4%2B6coc69VHQLs7uRNcn6Vqh4%2ByaIAYM6E1hu92JupUqIKzjlCfJa403pd%2FinEH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d37ee321c7-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:04 UTC	369	IN	Data Raw: 32 31 31 62 0d 0a 6a 51 75 65 72 79 2e 66 6e 2e 65 78 69 73 74 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 76 61 72 20 61 72 67 73 20 3d 20 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 20 31 29 3b 0a 20 20 69 66 20 28 74 68 69 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 74 68 69 73 2c 20 61 72 67 73 29 3b 0a 20 20 7d 0a 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 7d 3b 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2a 20 53 68 6f 77 2f 68 69 64 65 20 53 63 72 6f 6c 6c 20 74 6f 20 74 6f 70 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: 211bjQuery.fn.exists = function(callback) { var args = [].slice.call(arguments, 1); if (this.length) { callback.call(this, args); } return this;};/----------------------------------------------------/ Show/hide Scroll to top/*--------
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 64 79 22 29 2e 70 72 65 70 65 6e 64 28 22 3c 61 20 69 64 3d 27 6d 6f 76 65 2d 74 6f 2d 74 6f 70 27 20 63 6c 61 73 73 3d 27 61 6e 69 6d 61 74 65 20 27 20 68 72 65 66 3d 27 23 62 6c 6f 67 27 3e 3c 69 20 63 6c 61 73 73 3d 27 66 61 20 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 75 70 27 3e 3c 2f 69 3e 3c 2f 61 3e 22 29 3b 0a 0a 09 76 61 72 20 73 63 72 6f 6c 6c 44 65 73 20 3d 20 27 68 74 6d 6c 2c 62 6f 64 79 27 3b 0a 09 2f 2a 4f 70 65 72 61 20 64 6f 65 73 20 61 20 73 74 72 61 6e 67 65 20 74 68 69 6e 67 20 69 66 20 77 65 20 75 73 65 20 27 68 74 6d 6c 27 20 61 6e 64 20 27 62 6f 64 79 27 20 74 6f 67 65 74 68 65 72 20 73 6f 20 6d 79 20 73 6f 6c 75 74 69 6f 6e 20 69 73 20 74 6f 20 64 6f 20 74 68 65 20 55 41 20 73 6e 69 66 66 69 6e 67 20 74 68 69 6e 67 2a 2f 0a Data Ascii: dy").prepend("<a id='move-to-top' class='animate ' href='#blog'><i class='fa fa-angle-double-up'></i></a>");var scrollDes = 'html,body';/Opera does a strange thing if we use 'html' and 'body' together so my solution is to do the UA sniffing thing/
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 62 69 6c 65 2d 6d 65 6e 75 2d 61 63 74 69 76 65 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 6f 6c 6c 54 6f 70 3a 20 73 63 72 6f 6c 6c 5f 74 6f 0a 20 20 20 20 20 20 7d 2c 20 36 30 30 2c 20 27 73 77 69 6e 67 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 69 66 20 28 73 63 72 6f 6c 6c 5f 74 6f 20 3e 20 34 36 29 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 20 69 64 3b 20 7d 20 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 3b 0a 20 20 2f 2f 20 62 69 6e 64 20 74 6f 20 63 6c 69 63 6b 20 65 76 65 6e 74 0a 20 20 24 28 22 61 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 7b 0a 20 20 20 20 2f 2f 20 6f 6e 6c 79 20 64 6f 20 74 68 69 73 20 69 66 20 69 74 27 73 20 61 6e 20 61 Data Ascii: bile-menu-active').animate({ scrollTop: scroll_to }, 600, 'swing', function() { if (scroll_to > 46) window.location.hash = id; } ); } }; // bind to click event $("a").click(function( event ) { // only do this if it's an a
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 0a 0a 20 20 20 20 20 20 20 20 24 28 27 2e 74 6f 67 67 6c 65 2d 6d 6f 62 69 6c 65 2d 6d 65 6e 75 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 62 6f 64 79 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 6d 6f 62 69 6c 65 2d 6d 65 6e 75 2d 61 63 74 69 76 65 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 24 28 27 62 6f 64 79 27 29 2e 68 61 73 43 6c 61 73 73 28 27 6d 6f 62 69 6c 65 2d 6d 65 6e 75 2d 61 63 74 69 76 65 27 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: $('.toggle-mobile-menu').click(function(e) { e.preventDefault(); e.stopPropagation(); $('body').toggleClass('mobile-menu-active'); if ( $('body').hasClass('mobile-menu-active') ) {
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 76 61 72 20 24 70 75 6c 6c 54 6f 67 67 6c 65 20 3d 20 24 28 27 23 70 75 6c 6c 27 29 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6d 74 73 44 72 6f 70 64 6f 77 6e 4d 65 6e 75 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 28 21 24 70 75 6c 6c 54 6f 67 67 6c 65 2e 69 73 28 27 3a 76 69 73 69 62 6c 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 2e 73 75 62 2d 6d 65 6e 75 2c 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 2e 63 68 69 6c 64 72 65 6e 27 29 2e 68 69 64 65 28 29 3b Data Ascii: -------------------------------- */jQuery(document).ready(function($) { var $pullToggle = $('#pull'); function mtsDropdownMenu() { if(!$pullToggle.is(':visible')) { $('.navigation ul.sub-menu, .navigation ul.children').hide();
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 74 6f 67 67 6c 65 2d 6d 65 6e 75 20 75 6c 2e 73 75 62 2d 6d 65 6e 75 27 29 2e 70 61 72 65 6e 74 28 29 2e 61 64 64 43 6c 61 73 73 28 27 74 6f 67 67 6c 65 2d 6d 65 6e 75 2d 69 74 65 6d 2d 70 61 72 65 6e 74 27 29 3b 0a 0a 20 20 20 20 24 28 27 2e 74 6f 67 67 6c 65 2d 6d 65 6e 75 20 2e 74 6f 67 67 6c 65 2d 6d 65 6e 75 2d 69 74 65 6d 2d 70 61 72 65 6e 74 27 29 2e 61 70 70 65 6e 64 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 6f 67 67 6c 65 2d 63 61 72 65 74 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 70 6c 75 73 22 3e 3c 2f 69 3e 3c 2f 73 70 61 6e 3e 27 29 3b 0a 0a 20 20 20 20 24 28 27 2e 74 6f 67 67 6c 65 2d 63 61 72 65 74 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 Data Ascii: toggle-menu ul.sub-menu').parent().addClass('toggle-menu-item-parent'); $('.toggle-menu .toggle-menu-item-parent').append('<span class="toggle-caret"><i class="fa fa-plus"></i></span>'); $('.toggle-caret').click(function(e) { e.preventDe
2023-12-12 20:38:04 UTC	1269	IN	Data Raw: 27 2c 20 27 70 69 6e 74 65 72 65 73 74 6a 73 27 29 3b 0a 09 7d 29 3b 0a 09 6a 51 75 65 72 79 28 27 73 70 61 6e 2e 73 74 75 6d 62 6c 65 62 74 6e 27 29 2e 65 78 69 73 74 73 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 20 20 6c 6f 61 64 28 27 2f 2f 70 6c 61 74 66 6f 72 6d 2e 73 74 75 6d 62 6c 65 75 70 6f 6e 2e 63 6f 6d 2f 31 2f 77 69 64 67 65 74 73 2e 6a 73 27 2c 20 27 73 74 75 6d 62 6c 65 75 70 6f 6e 6a 73 27 29 3b 0a 09 7d 29 3b 0a 09 7d 28 64 6f 63 75 6d 65 6e 74 2c 20 27 73 63 72 69 70 74 27 29 29 3b 0a 7d 29 3b 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2a 20 4c 61 7a 79 20 6c 6f 61 64 20 61 76 61 74 61 72 73 0a 2f 2a 2d 2d Data Ascii: ', 'pinterestjs');});jQuery('span.stumblebtn').exists(function() { load('//platform.stumbleupon.com/1/widgets.js', 'stumbleuponjs');});}(document, 'script'));});/----------------------------------------------------/ Lazy load avatars/*--
2023-12-12 20:38:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.22	49185	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	571	OUT	GET /wp-content/plugins/wp-review-pro/assets/js/jquery.appear.js HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:04 UTC	996	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-a9d" x-cache-groups: assets x-request-id: 5c0a824c5d3e610cd1cf0d0c59273db6 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 704647 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dcD8fgvxecN9bIHt%2B0l75tguPAPsqeWsisaZckqepmJiijAuhAm%2BshXCnrcCNaOCjBLwSaedvq1eQ%2FJSzm6dvZEWXJT%2BKLPMb2MPm1nWbfQ9%2FQqP8fsANsTRL5F6eSKM6%2BE5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d3fda3749e-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:04 UTC	373	IN	Data Raw: 61 39 64 0d 0a 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 61 70 70 65 61 72 20 70 6c 75 67 69 6e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 41 6e 64 72 65 79 20 53 69 64 6f 72 6f 76 0a 20 2a 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 6f 72 72 2f 6a 71 75 65 72 79 2e 61 70 70 65 61 72 2f 0a 20 2a 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 30 2e 33 2e 36 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 76 61 72 20 73 65 6c 65 63 74 6f 72 73 20 3d 20 5b 5d 3b 0a 0a 20 20 76 61 72 20 63 68 65 63 6b 5f 62 69 6e 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 20 20 76 61 72 20 63 68 65 63 6b 5f 6c 6f 63 6b Data Ascii: a9d/* * jQuery appear plugin * * Copyright (c) 2012 Andrey Sidorov * licensed under MIT license. * * https://github.com/morr/jquery.appear/ * * Version: 0.3.6 */(function($) { var selectors = []; var check_binded = false; var check_lock
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 5f 61 70 70 65 61 72 65 64 20 3d 20 5b 5d 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 28 29 20 7b 0a 20 20 20 20 63 68 65 63 6b 5f 6c 6f 63 6b 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 6e 64 65 78 20 3d 20 30 2c 20 73 65 6c 65 63 74 6f 72 73 4c 65 6e 67 74 68 20 3d 20 73 65 6c 65 63 74 6f 72 73 2e 6c 65 6e 67 74 68 3b 20 69 6e 64 65 78 20 3c 20 73 65 6c 65 63 74 6f 72 73 4c 65 6e 67 74 68 3b 20 69 6e 64 65 78 2b 2b 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 24 61 70 70 65 61 72 65 64 20 3d 20 24 28 73 65 6c 65 63 74 6f 72 73 5b 69 6e 64 65 78 5d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 24 28 74 68 69 73 29 2e 69 73 28 27 3a 61 70 70 65 61 Data Ascii: _appeared = []; function process() { check_lock = false; for (var index = 0, selectorsLength = selectors.length; index < selectorsLength; index++) { var $appeared = $(selectors[index]).filter(function() { return $(this).is(':appea
2023-12-12 20:38:04 UTC	982	IN	Data Raw: 20 2f 2f 20 77 61 74 63 68 69 6e 67 20 66 6f 72 20 65 6c 65 6d 65 6e 74 27 73 20 61 70 70 65 61 72 61 6e 63 65 20 69 6e 20 62 72 6f 77 73 65 72 20 76 69 65 77 70 6f 72 74 0a 20 20 20 20 77 70 72 5f 61 70 70 65 61 72 3a 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6f 70 74 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 64 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 20 7c 7c 20 7b 7d 29 3b 0a 20 20 20 20 20 20 76 61 72 20 73 65 6c 65 63 74 6f 72 20 3d 20 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 20 7c 7c 20 74 68 69 73 3b 0a 20 20 20 20 20 20 69 66 20 28 21 63 68 65 63 6b 5f 62 69 6e 64 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 6e 5f 63 68 65 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 Data Ascii: // watching for element's appearance in browser viewport wpr_appear: function(options) { var opts = $.extend({}, defaults, options \|\| {}); var selector = this.selector \|\| this; if (!check_binded) { var on_check = function()
2023-12-12 20:38:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.22	49187	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	562	OUT	GET /wp-content/plugins/wp-review-pro/assets/js/main.js HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:04 UTC	995	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-11d7" x-cache-groups: assets x-request-id: b18c0f4317619e3b1b9fe5215b4a2818 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 159614 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u5pVlImeFoxNL9Hq1iiPbcOMIKQ4dmja%2B2DhXMR3YWb3NTody%2BREw9Q%2FMu2glQe4O%2B2rrsLdqETZELbkuJcBhoAW7CHcDNVFmI56%2Bkj86UnpuP4n0TtaLtZtQeio4CuQYmFJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d428480a1e-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:04 UTC	374	IN	Data Raw: 31 31 64 37 0d 0a 2f 2a 0a 2a 20 50 6c 75 67 69 6e 20 4e 61 6d 65 3a 20 57 50 20 52 65 76 69 65 77 20 50 72 6f 0a 2a 20 50 6c 75 67 69 6e 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 6d 79 74 68 65 6d 65 73 68 6f 70 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 77 70 2d 72 65 76 69 65 77 2d 70 72 6f 2f 0a 2a 20 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 43 72 65 61 74 65 20 72 65 76 69 65 77 73 21 20 43 68 6f 6f 73 65 20 66 72 6f 6d 20 53 74 61 72 73 2c 20 50 65 72 63 65 6e 74 61 67 65 73 2c 20 43 69 72 63 6c 65 73 20 6f 72 20 50 6f 69 6e 74 73 20 66 6f 72 20 72 65 76 69 65 77 20 73 63 6f 72 65 73 2e 20 53 75 70 70 6f 72 74 73 20 52 65 74 69 6e 61 20 44 69 73 70 6c 61 79 2c 20 57 50 4d 55 20 26 20 55 6e 6c 69 6d 69 74 65 64 20 43 6f 6c 6f 72 20 53 63 68 65 6d 65 73 2e 0a Data Ascii: 11d7/** Plugin Name: WP Review Pro* Plugin URI: http://mythemeshop.com/plugins/wp-review-pro/* Description: Create reviews! Choose from Stars, Percentages, Circles or Points for review scores. Supports Retina Display, WPMU & Unlimited Color Schemes.
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 6f 6d 6d 65 6e 74 2d 66 69 65 6c 64 2e 61 6c 6c 6f 77 65 64 2d 74 6f 2d 72 61 74 65 20 61 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 76 61 72 20 24 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 2c 0a 09 09 09 24 65 6c 65 6d 20 3d 20 24 74 68 69 73 2e 63 6c 6f 73 65 73 74 28 27 2e 77 70 2d 72 65 76 69 65 77 2d 63 6f 6d 6d 65 6e 74 2d 66 69 65 6c 64 27 29 3b 0a 09 09 69 66 20 28 24 65 6c 65 6d 2e 68 61 73 43 6c 61 73 73 28 27 61 6c 6c 6f 77 65 64 2d 74 6f 2d 72 61 74 65 27 29 29 20 7b 0a 09 09 09 24 65 6c 65 6d 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 61 73 2d 6e 6f 74 2d 72 61 74 65 64 2d 79 65 74 27 29 3b 0a 09 09 09 24 65 6c 65 6d 2e 66 69 6e 64 28 27 2e 72 65 76 69 65 77 2d 72 65 73 75 6c 74 27 29 2e 63 73 Data Ascii: omment-field.allowed-to-rate a').on('click', function() {var $this = $(this),$elem = $this.closest('.wp-review-comment-field');if ($elem.hasClass('allowed-to-rate')) {$elem.removeClass('has-not-rated-yet');$elem.find('.review-result').cs
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 20 20 7d 29 2e 6f 6e 28 27 77 70 72 5f 64 69 73 61 70 70 65 61 72 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0a 09 20 20 20 20 20 20 09 76 61 72 20 24 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 3b 0a 09 20 20 20 20 09 2f 2f 24 74 68 69 73 2e 61 64 64 43 6c 61 73 73 28 27 64 65 6c 61 79 2d 61 6e 69 6d 61 74 69 6f 6e 27 29 3b 20 2f 2f 20 72 65 77 69 6e 64 20 61 6e 69 6d 61 74 69 6f 6e 0a 09 20 20 20 20 7d 29 3b 0a 09 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 20 20 20 20 09 24 2e 77 70 72 5f 66 6f 72 63 65 5f 61 70 70 65 61 72 28 29 3b 20 2f 2f 20 69 66 20 69 74 27 73 20 72 69 67 68 74 20 74 68 65 72 65 20 6f 6e 20 77 69 6e 64 6f 77 2e 6c 6f 61 64 0a 09 20 20 20 20 7d 29 3b 0a 09 20 20 Data Ascii: }).on('wpr_disappear', function(event) { var $this = $(this); //$this.addClass('delay-animation'); // rewind animation }); $(window).load(function() { $.wpr_force_appear(); // if it's right there on window.load });
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 69 73 5f 63 6f 6d 6d 65 6e 74 5f 72 61 74 69 6e 67 20 3d 20 28 24 65 6c 65 6d 2e 69 73 28 27 2e 77 70 2d 72 65 76 69 65 77 2d 63 6f 6d 6d 65 6e 74 2d 72 61 74 69 6e 67 2d 73 74 61 72 27 29 20 7c 7c 20 21 21 24 65 6c 65 6d 2e 63 6c 6f 73 65 73 74 28 27 2e 77 70 2d 72 65 76 69 65 77 2d 63 6f 6d 6d 65 6e 74 2d 72 61 74 69 6e 67 2d 73 74 61 72 27 29 2e 6c 65 6e 67 74 68 29 3b 0a 09 69 66 20 28 20 69 73 5f 63 6f 6d 6d 65 6e 74 5f 72 61 74 69 6e 67 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 27 27 3b 20 2f 2f 20 64 6f 6e 27 74 20 64 6f 20 61 6e 79 74 68 69 6e 67 20 69 66 20 69 74 27 73 20 61 20 63 6f 6d 6d 65 6e 74 20 72 61 74 69 6e 67 20 65 6c 65 6d 65 6e 74 0a 09 7d 0a 09 76 61 72 20 72 61 74 69 6e 67 20 3d 20 24 65 6c 65 6d 2e 66 69 6e 64 28 27 2e 77 70 2d 72 Data Ascii: is_comment_rating = ($elem.is('.wp-review-comment-rating-star') \|\| !!$elem.closest('.wp-review-comment-rating-star').length);if ( is_comment_rating ) {return ''; // don't do anything if it's a comment rating element}var rating = $elem.find('.wp-r
2023-12-12 20:38:04 UTC	94	IN	Data Raw: 29 2e 66 69 6e 64 28 27 2e 77 70 2d 72 65 76 69 65 77 2d 75 73 65 72 2d 72 61 74 69 6e 67 2d 63 6f 75 6e 74 65 72 27 29 2e 74 65 78 74 28 72 65 73 70 6f 6e 73 65 2e 72 61 74 69 6e 67 5f 63 6f 75 6e 74 29 3b 09 09 09 09 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 29 3b 0a 0a 09 0a 7d 0d 0a Data Ascii: ).find('.wp-review-user-rating-counter').text(response.rating_count);}}});}
2023-12-12 20:38:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.22	49188	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:03 UTC	573	OUT	GET /wp-content/plugins/wp-review-pro/assets/js/jquery.knob.min.js HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:04 UTC	1001	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-6674" x-cache-groups: assets x-request-id: 473bef3138f1ff266a2ac8b5667e706b x-presslabs-cache: REVALIDATED expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 146211 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1mfD2VBaWTrXpAievxx1l7567LxjjozsGNsU%2BI%2FKlRODA29%2BAsJW2vNIPFr8gDtawNzpWgGKNehbxvSKaVRFJXS4sPg%2BBXK4cKJhs8fV1TYOos9X2NSTPbQLgf2OZGF9fSnz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d439664bfc-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:04 UTC	368	IN	Data Raw: 36 36 37 34 0d 0a 2f 2a 21 6a 51 75 65 72 79 20 4b 6e 6f 62 2a 2f 0a 2f 2a 2a 0a 20 2a 20 44 6f 77 6e 77 61 72 64 20 63 6f 6d 70 61 74 69 62 6c 65 2c 20 74 6f 75 63 68 61 62 6c 65 20 64 69 61 6c 0a 20 2a 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 31 2e 32 2e 31 32 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 20 6a 51 75 65 72 79 20 76 31 2e 37 2b 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 41 6e 74 68 6f 6e 79 20 54 65 72 72 69 65 6e 0a 20 2a 20 55 6e 64 65 72 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 29 0a 20 2a 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 20 76 6f 72 2c 20 65 73 6b 69 6d Data Ascii: 6674/!jQuery Knob//** * Downward compatible, touchable dial * * Version: 1.2.12 * Requires: jQuery v1.7+ * * Copyright (c) 2012 Anthony Terrien * Under MIT License (http://www.opensource.org/licenses/mit-license.php) * * Thanks to vor, eskim
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 53 0a 20 20 20 20 20 20 20 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 72 65 71 75 69 72 65 28 27 6a 71 75 65 72 79 27 29 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 41 4d 44 2e 20 52 65 67 69 73 74 65 72 20 61 73 20 61 6e 20 61 6e 6f 6e 79 6d 6f 75 73 20 6d 6f 64 75 6c 65 2e 0a 20 20 20 20 20 20 20 20 64 65 66 69 6e 65 28 5b 27 6a 71 75 65 72 79 27 5d 2c 20 66 61 63 74 6f 72 79 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 42 72 6f 77 73 65 72 20 67 6c 6f 62 61 6c 73 0a 20 20 20 20 20 20 20 20 66 61 63 74 6f Data Ascii: S module.exports = factory(require('jquery')); } else if (typeof define === 'function' && define.amd) { // AMD. Register as an anonymous module. define(['jquery'], factory); } else { // Browser globals facto
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 63 20 3d 20 6e 75 6c 6c 3b 20 2f 2f 20 6a 51 75 65 72 79 20 63 61 6e 76 61 73 20 65 6c 65 6d 65 6e 74 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 20 3d 20 6e 75 6c 6c 3b 20 2f 2f 20 72 65 6e 64 65 72 65 64 20 63 61 6e 76 61 73 20 63 6f 6e 74 65 78 74 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 20 3d 20 30 3b 20 2f 2f 20 74 6f 75 63 68 65 73 20 69 6e 64 65 78 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 73 49 6e 69 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 66 67 43 6f 6c 6f 72 20 3d 20 6e 75 6c 6c 3b 20 2f 2f 20 6d 61 69 6e 20 63 6f 6c 6f 72 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 43 6f 6c 6f 72 20 3d 20 6e 75 6c 6c 3b 20 2f 2f 20 70 72 65 76 69 6f 75 73 20 63 6f 6c 6f 72 0a Data Ascii: this.$c = null; // jQuery canvas element this.c = null; // rendered canvas context this.t = 0; // touches index this.isInit = false; this.fgColor = null; // main color this.pColor = null; // previous color
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 20 27 72 65 61 64 6f 6e 6c 79 27 29 2c 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 55 49 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 74 68 69 73 2e 24 2e 64 61 74 61 28 27 63 75 72 73 6f 72 27 29 20 3d 3d 3d 20 74 72 75 65 20 26 26 20 33 30 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 7c 20 74 68 69 73 2e 24 2e 64 61 74 61 28 27 63 75 72 73 6f 72 27 29 20 7c 7c 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 63 6b 6e 65 73 73 3a 20 74 68 69 73 2e 24 2e 64 61 74 61 28 27 74 68 69 63 6b 6e 65 73 73 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 26 20 Data Ascii: 'readonly'), // UI cursor: this.$.data('cursor') === true && 30 \|\| this.$.data('cursor') \|\| 0, thickness: this.$.data('thickness') &&
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 20 66 6f 72 6d 61 74 74 69 6e 67 2c 20 61 6c 6c 6f 77 73 20 74 6f 20 61 64 64 20 75 6e 69 74 3a 20 25 2c 20 6d 73 20 2e 2e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 61 74 3a 20 66 75 6e 63 74 69 6f 6e 28 76 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 73 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 76 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 76 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 Data Ascii: formatting, allows to add unit: %, ms ... format: function(v) { return v; }, parse: function (v) { return parseFloat(v); }
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 69 73 2e 76 20 3d 20 74 68 69 73 2e 6f 2e 70 61 72 73 65 28 74 68 69 73 2e 24 2e 76 61 6c 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 20 3d 3d 3d 20 27 27 20 26 26 20 28 74 68 69 73 2e 76 20 3d 20 74 68 69 73 2e 6f 2e 6d 69 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 2e 62 69 6e 64 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 63 68 61 6e 67 65 20 62 6c 75 72 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 2e 76 61 6c 28 73 2e 5f 76 61 6c 69 64 61 74 65 28 73 2e 6f 2e 70 61 72 73 65 28 73 2e 24 2e 76 61 6c 28 29 29 29 29 3b 0a Data Ascii: is.v = this.o.parse(this.$.val()); this.v === '' && (this.v = this.o.min); this.$.bind( 'change blur', function () { s.val(s._validate(s.o.parse(s.$.val())));
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 64 2e 20 50 6c 65 61 73 65 20 75 73 65 20 65 78 63 61 6e 76 61 73 20 6f 6e 20 49 45 38 2e 30 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 53 74 72 69 6e 67 3a 20 20 20 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 61 6d 65 20 2b 20 22 3a 20 22 20 2b 20 74 68 69 73 2e 6d 65 73 73 61 67 65 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 68 64 70 69 20 73 75 70 70 6f 72 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 63 61 6c 65 20 3d 20 28 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 20 7c 7c 20 31 29 20 2f 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: d. Please use excanvas on IE8.0.", toString: function(){return this.name + ": " + this.message} } } // hdpi support this.scale = (window.devicePixelRatio \|\| 1) / (
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 2e 70 61 72 65 6e 74 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 62 69 6e 64 28 22 63 6f 6e 66 69 67 75 72 65 22 2c 20 63 66 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 66 69 6e 61 6c 69 7a 65 20 69 6e 69 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 6c 69 73 74 65 6e 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 5f 63 6f 6e 66 69 67 75 72 65 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 5f 78 79 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 69 6e 69 74 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 73 49 6e 69 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 2e 76 61 6c 28 74 68 69 73 Data Ascii: .parent() .bind("configure", cf); // finalize init this._listen() ._configure() ._xy() .init(); this.isInit = true; this.$.val(this
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 28 74 68 69 73 2e 73 63 61 6c 65 20 21 3d 3d 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 63 5b 30 5d 2e 77 69 64 74 68 20 3d 20 74 68 69 73 2e 24 63 5b 30 5d 2e 77 69 64 74 68 20 2a 20 74 68 69 73 2e 73 63 61 6c 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 63 5b 30 5d 2e 68 65 69 67 68 74 20 3d 20 74 68 69 73 2e 24 63 5b 30 5d 2e 68 65 69 67 68 74 20 2a 20 74 68 69 73 2e 73 63 61 6c 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 63 2e 77 69 64 74 68 28 74 68 69 73 2e 77 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 63 2e 68 65 69 67 68 74 28 74 68 69 73 2e 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 Data Ascii: (this.scale !== 1) { this.$c[0].width = this.$c[0].width * this.scale; this.$c[0].height = this.$c[0].height * this.scale; this.$c.width(this.w); this.$c.height(this.h); }
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 73 2e 76 61 6c 28 73 2e 63 76 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 6d 6f 75 73 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 6f 75 73 65 4d 6f 76 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 20 3d 20 73 2e 78 79 32 76 61 6c 28 65 2e 70 61 67 65 58 2c 20 65 2e 70 61 67 65 59 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 76 20 3d 3d 20 73 2e 63 76 29 Data Ascii: s.val(s.cv); } ); return this; }; this._mouse = function (e) { var mouseMove = function (e) { var v = s.xy2val(e.pageX, e.pageY); if (v == s.cv)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.22	49189	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:04 UTC	584	OUT	GET /favicon.ico HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:04 UTC	920	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-47e" x-request-id: fbd09b82c36b3963b320b1e6646efbc0 vary: Accept-Encoding x-presslabs-stats: HIT; desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7bq%2BcTdB%2FvPXi25kqfM076HjRCpOZvi6%2FsqRIvTiPwIoT9fCQSPNor7mgtlOjodiQ4M1ZjY4V9Uy0Wa28pSqFIn2%2FtFC65wZbMP9uF3iqyQGuickKv7TjSZIECyWgD4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d49f27749e-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:04 UTC	449	IN	Data Raw: 34 37 65 0d 0a 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 47e h(
2023-12-12 20:38:04 UTC	708	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff 20 20 20 ff a7 a7 a7 ff ff ff ff ff 3d 3d 3d ff 7c 7c 7c ff 81 81 81 ff 58 58 58 ff ff ff ff ff b2 b2 b2 ff 09 09 09 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 30 30 ff 9b 9b 9b ff e5 e5 e5 ff 02 02 02 ff ca ca ca ff d6 d6 d6 ff 09 09 09 ff f1 f1 f1 ff a6 a6 a6 ff 1a 1a 1a ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 42 42 42 ff 8d 8d 8d ff 92 92 92 ff 22 22 22 ff fd fd fd ff ff ff ff ff 30 30 30 ff 9f 9f 9f ff 9b 9b 9b ff 28 28 28 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 56 56 56 ff 7f 7f 7f ff 40 40 40 ff 7a 7a 7a ff ff ff ff ff ff ff ff ff 8f 8f 8f ff 47 47 47 ff 90 90 90 ff 37 37 37 ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ===\|\|\|XXX000BBB"""000(((VVV@@@zzzGGG777
2023-12-12 20:38:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.22	49190	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:04 UTC	357	OUT	GET /images/math-books.png HTTP/1.1 Host: mathblog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:04 UTC	973	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-5b57" x-cache-groups: assets x-request-id: 0a27506d5aea07cd8e1302d428acde4e x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 1130855 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z3U1JdfxmrU7JcxV35XAf7GjKROd0UZw6kMYM644jKprPVoeRSRHc9daBrJQz3bzpu2WfDUZCBPYx1R5DX56bZ5E99xHBQ%2F4IvDAsiZz1CWzE1Y2Br1551yjXyFNDmE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d5becc0a06-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:04 UTC	396	IN	Data Raw: 35 62 35 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 ee 08 03 00 00 00 27 75 ea 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 80 50 4c 54 45 34 36 37 6c 6e 6f f0 e5 cf da e6 eb ad 8d 69 e8 e9 e7 fb fb fb 26 25 26 91 8e 8c dc c9 a6 e6 d4 b2 e0 df dc f4 df 74 0b 08 07 6e 90 a5 ce b4 8c ba b4 aa 92 75 6d ee f3 f6 b6 ae a7 eb de c9 44 46 47 5b 65 6b 4f 34 30 c6 da dc 69 47 38 c5 a1 75 f7 f7 fb eb ee f0 90 67 57 74 50 45 89 58 49 a4 99 90 bd d5 d6 55 56 58 f1 de 86 6c 33 2d c3 bc b1 ae a4 9a 6e 23 17 3c 42 44 1f 18 16 f7 fb fb 85 b0 cb fb fb f7 ba b7 b5 f4 f3 ee 9a ce ec d9 c3 98 c7 c7 c5 f7 e4 85 67 78 82 29 20 1b a9 a8 a5 54 5b 61 4c 52 56 d4 de e3 Data Ascii: 5b57PNGIHDR'utEXtSoftwareAdobe ImageReadyqe<PLTE467lnoi&%&tnumDFG[ekO40iG8ugWtPEXIUVXl3-n#<BDgx) T[aLRV
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: a6 b1 ad 23 1e 1f 5b 5f 5d a3 a0 9f b7 b0 b0 da d1 d5 4f 4d 50 4d 4e 4b 40 3f 37 ce c1 bd 1a 1a 1a 1d 1e 1a f3 f3 f3 27 2d 2a f7 f7 f7 f3 f3 f7 f7 f7 f3 f7 f3 f3 f3 f7 f9 f7 f3 f7 f3 f7 f3 f0 ef f2 f9 f9 f9 f8 f8 f8 34 77 13 0f 00 00 59 6d 49 44 41 54 78 da ac 7d 8b 43 1a 47 f7 f6 6e a2 2e 6a 50 d0 2c d6 3b a5 a0 10 a3 d1 82 a0 d5 92 b0 c5 ba 89 86 26 62 8c 86 90 0f 82 85 22 06 91 5b 8c bf 57 f8 d7 bf 73 ce cc ec 2e a8 89 be 7d 07 44 bc a4 f5 99 e7 9c e7 5c 66 76 47 aa 2f c1 03 06 bd b0 f1 ad de 39 be e1 f3 82 bd bf c0 37 17 e2 d1 b4 bc 65 5f 34 2f 2e e0 a3 8e 2f b7 3c f8 a7 9d 26 1b f0 0d f1 76 a7 dd 6e c2 03 5f 76 5a 6d 18 f0 d2 6c d1 27 fc a2 d5 a2 17 cb e7 7f 37 24 06 9a e3 c7 57 e3 4d 27 f8 0b 06 dc c4 5a ef c2 5e 47 d4 75 86 fa 82 41 67 4f eb 83 b0 Data Ascii: #[_]OMPMNK@?7'-*4wYmIDATx}CGn.jP,;&b"[Ws.}D\fvG/97e_4/./<&vn_vZml'7$WM'Z^GuAgO
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 6a 64 6e 54 ce 21 ee d2 1c e3 fa 06 f8 4c 1e 46 57 59 bc 40 99 a4 69 80 34 aa c4 b3 87 7a ab af d3 1e ac 3a 67 a5 bd dd f9 fd 7b 24 b2 e4 eb e4 e0 00 71 b8 67 f8 51 4f 0f 3c f1 63 f8 57 01 fe 60 aa 77 91 60 3b 38 7a 20 7e d1 56 0b 05 72 3e 77 31 10 00 f2 17 4f 02 81 8c c3 e1 4c 29 81 50 a8 e4 0e a8 30 29 32 fc d8 b6 77 22 cb b6 51 08 89 0e 6e f4 dd 93 40 aa 28 02 27 8f 9b 51 97 2c f7 3e 29 e5 6d 25 f0 8b 37 98 45 d5 9f 5a 26 a2 af db ae 6f 0f f5 df f5 f5 a5 a5 83 5f 39 f4 5f 7f 7d f4 2b a8 1a 7c 5a a6 44 c6 a0 fd e0 aa 77 d1 71 2a 1e ec b9 98 0b 64 d2 a9 53 2d 94 aa ba 1d 8e b9 42 3c 05 36 70 ea 4b 15 4b 73 0e 1b 4c c3 a8 c3 63 b7 f9 72 f6 80 dd 9e 5a 9c 4b 2a 36 f0 7c 87 2d 6a 23 b2 e7 0c d8 5d 13 b1 88 aa 88 df 5e f5 ed bb 73 79 9c 08 17 58 03 d8 83 ed Data Ascii: jdnT!LFWY@i4z:g{$qgQO<cW`w`;8z ~Vr>w1OL)P0)2w"Qn@('Q,>)m%7EZ&o_9_}+\|ZDwqdS-B<6pKKsLcrZK6\|-j#]^syX
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 05 7a f2 dc dc 9c a5 8e 37 f0 3b c8 14 28 9b 77 b8 9d 25 74 c6 d1 b8 ea b0 81 31 f8 80 e7 9c 6f 2e 09 3a 4f 06 31 97 50 00 d8 e2 2a a4 88 e8 30 99 80 5f 96 20 51 1a 95 94 d1 78 20 a7 16 e6 4e 47 33 81 aa 7c 23 e7 06 68 fe f9 14 d9 c6 af 6d 73 dc fc 1d e7 d7 fb f0 37 ac b7 7c eb ed 1d b4 8e 57 fc 03 e0 bf 59 86 e0 bb 97 4d 64 c7 e2 95 4a e5 6c 6f ef 24 1a 05 1d a5 69 80 89 80 27 9b 8c 12 9b 0a 87 31 7c 18 0f 44 7b c3 01 7f 12 cc 82 3b 9e 5f 9c cb 96 1d a3 3e 88 06 28 13 8a 9c 93 b3 6e 60 57 f6 95 94 42 a2 58 ac ca 3e 34 0b 77 51 4a 67 57 01 4f 2e 6d 77 41 de 80 a9 a4 05 f5 a9 41 3c a1 a6 1f 3a 4a 36 fc ca cd 7f e0 70 ac f4 b5 7e c4 ba 58 82 23 f6 e1 f9 60 90 e6 e1 c1 20 da 02 a1 ef 77 b8 73 d1 bd f8 58 3c 1e df 83 54 db 99 eb b1 91 fd cf a1 1f b8 c5 b0 e1 Data Ascii: z7;(w%t1o.:O1P*0_ Qx NG3\|#hms7\|WYMdJlo$i'1\|D{;_>(n`WBX>4wQJgWO.mwAA<:J6p~X#` wsX<T
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 77 91 37 2b 6c 1e de b4 ff a5 c1 87 63 15 1e dd d0 db d3 ba 16 9d 78 f4 08 9f 47 5a 92 79 3e 28 00 98 bb a6 46 24 ce fa f2 04 07 3f b7 cc 58 47 51 63 9c 33 e8 38 58 09 6b d3 6c 4d 81 e6 aa dd 64 0b f7 e6 72 63 9b 2f c3 e0 8e 9f ff 34 eb 4b dc 24 00 31 9f 8a 5d 7a 7b b5 bb 64 bc 5f 62 13 04 76 71 cd d5 ef 0b 3d 13 a3 c0 4e 26 0f 1e 2f cd 4e 60 13 63 62 e2 dd 51 8a e3 46 d2 01 7a cc 03 ac 8f 4d 3c 3e 18 58 1e 46 53 9f 98 9b 18 ee 47 d6 2b 5a c0 60 3b 50 65 f0 19 f2 aa 76 78 52 ba e0 c8 7b 77 db b4 f0 42 2b ed c6 82 4a b3 c5 77 8e 9a 6b 11 6c b1 96 ef e2 b8 a2 a9 b0 3c 44 32 be fb ed 3b cb 8d 3f ce ea d0 e0 c3 31 15 0c 5e c2 c0 8e ac c7 8f de 31 63 7e 77 14 27 e8 0d 44 0e 9e ee 8f 9d 48 08 7d e0 01 b0 3e 31 bc b9 89 f0 fb 91 75 cd 6f af 72 65 63 74 07 d8 27 Data Ascii: w7+lcxGZy>(F$?XGQc38XklMdrc/4K$1]z{d_bvq=N&/N`cbQFzM<>XFSG+Z`;PevxR{wB+Jwkl<D2;?1^1c~w'DH}>1uorect'
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: bc 93 ab c7 00 7a c5 2e 64 0e 15 1e a1 3f 26 e8 7e 04 51 c3 a4 06 32 1a 3b d2 4d 8e 0e 43 47 e8 ba 52 60 83 41 c7 11 60 2f 21 78 14 56 cb f0 3b 59 40 1d 80 c7 c6 8b 8d ed f9 ed b1 78 f4 03 24 ec cd f6 6d db e4 da ed 7f 9b cd 11 74 0f 87 8e c9 ac 94 f5 8e 43 16 8f a9 ec e6 96 57 22 e4 4c e5 38 eb e0 eb 0f a0 60 7f d7 83 be be 8c d0 13 f6 6c c5 e8 53 90 af 2b 94 c3 62 af aa d0 01 bd 58 20 dc 30 23 08 bb 06 c2 88 d2 a8 1c 2a c4 fa 0b 02 0f 06 3f 0f b4 8f 67 3e 5c d5 db cd 8e 1c af fd 3f 4d 64 5b af a2 68 f0 d8 a7 61 f9 1c 0c 33 87 47 d8 8c 75 cc 68 3c 04 3d 3b 01 06 3f 30 0c 62 30 6c 61 1d 4d 9c 12 59 05 12 c3 98 02 b8 c1 08 0a 28 73 0c 7a b1 a0 10 72 98 0e 9c 12 30 f8 00 c1 07 7b 2f 2a 25 80 1e c8 02 df 30 02 2f 90 f7 17 1b f1 99 b5 ab 7a ab 79 df 2d a3 f7 Data Ascii: z.d?&~Q2;MCGR`A`/!xV;Y@x$mtCW"L8`lS+bX 0#?g>\?Md[ha3Guh<=;?0b0laMY(szr0{/%0/zy-
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 79 f7 f7 f2 f2 c0 e3 01 32 78 f4 e0 1a 59 bd ff 7d d0 8f b5 39 a3 dd 80 4e 91 1d cb 55 44 5f b4 e5 73 e5 22 33 78 90 b9 3c fc 4a 91 a0 33 ec db 50 b7 66 9e 9f ee 82 af 5f bf dc db 34 78 20 9c 5d 5c bb 63 c6 3e 6b 0e ff 83 49 68 5e 01 eb 27 58 ba a5 44 26 2b 65 d5 7c de 9f 05 5f d7 74 21 f1 40 3a 41 8f 19 ac 1f bd eb 21 5f 07 d6 d1 e0 89 f1 10 44 77 e5 bd bf 61 53 b0 44 a9 31 e8 12 53 78 45 f8 3a 92 9e 2a db 03 72 39 c0 f2 d8 5a d6 06 06 1f 98 67 c8 19 f4 17 63 33 e3 8b df be ed b4 cc 2b be 8d 96 b5 65 0a 70 8d 12 ad 7e d2 d0 42 0c 6e 77 25 7e 09 58 77 45 62 22 b0 13 fa f2 89 1c 4b cb 80 5f f4 29 28 8f c5 94 46 a5 e0 f6 f8 c1 63 2c 5f 7a c0 d7 07 1e 0c 90 af 17 19 e7 81 80 e4 b7 57 d1 d7 8b 4c e5 19 eb 6a ac 4a 71 1d 92 f8 34 fa 7b 56 56 33 f9 2c 55 ac d8 Data Ascii: y2xY}9NUD_s"3x<J3Pf_4x ]\c>kIh^'XD&+e\|_t!@:A!_DwaSD1SxE:*r9Zgc3+ep~Bnw%~XwEb"K_)(Fc,_zWLjJq4{VV3,U
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: d0 2d 26 ff 5f b0 7e 66 04 76 28 54 cf f2 b2 ab 11 9f c5 5d 15 86 cc 59 58 5f 7e f0 f8 71 ff bb 9e cd bf b1 17 cd 7c 5d ad d9 ab 76 97 14 28 2c 3c 1b 6a d0 de d8 6a 55 1b 7a 1d 2e 2a 8d 82 35 ae 17 75 39 55 2d d4 52 1e c8 fb 8a 7c 0f 75 35 45 95 db bc 28 59 e7 9f cf 83 cc cd ae 7f d9 b9 d8 b1 c6 f3 76 f7 3d 0a 5b d6 6f b4 fe 0b d6 4b 61 99 92 78 7f c5 64 1d ea 14 5d 9b 99 91 2c 8b 8d fe 2e d6 a9 43 85 d9 1c 63 1d 2a 20 bf 2b 6c 8f bc 0c da 51 df d8 46 9a 85 85 6a 81 07 37 91 ce 29 aa a7 58 2c 40 ce 5f c5 6b 4c 30 fd 0d 05 54 62 7d 7e 63 db 84 fe fc f9 f4 34 42 6f b6 6f 19 66 4d d3 69 f8 f7 87 8e 49 bc 61 f1 59 55 f6 44 f4 f1 78 3c a5 9b 5b 2a c8 e0 e5 48 08 59 7f 7c f0 18 ea f5 4d 6a 4b 32 d6 63 ae 70 78 c8 15 a9 06 17 58 36 87 0d f7 02 58 bf 54 33 7c 9d Data Ascii: -&_~fv(T]YX_~q\|]v(,<jjUz.5u9U-R\|u5E(Yv=[oKaxd],.Cc +lQFj7)X,@_kL0Tb}~c4BoofMiIaYUDx<[*HY\|MjK2cpxX6XT3\|
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 87 df fa 37 06 bf 82 ac 8b d2 0d b1 6b 6c 07 8d 66 ca 9c 19 dc 4e 78 70 7b 3c 30 dc 03 35 ab 4f 18 fc 59 95 6d 8f d2 a1 62 0d 06 1b c1 85 85 20 75 22 1b 85 34 2f 5a 1b ec a2 f8 a4 2a 49 a1 9a 8a 37 4a 28 1a d0 31 b8 65 3b 42 db f3 ad 2d 84 7e 5f 4f bf 3f 74 2e 73 7e cc df cc 05 57 dd ba ce 2a a0 2b f6 80 73 19 b3 b9 77 13 16 83 2f 46 54 60 55 4b e2 72 2a 96 30 f6 6a 6c e1 99 8b fc 3d 59 65 be 8e d7 cb 21 74 9b 5c 03 af af fa 93 89 1a 01 07 83 2f 87 3b 58 e7 95 9b f0 f5 d6 ed 34 df 60 0b f7 d8 4b 03 d0 99 c2 97 63 c4 3a 33 79 bf 64 19 8c 74 d5 80 be 49 32 37 b1 2c 0c 1e 7d fd 0c 53 9a 21 7f 48 51 42 81 a0 cb de 60 3d 9a 82 a1 f0 c9 06 00 47 5f 6f a8 52 40 29 6a c0 ba 6c b0 1e cb 18 d0 79 f1 82 0a 7f 34 f8 7f df 6e 49 64 bf 63 fe f7 d9 4b d3 3a 3e 91 99 cc Data Ascii: 7klfNxp{<05OYmb u"4/ZI7J(1e;B-~_O?t.s~W+sw/FT`UKr*0jl=Ye!t\/;X4`Kc:3ydtI27,}S!HQB`=G_oR@)jly4nIdcK:>
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: b5 b2 ce ca 56 4d 5f ed 7b f2 e4 72 e4 af a9 87 af 3e ac f9 c5 6a 23 29 7c 91 a0 e7 72 d3 51 22 dd b9 9e f3 00 f2 40 04 62 9b 2b 16 86 82 15 5b 6e d4 92 8c 05 6b c8 3a 57 78 e3 56 66 90 2d 17 43 6a 26 6f 0d 6e c4 3a 98 fb e2 79 09 fc dd 7d bc b2 f2 e5 74 66 fd 41 c7 b2 5a fb fa b2 72 e7 f2 f2 fd 7d bd d9 2b 9f 88 2d 25 5c e5 00 ba ed 24 ec 39 43 cd f7 97 54 91 c8 86 d1 d7 91 75 20 65 3d 3a 3b 3d 33 3e 33 bd 9e cb 21 eb 81 32 78 44 43 97 02 c1 20 96 6b 45 bc d6 a5 c1 b6 0e 51 f9 82 12 d7 60 be 9e 91 ab a1 42 1a 12 e5 b8 a1 f0 1c fa f6 b6 77 06 77 95 6c 45 a3 d3 ce d2 2c b0 de 67 ee a4 68 b5 ef e6 f1 d2 f7 ed bd 79 6d 43 3c 06 b7 18 8f eb 28 ea b2 04 38 92 69 b4 5b 8f 60 1d 64 4e 18 fc 3a 18 7c 74 76 66 06 69 cf 71 5f 1f 0a c6 6a 85 aa 6b 28 50 14 8b aa 30 Data Ascii: VM_{r>j#)\|rQ"@b+[nk:WxVf-Cj&on:y}tfAZr}+-%\$9CTu e=:;=3>3!2xDC kEQ`BwwlE,ghymC<(8i[`dN:\|tvfiq_jk(P0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.22	49192	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:04 UTC	547	OUT	GET /wp-includes/js/comment-reply.min.js HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:04 UTC	976	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 08 Apr 2022 20:07:18 GMT etag: W/"625095f6-ba5" x-cache-groups: assets x-request-id: 7f67cfb59b27b55d1a45e3e9c71d9243 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BncyyYGi%2BOyaeoCXXwm1vEQcnJItby4wQc8HmWlpQQCLvbBTmWE5j3weqr5D9vwaTCp82iS2r9ek06TcLFI6ide6bdfJr1RsZvytZYdKjgDJ3JhA1ebrpzVr7K3nu1ztm4dw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d70bc14c21-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:04 UTC	393	IN	Data Raw: 62 61 35 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 61 64 64 43 6f 6d 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 61 72 20 49 2c 43 2c 68 2c 45 3d 76 2e 64 6f 63 75 6d 65 6e 74 2c 62 3d 7b 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 43 6c 61 73 73 3a 22 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 3a 22 72 65 70 6c 79 2d 74 69 74 6c 65 22 2c 63 61 6e 63 65 6c 52 65 70 6c 79 49 64 3a 22 63 61 6e 63 65 6c 2d 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 46 6f 72 6d 49 64 3a 22 63 6f 6d 6d 65 6e 74 66 6f 72 6d 22 2c 74 65 6d 70 6f 72 61 72 79 46 6f 72 6d 49 64 3a Data Ascii: ba5/! This file is auto-generated /window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 72 3d 22 71 75 65 72 79 53 65 6c 65 63 74 6f 72 22 69 6e 20 45 26 26 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 69 6e 20 76 2c 6e 3d 21 21 45 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 61 74 61 73 65 74 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 64 28 29 2c 65 26 26 6e 65 77 20 65 28 6f 29 2e 6f 62 73 65 72 76 65 28 45 2e 62 6f 64 79 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 69 66 28 72 26 26 28 49 3d 67 28 62 2e 63 61 6e 63 65 6c 52 65 70 6c 79 49 64 29 2c 43 3d 67 28 62 2e 63 6f 6d 6d 65 6e 74 46 6f 72 6d 49 64 29 2c 49 29 29 7b 49 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 Data Ascii: MutationObserver,r="querySelector"in E&&"addEventListener"in v,n=!!E.documentElement.dataset;function t(){d(),e&&new e(o).observe(E.body,{childList:!0,subtree:!0})}function d(e){if(r&&(I=g(b.cancelReplyId),C=g(b.commentFormId),I)){I.addEventListener("touc
2023-12-12 20:38:04 UTC	1226	IN	Data Raw: 6c 65 6e 67 74 68 3b 74 2d 2d 3b 29 69 66 28 65 5b 74 5d 2e 61 64 64 65 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 76 6f 69 64 20 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 3f 65 2e 64 61 74 61 73 65 74 5b 74 5d 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 74 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 45 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 7d 72 65 74 75 72 6e 20 72 26 26 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 3f 74 28 29 3a 72 26 26 76 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 2c 21 31 29 2c 7b 69 6e 69 74 3a 64 2c 6d 6f Data Ascii: length;t--;)if(e[t].addedNodes.length)return void d()}function m(e,t){return n?e.dataset[t]:e.getAttribute("data-"+t)}function g(e){return E.getElementById(e)}return r&&"loading"!==E.readyState?t():r&&v.addEventListener("DOMContentLoaded",t,!1),{init:d,mo
2023-12-12 20:38:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.22	49191	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:04 UTC	572	OUT	GET /wp-content/themes/mts_schema/js/jquery.magnific-popup.min.js HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:04 UTC	979	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-538c" x-cache-groups: assets x-request-id: 4238e5d3dd7b0acaaa54bf3673a8d0fe x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N4MWMEnY8jkehx8p11v11wXrXoIbHa0aEZ%2BoV%2FP%2FF8LezjuwKeBTcA3XT4nKSE70E7u7S59uMrIAYm3ND1NnHT0saloASwzUbHLLjmJDQ1iuAQW5nkLId1jS9SHlJD59zDVD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d70f3edb09-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:04 UTC	390	IN	Data Raw: 35 33 38 63 0d 0a 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 31 2e 30 2e 30 20 2d 20 32 30 31 34 2d 31 32 2d 31 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a Data Ascii: 538c/! Magnific Popup - v1.0.0 - 2014-12-12 http://dimsemenov.com/plugins/magnific-popup/ * Copyright (c) 2014 Dmitry Semenov; */(function(e){"function"==typeof define&&define.amd?define(["jquery"],e):"object"==typeof exports?e(require("jquery")):
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 22 2c 66 3d 22 4f 70 65 6e 22 2c 6d 3d 22 43 68 61 6e 67 65 22 2c 67 3d 22 6d 66 70 22 2c 68 3d 22 2e 22 2b 67 2c 76 3d 22 6d 66 70 2d 72 65 61 64 79 22 2c 43 3d 22 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 22 2c 79 3d 22 6d 66 70 2d 70 72 65 76 65 6e 74 2d 63 6c 6f 73 65 22 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 3d 21 21 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 49 3d 65 28 77 69 6e 64 6f 77 29 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 2e 65 76 2e 6f 6e 28 67 2b 65 2b 68 2c 6e 29 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 6f 29 7b 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 72 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 6d 66 70 2d 22 2b 74 2c 69 Data Ascii: ",f="Open",m="Change",g="mfp",h="."+g,v="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,n){t.ev.on(g+e+h,n)},k=function(t,n,i,o){var r=document.createElement("div");return r.className="mfp-"+t,i
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 65 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 29 3b 76 61 72 20 72 3b 69 66 28 6e 2e 69 73 4f 62 6a 3d 3d 3d 21 31 29 7b 74 2e 69 74 65 6d 73 3d 6e 2e 69 74 65 6d 73 2e 74 6f 41 72 72 61 79 28 29 2c 74 2e 69 6e 64 65 78 3d 30 3b 76 61 72 20 73 2c 6c 3d 6e 2e 69 74 65 6d 73 3b 66 6f 72 28 72 3d 30 3b 6c 2e 6c 65 6e 67 74 68 3e 72 3b 72 2b 2b 29 69 66 28 73 3d 6c 5b 72 5d 2c 73 2e 70 61 72 73 65 64 26 26 28 73 3d 73 2e 65 6c 5b 30 5d 29 2c 73 3d 3d 3d 6e 2e 65 6c 5b 30 5d 29 7b 74 2e 69 6e 64 65 78 3d 72 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 74 2e 69 74 65 6d 73 3d 65 2e 69 73 41 72 72 61 79 28 6e 2e 69 74 65 6d 73 29 3f 6e 2e 69 74 65 6d 73 3a 5b 6e 2e 69 74 65 6d 73 5d 2c 74 2e 69 6e 64 65 78 3d 6e 2e 69 6e 64 65 78 7c 7c 30 3b 69 66 28 74 2e 69 73 4f Data Ascii: e(document.body));var r;if(n.isObj===!1){t.items=n.items.toArray(),t.index=0;var s,l=n.items;for(r=0;l.length>r;r++)if(s=l[r],s.parsed&&(s=s.el[0]),s===n.el[0]){t.index=r;break}}else t.items=e.isArray(n.items)?n.items:[n.items],t.index=n.index\|\|0;if(t.isO
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 72 66 6c 6f 77 3a 74 2e 73 74 2e 6f 76 65 72 66 6c 6f 77 59 2c 6f 76 65 72 66 6c 6f 77 58 3a 22 68 69 64 64 65 6e 22 2c 6f 76 65 72 66 6c 6f 77 59 3a 74 2e 73 74 2e 6f 76 65 72 66 6c 6f 77 59 7d 29 3a 74 2e 77 72 61 70 2e 63 73 73 28 7b 74 6f 70 3a 49 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 29 2c 28 74 2e 73 74 2e 66 69 78 65 64 42 67 50 6f 73 3d 3d 3d 21 31 7c 7c 22 61 75 74 6f 22 3d 3d 3d 74 2e 73 74 2e 66 69 78 65 64 42 67 50 6f 73 26 26 21 74 2e 66 69 78 65 64 43 6f 6e 74 65 6e 74 50 6f 73 29 26 26 74 2e 62 67 4f 76 65 72 6c 61 79 2e 63 73 73 28 7b 68 65 69 67 68 74 3a 6f 2e 68 65 69 67 68 74 28 29 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 7d 29 2c 74 2e 73 74 2e 65 6e 61 62 Data Ascii: rflow:t.st.overflowY,overflowX:"hidden",overflowY:t.st.overflowY}):t.wrap.css({top:I.scrollTop(),position:"absolute"}),(t.st.fixedBgPos===!1\|\|"auto"===t.st.fixedBgPos&&!t.fixedContentPos)&&t.bgOverlay.css({height:o.height(),position:"absolute"}),t.st.enab
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 65 43 6c 61 73 73 46 72 6f 6d 4d 46 50 28 6e 29 2c 74 2e 66 69 78 65 64 43 6f 6e 74 65 6e 74 50 6f 73 29 7b 76 61 72 20 69 3d 7b 6d 61 72 67 69 6e 52 69 67 68 74 3a 22 22 7d 3b 74 2e 69 73 49 45 37 3f 65 28 22 62 6f 64 79 2c 20 68 74 6d 6c 22 29 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 22 2c 22 22 29 3a 69 2e 6f 76 65 72 66 6c 6f 77 3d 22 22 2c 65 28 22 68 74 6d 6c 22 29 2e 63 73 73 28 69 29 7d 6f 2e 6f 66 66 28 22 6b 65 79 75 70 22 2b 68 2b 22 20 66 6f 63 75 73 69 6e 22 2b 68 29 2c 74 2e 65 76 2e 6f 66 66 28 68 29 2c 74 2e 77 72 61 70 2e 61 74 74 72 28 22 63 6c 61 73 73 22 2c 22 6d 66 70 2d 77 72 61 70 22 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 73 74 79 6c 65 22 29 2c 74 2e 62 67 4f 76 65 72 6c 61 79 2e 61 74 74 72 28 22 63 6c 61 73 73 22 2c 22 6d 66 Data Ascii: eClassFromMFP(n),t.fixedContentPos){var i={marginRight:""};t.isIE7?e("body, html").css("overflow",""):i.overflow="",e("html").css(i)}o.off("keyup"+h+" focusin"+h),t.ev.off(h),t.wrap.attr("class","mfp-wrap").removeAttr("style"),t.bgOverlay.attr("class","mf
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 2e 63 6f 6e 74 65 6e 74 3d 65 2c 65 3f 74 2e 73 74 2e 73 68 6f 77 43 6c 6f 73 65 42 74 6e 26 26 74 2e 73 74 2e 63 6c 6f 73 65 42 74 6e 49 6e 73 69 64 65 26 26 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 5b 6e 5d 3d 3d 3d 21 30 3f 74 2e 63 6f 6e 74 65 6e 74 2e 66 69 6e 64 28 22 2e 6d 66 70 2d 63 6c 6f 73 65 22 29 2e 6c 65 6e 67 74 68 7c 7c 74 2e 63 6f 6e 74 65 6e 74 2e 61 70 70 65 6e 64 28 45 28 29 29 3a 74 2e 63 6f 6e 74 65 6e 74 3d 65 3a 74 2e 63 6f 6e 74 65 6e 74 3d 22 22 2c 54 28 75 29 2c 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6d 66 70 2d 22 2b 6e 2b 22 2d 68 6f 6c 64 65 72 22 29 2c 74 2e 63 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 28 74 2e 63 6f 6e 74 Data Ascii: t:function(e,n){t.content=e,e?t.st.showCloseBtn&&t.st.closeBtnInside&&t.currTemplate[n]===!0?t.content.find(".mfp-close").length\|\|t.content.append(E()):t.content=e:t.content="",T(u),t.container.addClass("mfp-"+n+"-holder"),t.contentContainer.append(t.cont
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 61 64 69 6e 67 22 21 3d 3d 65 7c 7c 28 69 3d 74 2e 73 74 2e 74 4c 6f 61 64 69 6e 67 29 3b 76 61 72 20 6f 3d 7b 73 74 61 74 75 73 3a 65 2c 74 65 78 74 3a 69 7d 3b 54 28 22 55 70 64 61 74 65 53 74 61 74 75 73 22 2c 6f 29 2c 65 3d 6f 2e 73 74 61 74 75 73 2c 69 3d 6f 2e 74 65 78 74 2c 74 2e 70 72 65 6c 6f 61 64 65 72 2e 68 74 6d 6c 28 69 29 2c 74 2e 70 72 65 6c 6f 61 64 65 72 2e 66 69 6e 64 28 22 61 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 29 2c 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6d 66 70 2d 73 2d 22 2b 65 29 2c 6e 3d 65 7d 7d 2c 5f 63 68 65 63 6b 49 66 43 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b Data Ascii: ading"!==e\|\|(i=t.st.tLoading);var o={status:e,text:i};T("UpdateStatus",o),e=o.status,i=o.text,t.preloader.html(i),t.preloader.find("a").on("click",function(e){e.stopImmediatePropagation()}),t.container.addClass("mfp-s-"+e),n=e}},_checkIfClose:function(n){
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 5d 2c 6e 29 7d 7d 65 6c 73 65 20 74 2e 66 69 6e 64 28 68 2b 22 2d 22 2b 65 29 2e 68 74 6d 6c 28 6e 29 7d 29 7d 2c 5f 67 65 74 53 63 72 6f 6c 6c 62 61 72 53 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 2e 73 63 72 6f 6c 6c 62 61 72 53 69 7a 65 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 77 69 64 74 68 3a 20 39 39 70 78 3b 20 68 65 69 67 68 74 3a 20 39 39 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 73 63 72 6f 6c 6c 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 2d 39 39 39 39 70 78 3b 22 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 Data Ascii: ],n)}}else t.find(h+"-"+e).html(n)})},_getScrollbarSize:function(){if(void 0===t.scrollbarSize){var e=document.createElement("div");e.style.cssText="width: 99px; height: 99px; overflow: scroll; position: absolute; top: -9999px;",document.body.appendChild(
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 65 67 61 74 65 29 29 2c 6f 3d 6f 2e 65 71 28 61 29 29 2c 74 2e 5f 6f 70 65 6e 43 6c 69 63 6b 28 7b 6d 66 70 45 6c 3a 6f 7d 2c 69 2c 72 29 7d 65 6c 73 65 20 74 2e 69 73 4f 70 65 6e 26 26 74 5b 6e 5d 2e 61 70 70 6c 79 28 74 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 3b 65 6c 73 65 20 6e 3d 65 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 6e 29 2c 62 3f 69 2e 64 61 74 61 28 22 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 22 2c 6e 29 3a 69 5b 30 5d 2e 6d 61 67 6e 69 66 69 63 50 6f 70 75 70 3d 6e 2c 74 2e 61 64 64 47 72 6f 75 70 28 69 2c 6e 29 3b 72 65 74 75 72 6e 20 69 7d 3b 76 61 72 20 50 2c 4f 2c 7a 2c 4d 3d 22 69 6e 6c 69 6e 65 22 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 26 26 28 4f Data Ascii: egate)),o=o.eq(a)),t._openClick({mfpEl:o},i,r)}else t.isOpen&&t[n].apply(t,Array.prototype.slice.call(arguments,1));else n=e.extend(!0,{},n),b?i.data("magnificPopup",n):i[0].magnificPopup=n,t.addGroup(i,n);return i};var P,O,z,M="inline",B=function(){z&&(O
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 77 72 61 70 2e 61 64 64 43 6c 61 73 73 28 76 29 7d 2c 31 36 29 2c 74 2e 75 70 64 61 74 65 53 74 61 74 75 73 28 22 72 65 61 64 79 22 29 2c 54 28 22 41 6a 61 78 43 6f 6e 74 65 6e 74 41 64 64 65 64 22 29 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 28 29 2c 6e 2e 66 69 6e 69 73 68 65 64 3d 6e 2e 6c 6f 61 64 45 72 72 6f 72 3d 21 30 2c 74 2e 75 70 64 61 74 65 53 74 61 74 75 73 28 22 65 72 72 6f 72 22 2c 74 2e 73 74 2e 61 6a 61 78 2e 74 45 72 72 6f 72 2e 72 65 70 6c 61 63 65 28 22 25 75 72 6c 25 22 2c 6e 2e 73 72 63 29 29 7d 7d 2c 74 2e 73 74 2e 61 6a 61 78 2e 73 65 74 74 69 6e 67 73 29 3b 72 65 74 75 72 6e 20 74 2e 72 65 71 3d 65 2e 61 6a 61 78 28 6f 29 2c 22 22 7d 7d Data Ascii: ),setTimeout(function(){t.wrap.addClass(v)},16),t.updateStatus("ready"),T("AjaxContentAdded")},error:function(){L(),n.finished=n.loadError=!0,t.updateStatus("error",t.st.ajax.tError.replace("%url%",n.src))}},t.st.ajax.settings);return t.req=e.ajax(o),""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.22	49193	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:04 UTC	556	OUT	GET /wp-content/themes/mts_schema/js/layzr.min.js HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:04 UTC	981	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-10de" x-cache-groups: assets x-request-id: 6559d4dd6195ad2ff8310aae10eeef9b x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pJvwP%2B3%2BtONiNbXTJbKK7OW6QY6EoOMay8bQNw2ul7i06hHgEAmHuLfvIZPGY%2BH91ir8PHctYjMIPDhL47Ai6bd%2F8tkhnSh375MYFVKw6BAM3R8xFQXnU7zWHbXELlSu4e1h"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d7983302f9-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:04 UTC	388	IN	Data Raw: 31 30 64 65 0d 0a 2f 2a 21 0a 20 2a 20 4c 61 79 7a 72 2e 6a 73 20 32 2e 30 2e 34 20 2d 20 41 20 73 6d 61 6c 6c 2c 20 66 61 73 74 2c 20 61 6e 64 20 6d 6f 64 65 72 6e 20 6c 69 62 72 61 72 79 20 66 6f 72 20 6c 61 7a 79 20 6c 6f 61 64 69 6e 67 20 69 6d 61 67 65 73 2e 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 4d 69 63 68 61 65 6c 20 43 61 76 61 6c 65 61 20 2d 20 68 74 74 70 3a 2f 2f 63 61 6c 6c 6d 65 63 61 76 73 2e 67 69 74 68 75 62 2e 69 6f 2f 6c 61 79 7a 72 2e 6a 73 2f 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 47 50 4c 2d 33 2e 30 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f Data Ascii: 10de/! Layzr.js 2.0.4 - A small, fast, and modern library for lazy loading images. * Copyright (c) 2016 Michael Cavalea - http://callmecavs.github.io/layzr.js/ * License: GPL-3.0 */!function(e){if("object"==typeof exports&&"undefined"!=typeof mo
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 74 2e 4c 61 79 7a 72 3d 65 28 29 7d 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 66 2c 75 29 7b 69 66 28 21 6e 5b 66 5d 29 7b 69 66 28 21 65 5b 66 5d 29 7b 76 61 72 20 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 75 26 26 73 29 72 65 74 75 72 6e 20 73 28 66 2c 21 30 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 66 2c 21 30 29 3b 76 61 72 20 63 3d 6e 65 77 20 45 Data Ascii: defined"!=typeof global?global:"undefined"!=typeof self?self:this,t.Layzr=e()}}(function(){var e;return function t(e,n,r){function o(f,u){if(!n[f]){if(!e[f]){var s="function"==typeof require&&require;if(!u&&s)return s(f,!0);if(i)return i(f,!0);var c=new E
2023-12-12 20:38:04 UTC	1369	IN	Data Raw: 3d 30 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 7b 7d 3a 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3b 72 65 74 75 72 6e 20 65 2e 65 76 65 6e 74 73 3d 7b 7d 2c 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 65 76 65 6e 74 73 5b 74 5d 3d 65 2e 65 76 65 6e 74 73 5b 74 5d 7c 7c 5b 5d 2c 65 2e 65 76 65 6e 74 73 5b 74 5d 2e 70 75 73 68 28 6e 29 2c 65 7d 2c 65 2e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 5f 6f 6e 63 65 3d 21 30 2c 65 2e 6f 6e 28 74 2c 6e 29 2c 65 7d 2c 65 2e 6f 66 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 65 2e 65 76 65 6e 74 73 5b 74 5d 2e 73 70 6c 69 63 Data Ascii: =0\|\|void 0===arguments[0]?{}:arguments[0];return e.events={},e.on=function(t,n){return e.events[t]=e.events[t]\|\|[],e.events[t].push(n),e},e.once=function(t,n){return n._once=!0,e.on(t,n),e},e.off=function(t,n){return 2===arguments.length?e.events[t].splic
2023-12-12 20:38:04 UTC	1200	IN	Data Raw: 74 28 22 73 72 63 3a 61 66 74 65 72 22 2c 65 29 2c 5b 68 2e 6e 6f 72 6d 61 6c 2c 68 2e 72 65 74 69 6e 61 2c 68 2e 73 72 63 73 65 74 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 74 29 7d 29 2c 63 28 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 6e 3d 65 3f 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 3a 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 3b 72 65 74 75 72 6e 5b 22 73 63 72 6f 6c 6c 22 2c 22 72 65 73 69 7a 65 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 5b 6e 5d 28 65 2c 74 29 7d 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 Data Ascii: t("src:after",e),[h.normal,h.retina,h.srcset].forEach(function(t){return e.removeAttribute(t)}),c()}function u(e){var n=e?"addEventListener":"removeEventListener";return["scroll","resize"].forEach(function(e){return window[n](e,t)}),this}function s(){retu
2023-12-12 20:38:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.22	49194	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:04 UTC	347	OUT	GET /favicon.ico HTTP/1.1 Host: mathblog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:05 UTC	911	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:05 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: W/"6529fd89-47e" x-request-id: 0835144dc68e155d845085b9b5f533c6 vary: Accept-Encoding x-presslabs-stats: HIT; desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN Cache-Control: max-age=31536000 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4kOVrKTMuP5xWzELO8VjIiOGL10ZsmvHPdQ8j8mVeeRfICz6vq6CZdatZBjEMv3sPbYcJd%2FksNHB4W8wUjhR6jhF6hI5%2B1nrB87aCbi%2Bsq95D8yOVisA5lFUE17SU7s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d8ee7431ea-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:05 UTC	458	IN	Data Raw: 34 37 65 0d 0a 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 47e h(
2023-12-12 20:38:05 UTC	699	IN	Data Raw: ff 20 20 20 ff a7 a7 a7 ff ff ff ff ff 3d 3d 3d ff 7c 7c 7c ff 81 81 81 ff 58 58 58 ff ff ff ff ff b2 b2 b2 ff 09 09 09 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 30 30 ff 9b 9b 9b ff e5 e5 e5 ff 02 02 02 ff ca ca ca ff d6 d6 d6 ff 09 09 09 ff f1 f1 f1 ff a6 a6 a6 ff 1a 1a 1a ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 42 42 42 ff 8d 8d 8d ff 92 92 92 ff 22 22 22 ff fd fd fd ff ff ff ff ff 30 30 30 ff 9f 9f 9f ff 9b 9b 9b ff 28 28 28 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 56 56 56 ff 7f 7f 7f ff 40 40 40 ff 7a 7a 7a ff ff ff ff ff ff ff ff ff 8f 8f 8f ff 47 47 47 ff 90 90 90 ff 37 37 37 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ===\|\|\|XXX000BBB"""000(((VVV@@@zzzGGG777
2023-12-12 20:38:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.22	49195	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:04 UTC	621	OUT	GET /wp-content/themes/mts_schema/images/pattern13.png HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:05 UTC	994	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:04 GMT Content-Type: image/png Content-Length: 77 Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: "6529fd89-4d" x-cache-groups: assets x-request-id: 908dd0d34f27927ada794d9f1e92f3d9 x-presslabs-cache: REVALIDATED expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 159612 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iF1XArksPmO5p2NDsLruBVG7PAfJ1ThqolRaJrKOMq3gqyKmndGQBdRVeN0OZkXBvBrezOvD5%2FcJK6FT6bo1eAmh26Hk1v32tirBjodW32nyEiYUkSuBCi7l5Vp9Jd%2BxztZQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4d91b827425-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:05 UTC	77	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 07 00 00 00 07 08 04 00 00 00 6e 5b 9f 58 00 00 00 14 49 44 41 54 78 01 63 80 02 56 08 45 88 cb 8a 0c 49 d2 0b 00 0d 9d 00 42 25 51 07 76 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRn[XIDATxcVEIB%QvIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.22	49196	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:05 UTC	563	OUT	GET /wp-content/plugins/akismet/_inc/akismet-frontend.js HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:05 UTC	990	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:05 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sat, 11 Nov 2023 13:44:08 GMT etag: W/"654f8528-29ed" x-cache-groups: assets x-request-id: b281f02097f25aba1909dce39eb93817 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 70698 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lw126y5wWfBvugHAjRTaf3u5lUvTPfpZIYXUlj3qRz3X%2BGSHsyczDtZ12N0O9M9tjz5VxcsPAn%2FITbjCIUpvYsJhz1osZWpsU6MZZZX3Rd4oGjkXUl%2BoRdTvjwrK9O2cTwUK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4dbbff28da9-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:05 UTC	379	IN	Data Raw: 32 39 65 64 0d 0a 2f 2a 2a 0a 20 2a 20 4f 62 73 65 72 76 65 20 68 6f 77 20 74 68 65 20 75 73 65 72 20 65 6e 74 65 72 73 20 63 6f 6e 74 65 6e 74 20 69 6e 74 6f 20 74 68 65 20 63 6f 6d 6d 65 6e 74 20 66 6f 72 6d 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 74 68 65 72 20 69 74 27 73 20 61 20 62 6f 74 20 6f 72 20 6e 6f 74 2e 0a 20 2a 0a 20 2a 20 4e 6f 74 65 20 74 68 61 74 20 6e 6f 20 61 63 74 75 61 6c 20 69 6e 70 75 74 20 69 73 20 62 65 69 6e 67 20 73 61 76 65 64 20 68 65 72 65 2c 20 6f 6e 6c 79 20 63 6f 75 6e 74 73 20 61 6e 64 20 74 69 6d 69 6e 67 73 20 62 65 74 77 65 65 6e 20 65 76 65 6e 74 73 2e 0a 20 2a 2f 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 2f 2f 20 50 61 73 73 69 76 65 20 65 76 65 6e 74 20 6c 69 73 74 Data Ascii: 29ed/** * Observe how the user enters content into the comment form in order to determine whether it's a bot or not. * * Note that no actual input is being saved here, only counts and timings between events. */( function() {// Passive event list
2023-12-12 20:38:05 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 0a 09 2f 2f 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 74 68 65 72 20 74 68 65 79 27 72 65 20 61 76 61 69 6c 61 62 6c 65 20 66 6f 72 20 75 73 65 2e 0a 09 76 61 72 20 73 75 70 70 6f 72 74 73 50 61 73 73 69 76 65 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 74 72 79 20 7b 0a 09 09 76 61 72 20 6f 70 74 73 20 3d 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 20 7b 7d 2c 20 27 70 61 73 73 69 76 65 27 2c 20 7b 0a 09 09 09 67 65 74 20 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 73 75 70 70 6f 72 74 73 50 61 73 73 69 76 65 20 3d 20 74 72 75 65 3b 0a 09 09 09 7d 0a 09 09 7d 20 29 3b 0a 0a 09 09 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 20 27 74 65 73 74 50 61 73 73 69 76 65 27 2c 20 6e Data Ascii: ction// to determine whether they're available for use.var supportsPassive = false;try {var opts = Object.defineProperty( {}, 'passive', {get : function() {supportsPassive = true;}} );window.addEventListener( 'testPassive', n
2023-12-12 20:38:05 UTC	1369	IN	Data Raw: 6c 79 20 74 6f 20 6f 74 68 65 72 20 64 6f 6d 61 69 6e 73 3b 20 74 68 65 73 65 20 63 6f 75 6c 64 20 62 65 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 70 61 79 6d 65 6e 74 20 66 6f 72 6d 73 2e 0a 09 09 09 69 66 20 28 20 66 6f 72 6d 41 63 74 69 6f 6e 20 29 20 7b 0a 09 09 09 09 2f 2f 20 43 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 66 6f 72 6d 20 69 73 20 70 6f 73 74 69 6e 67 20 74 6f 20 61 6e 20 65 78 74 65 72 6e 61 6c 20 55 52 4c 2c 20 6e 6f 74 20 61 20 70 61 74 68 2e 0a 09 09 09 09 69 66 20 28 20 66 6f 72 6d 41 63 74 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 20 27 68 74 74 70 3a 2f 2f 27 20 29 20 3d 3d 20 30 20 7c 7c 20 66 6f 72 6d 41 63 74 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 20 27 68 74 74 70 73 3a 2f 2f 27 20 29 20 3d 3d 20 30 20 29 20 7b 0a 09 09 09 09 09 69 66 20 Data Ascii: ly to other domains; these could be things like payment forms.if ( formAction ) {// Check that the form is posting to an external URL, not a path.if ( formAction.indexOf( 'http://' ) == 0 \|\| formAction.indexOf( 'https://' ) == 0 ) {if
2023-12-12 20:38:05 UTC	1369	IN	Data Raw: 09 09 09 27 61 6b 5f 62 6d 6b 27 3a 20 6d 6f 64 69 66 69 65 72 4b 65 79 73 2e 6a 6f 69 6e 28 20 27 3b 27 20 29 2c 0a 0a 09 09 09 09 09 2f 2f 20 57 68 65 6e 20 64 69 64 20 74 68 65 79 20 63 6f 72 72 65 63 74 20 74 68 65 6d 73 65 6c 76 65 73 3f 20 65 2e 67 2e 2c 20 70 72 65 73 73 20 42 61 63 6b 73 70 61 63 65 2c 20 6f 72 20 75 73 65 20 74 68 65 20 61 72 72 6f 77 20 6b 65 79 73 20 74 6f 20 6d 6f 76 65 20 74 68 65 20 63 75 72 73 6f 72 20 62 61 63 6b 0a 09 09 09 09 09 27 61 6b 5f 62 63 6b 27 3a 20 63 6f 72 72 65 63 74 69 6f 6e 4b 65 79 73 2e 6a 6f 69 6e 28 20 27 3b 27 20 29 2c 0a 0a 09 09 09 09 09 2f 2f 20 48 6f 77 20 6d 61 6e 79 20 74 69 6d 65 73 20 64 69 64 20 74 68 65 79 20 6d 6f 76 65 20 74 68 65 20 6d 6f 75 73 65 3f 0a 09 09 09 09 09 27 61 6b 5f 62 6d 6d Data Ascii: 'ak_bmk': modifierKeys.join( ';' ),// When did they correct themselves? e.g., press Backspace, or use the arrow keys to move the cursor back'ak_bck': correctionKeys.join( ';' ),// How many times did they move the mouse?'ak_bmm
2023-12-12 20:38:05 UTC	1369	IN	Data Raw: 61 74 65 28 29 20 29 2e 67 65 74 54 69 6d 65 28 29 3b 0a 09 09 09 09 6b 65 79 64 6f 77 6e 73 5b 20 65 2e 6b 65 79 20 5d 20 3d 20 5b 20 6b 65 79 64 6f 77 6e 54 69 6d 65 20 5d 3b 0a 0a 09 09 09 09 69 66 20 28 20 21 20 69 6e 70 75 74 5f 62 65 67 69 6e 20 29 20 7b 0a 09 09 09 09 09 69 6e 70 75 74 5f 62 65 67 69 6e 20 3d 20 6b 65 79 64 6f 77 6e 54 69 6d 65 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 2f 2f 20 49 6e 20 73 6f 6d 65 20 73 69 74 75 61 74 69 6f 6e 73 2c 20 77 65 20 64 6f 6e 27 74 20 77 61 6e 74 20 74 6f 20 72 65 63 6f 72 64 20 61 6e 20 69 6e 74 65 72 76 61 6c 20 73 69 6e 63 65 20 74 68 65 20 6c 61 73 74 20 6b 65 79 70 72 65 73 73 20 2d 2d 20 66 6f 72 20 65 78 61 6d 70 6c 65 2c 0a 09 09 09 09 2f 2f 20 6f 6e 20 74 68 65 20 66 69 72 73 74 20 6b 65 79 70 72 Data Ascii: ate() ).getTime();keydowns[ e.key ] = [ keydownTime ];if ( ! input_begin ) {input_begin = keydownTime;}// In some situations, we don't want to record an interval since the last keypress -- for example,// on the first keypr
2023-12-12 20:38:05 UTC	1369	IN	Data Raw: 6e 67 73 20 66 6f 72 20 6b 65 79 73 20 6c 69 6b 65 20 53 68 69 66 74 20 6f 72 20 62 61 63 6b 73 70 61 63 65 2c 20 73 69 6e 63 65 20 74 68 65 79 0a 09 09 09 09 09 09 2f 2f 20 74 79 70 69 63 61 6c 6c 79 20 67 65 74 20 68 65 6c 64 20 64 6f 77 6e 20 66 6f 72 20 6c 6f 6e 67 65 72 20 74 68 61 6e 20 72 65 67 75 6c 61 72 20 74 79 70 69 6e 67 2e 0a 0a 09 09 09 09 09 09 76 61 72 20 6b 65 79 64 6f 77 6e 54 69 6d 65 20 3d 20 6b 65 79 64 6f 77 6e 73 5b 20 65 2e 6b 65 79 20 5d 5b 30 5d 3b 0a 0a 09 09 09 09 09 09 76 61 72 20 6b 65 79 70 72 65 73 73 20 3d 20 5b 5d 3b 0a 0a 09 09 09 09 09 09 2f 2f 20 4b 65 79 70 72 65 73 73 20 64 75 72 61 74 69 6f 6e 2e 0a 09 09 09 09 09 09 6b 65 79 70 72 65 73 73 2e 70 75 73 68 28 20 6b 65 79 75 70 54 69 6d 65 20 2d 20 6b 65 79 64 6f 77 Data Ascii: ngs for keys like Shift or backspace, since they// typically get held down for longer than regular typing.var keydownTime = keydowns[ e.key ][0];var keypress = [];// Keypress duration.keypress.push( keyupTime - keydow
2023-12-12 20:38:05 UTC	1369	IN	Data Raw: 3d 20 5b 5d 3b 0a 09 09 09 6d 6f 75 73 65 63 6c 69 63 6b 2e 70 75 73 68 28 20 6e 6f 77 20 2d 20 6c 61 73 74 4d 6f 75 73 65 64 6f 77 6e 20 29 3b 0a 0a 09 09 09 69 66 20 28 20 6c 61 73 74 4d 6f 75 73 65 75 70 20 29 20 7b 0a 09 09 09 09 6d 6f 75 73 65 63 6c 69 63 6b 2e 70 75 73 68 28 20 6c 61 73 74 4d 6f 75 73 65 64 6f 77 6e 20 2d 20 6c 61 73 74 4d 6f 75 73 65 75 70 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 6d 6f 75 73 65 63 6c 69 63 6b 73 2e 70 75 73 68 28 20 6d 6f 75 73 65 63 6c 69 63 6b 20 29 3b 0a 0a 09 09 09 6c 61 73 74 4d 6f 75 73 65 75 70 20 3d 20 6e 6f 77 3b 0a 0a 09 09 09 2f 2f 20 49 66 20 74 68 65 20 6d 6f 75 73 65 20 68 61 73 20 62 65 65 6e 20 63 6c 69 63 6b 65 64 2c 20 64 6f 6e 27 74 20 72 65 63 6f 72 64 20 74 68 69 73 20 74 69 6d 65 20 61 73 20 61 Data Ascii: = [];mouseclick.push( now - lastMousedown );if ( lastMouseup ) {mouseclick.push( lastMousedown - lastMouseup );}mouseclicks.push( mouseclick );lastMouseup = now;// If the mouse has been clicked, don't record this time as a
2023-12-12 20:38:05 UTC	1369	IN	Data Raw: 20 70 61 73 73 69 76 65 3a 20 74 72 75 65 20 7d 20 3a 20 66 61 6c 73 65 20 20 29 3b 0a 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 20 27 74 6f 75 63 68 6d 6f 76 65 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 20 65 20 29 20 7b 0a 09 09 09 69 66 20 28 20 74 6f 75 63 68 6d 6f 76 65 43 6f 75 6e 74 54 69 6d 65 72 20 29 20 7b 0a 09 09 09 09 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 20 74 6f 75 63 68 6d 6f 76 65 43 6f 75 6e 74 54 69 6d 65 72 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 74 6f 75 63 68 6d 6f 76 65 43 6f 75 6e 74 54 69 6d 65 72 20 3d 20 73 65 74 54 69 6d 65 6f 75 74 28 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 74 6f 75 63 68 6d 6f 76 65 43 6f 75 6e 74 2b 2b 3b 0a 09 09 09 7d 2c 20 35 30 30 20 29 3b 0a 09 Data Ascii: passive: true } : false );document.addEventListener( 'touchmove', function ( e ) {if ( touchmoveCountTimer ) {clearTimeout( touchmoveCountTimer );}touchmoveCountTimer = setTimeout( function () {touchmoveCount++;}, 500 );
2023-12-12 20:38:05 UTC	779	IN	Data Raw: 09 2f 2a 2a 0a 09 20 2a 20 46 6f 72 20 74 68 65 20 74 69 6d 65 73 74 61 6d 70 20 64 61 74 61 20 74 68 61 74 20 69 73 20 63 6f 6c 6c 65 63 74 65 64 2c 20 64 6f 6e 27 74 20 73 65 6e 64 20 6d 6f 72 65 20 74 68 61 6e 20 60 6c 69 6d 69 74 60 20 64 61 74 61 20 70 6f 69 6e 74 73 20 69 6e 20 74 68 65 20 72 65 71 75 65 73 74 2e 0a 09 20 2a 20 43 68 6f 6f 73 65 20 61 20 72 61 6e 64 6f 6d 20 73 6c 69 63 65 20 61 6e 64 20 73 65 6e 64 20 74 68 6f 73 65 2e 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 70 72 65 70 61 72 65 5f 74 69 6d 65 73 74 61 6d 70 5f 61 72 72 61 79 5f 66 6f 72 5f 72 65 71 75 65 73 74 28 20 61 2c 20 6c 69 6d 69 74 20 29 20 7b 0a 09 09 69 66 20 28 20 21 20 6c 69 6d 69 74 20 29 20 7b 0a 09 09 09 6c 69 6d 69 74 20 3d 20 31 30 30 3b 0a 09 09 7d 0a 0a Data Ascii: /** * For the timestamp data that is collected, don't send more than `limit` data points in the request. * Choose a random slice and send those. */function prepare_timestamp_array_for_request( a, limit ) {if ( ! limit ) {limit = 100;}
2023-12-12 20:38:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.22	49200	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:05 UTC	389	OUT	GET /wp-content/themes/mts_schema/images/pattern13.png HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:05 UTC	986	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:05 GMT Content-Type: image/png Content-Length: 77 Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: "6529fd89-4d" x-cache-groups: assets x-request-id: f724eff1651cc496b805ef8914c11af6 x-presslabs-cache: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 271166 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uDcui6vS1xsGRWlo3elrDqPyFhrkD%2FVrTXAzMtBSFTiO08egDCZKaPeRyHZuogMluKD7ljMDlzG4nMdUjVZg%2FG2h2aHp7LDEFDROmOMNju0ZTvoGZBzoDsZjMa5atXVZQDnU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4ddc9b39ae9-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:05 UTC	77	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 07 00 00 00 07 08 04 00 00 00 6e 5b 9f 58 00 00 00 14 49 44 41 54 78 01 63 80 02 56 08 45 88 cb 8a 0c 49 d2 0b 00 0d 9d 00 42 25 51 07 76 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRn[XIDATxcVEIB%QvIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.22	49202	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:05 UTC	616	OUT	GET /wp-content/themes/mts_schema/images/nobg.png HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:06 UTC	987	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:06 GMT Content-Type: image/png Content-Length: 68 Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: "6529fd89-44" x-cache-groups: assets x-request-id: bf1b016eebaf308ebaaaef71429ab074 x-presslabs-cache: MISS expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 708920 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BiMwURy5CevExLrTpKnyKT2ydmTeDCruXVYIsadjCcNNWoJN1SqBSYhuKVVbpRtVCOCwJ6ZKAG4gGfaLupiOn2GMuMmu0LaP5oAz5dZpsyRDZq%2B8AeavNXK%2F82BpgyMOlPI0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4dfbaa6747f-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:06 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 08 1d 63 60 60 00 00 00 03 00 01 4f 48 0a af 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATc``OHIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.22	49204	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:05 UTC	808	OUT	POST /wp-admin/admin-ajax.php HTTP/1.1 Host: mathblog.com Connection: keep-alive Content-Length: 27 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://mathblog.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
2023-12-12 20:38:05 UTC	27	OUT	Data Raw: 61 63 74 69 6f 6e 3d 6d 74 73 5f 76 69 65 77 5f 63 6f 75 6e 74 26 69 64 3d 33 34 Data Ascii: action=mts_view_count&id=34
2023-12-12 20:38:06 UTC	1354	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: https://mathblog.com access-control-allow-credentials: true x-robots-tag: noindex x-content-type-options: nosniff expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 referrer-policy: strict-origin-when-cross-origin x-frame-options: SAMEORIGIN x-request-id: cb90b22caeb3b25b8475191a8412685b access-control-allow-methods: HEAD,GET,POST,OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-WP-Nonce access-control-expose-headers: Content-Length,Content-Range,X-WP-Total,X-WP-TotalPages,Link x-presslabs-stats: desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KhYR1EAsOXVUrs8sZueb8hFLh10UlNbpLYqxbJ%2FEG%2BeKasbxwh2ZU8T2VOx2LE9T6pzt%2FyYlg6zJDeGpGg02QwrjKHpOcBQQ6%2BajgTfPteGXcRpUS0%2F%2BdJxzQ9qaeBk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4dfcd725c6b-MIA
2023-12-12 20:38:06 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.22	49201	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:05 UTC	664	OUT	GET /2WOFDurG0lJJ.js?ts=78819 HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
2023-12-12 20:38:06 UTC	930	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:06 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-request-id: e1fd0fd7f9c22afeacc28030d138469f x-presslabs-stats: desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: max-age=31536000 CF-Cache-Status: MISS Last-Modified: Tue, 12 Dec 2023 20:38:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8F9MZjr8yrWz8GNopOI0JKi8ksvahHH9J8zYVOTT66Wn4Xg0h5jyYwzpqO08FmlT%2FGyx8ihUDJOKasPa%2BlGVtavJ6vqc29piye6lml0gJdquHiLPbX9QypNuHDWoWn4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4dfd8cf74a6-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:06 UTC	82	IN	Data Raw: 34 63 0d 0a 2f 2f 20 74 68 69 73 20 62 65 61 63 6f 6e 20 69 73 20 75 73 65 64 20 62 79 20 50 72 65 73 73 6c 61 62 73 20 66 6f 72 20 6d 65 74 72 69 63 20 63 6f 6d 70 75 74 61 74 69 6f 6e 73 20 6f 6e 20 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 0a 0d 0a Data Ascii: 4c// this beacon is used by Presslabs for metric computations on mathblog.com
2023-12-12 20:38:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.22	49210	172.67.187.225	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:06 UTC	384	OUT	GET /wp-content/themes/mts_schema/images/nobg.png HTTP/1.1 Host: cdn.mathblog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:06 UTC	1002	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:06 GMT Content-Type: image/png Content-Length: 68 Connection: close last-modified: Sat, 14 Oct 2023 02:31:37 GMT etag: "6529fd89-44" x-cache-groups: assets x-request-id: 5a34e5cf810cde0b893b754ae5b17ab7 x-presslabs-cache: REVALIDATED expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=31536000 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding CF-Cache-Status: HIT Age: 159614 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6QWUHCF6EP9EB3H6t%2F2h5G89VsZUEN35DQ%2BQ5KevQ2B%2FNGmcT43K%2FnlS4pjqatgKGI5ayFjEN3Yp6d6c6g9T5lbV7m3SYS7A0%2FDpDXi352k88%2BtzZUnnzenv1iJAz7em6xFQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4e34cfb21f4-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:06 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 08 1d 63 60 60 00 00 00 03 00 01 4f 48 0a af 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATc``OHIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.22	49214	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:06 UTC	432	OUT	GET /wp-admin/admin-ajax.php HTTP/1.1 Host: mathblog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
2023-12-12 20:38:07 UTC	945	IN	HTTP/1.1 400 Bad Request Date: Tue, 12 Dec 2023 20:38:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-robots-tag: noindex expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 x-request-id: 6dc85e91841ab1d80af5e02946ec6b6c vary: Accept-Encoding x-presslabs-stats: MISS; desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C8RoOY657vOpbu3H0WnjRBpmiqqxP52ms4fZ3E284zi6sGPmgrkMuBhpHzogrWgRD2pMlxTLZvzXwv%2BrSid1nnBkid80owdhCDP2wbpQ5bKLXQTcTnAdAFDiG5dC8go%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c4e56c722593-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:07 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2023-12-12 20:38:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.22	49211	52.22.5.155	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:06 UTC	556	OUT	GET /usersync.min.js?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:06 UTC	352	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 12823 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: no-cache, private Accept-Ranges: bytes Last-Modified: Mon, 11 Dec 2023 22:06:33 GMT ETag: W/"3217-18c5aeae8c1"
2023-12-12 20:38:06 UTC	12823	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 75 73 65 72 73 79 6e 63 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 33 34 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 76 61 72 20 69 2c 6f 2c 72 3b 76 6f 69 64 20 30 3d 3d 3d 28 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 69 3d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 6e 3d 7b 7d 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 6e 5b 69 5d 3d 74 5b 69 5d 7d 72 65 74 75 72 Data Ascii: /! For license information please see usersync.min.js.LICENSE.txt /(()=>{var e={34:(e,n,t)=>{var i,o,r;void 0===(o="function"==typeof(i=r=function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var i in t)n[i]=t[i]}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.22	49220	35.190.80.1	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:07 UTC	525	OUT	OPTIONS /report/v3?s=C8RoOY657vOpbu3H0WnjRBpmiqqxP52ms4fZ3E284zi6sGPmgrkMuBhpHzogrWgRD2pMlxTLZvzXwv%2BrSid1nnBkid80owdhCDP2wbpQ5bKLXQTcTnAdAFDiG5dC8go%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://mathblog.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:08 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 12 Dec 2023 20:38:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.22	49224	35.190.80.1	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:08 UTC	470	OUT	POST /report/v3?s=C8RoOY657vOpbu3H0WnjRBpmiqqxP52ms4fZ3E284zi6sGPmgrkMuBhpHzogrWgRD2pMlxTLZvzXwv%2BrSid1nnBkid80owdhCDP2wbpQ5bKLXQTcTnAdAFDiG5dC8go%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 405 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:08 UTC	405	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 34 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 34 2e 32 31 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 77 70 2d Data Ascii: [{"age":0,"body":{"elapsed_time":942,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.64.214","status_code":400,"type":"http.error"},"type":"network-error","url":"https://mathblog.com/wp-
2023-12-12 20:38:08 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 12 Dec 2023 20:38:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.22	49233	104.21.41.99	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:14 UTC	561	OUT	GET /update?cats=687,687,687,687,687 HTTP/1.1 Host: sda.fyi Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:14 UTC	780	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:14 GMT Content-Type: application/json Content-Length: 24 Connection: close Access-Control-Allow-Origin: https://mathblog.com Set-Cookie: mv_sda=2023-12-12_687_5; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UmBi0NFAgb1kCSgM%2F3AeXikbzwEtZFWDPuetTbthbWf43M3Gs5LaFOZE08Afqmr8NjE9hp%2BrADZHUM1tQPorF%2BmpWfdX9B%2B3g%2B%2BxcDWVlL7fdcB0yYEAga3u"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c515dd6809ea-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:14 UTC	24	IN	Data Raw: 7b 22 32 30 32 33 2d 31 32 2d 31 32 22 3a 7b 22 36 38 37 22 3a 35 7d 7d Data Ascii: {"2023-12-12":{"687":5}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.22	49235	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:15 UTC	1109	OUT	GET /polynomial-root-finding-with-the-jenkins-traub-algorithm/ HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.0.1702413486.0.0.0; _ga=GA1.1.1980800170.1702413486; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}}; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=
2023-12-12 20:38:15 UTC	981	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close content-security-policy: block-all-mixed-content vary: Accept-Encoding, Cookie last-modified: Mon, 11 Dec 2023 09:28:31 GMT x-presslabs-stats: HIT; 0.099s; 16 queries; desktop; ttl 172800s; refresh in 46216s x-request-id: 8748c35bb4abd01278568a75a6a001f7 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VzWn0f5xsEu4qbv2ZDyFXNLZXfCn4LYL6evHreXgDeYgI9aQfdAtKCYkXqpVa1oa%2BRBYQHQjsaT%2FsM5PW9Lxg75z8MC0Nwqr6F%2FysDExvchV%2FzfNdkqoI2eS0dWBRx8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c51abb5b288c-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:15 UTC	388	IN	Data Raw: 37 34 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 53 69 74 65 22 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 20 41 6c 77 61 79 73 20 66 6f 72 63 65 20 6c 61 74 65 73 74 20 49 45 20 72 65 6e 64 65 72 69 6e 67 20 65 6e 67 69 6e 65 20 28 65 76 65 6e 20 69 6e 20 69 6e 74 72 61 6e 65 74 29 20 26 20 43 68 72 6f 6d 65 20 46 72 61 6d 65 20 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 5d 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 Data Ascii: 74c4<!DOCTYPE html><html class="no-js" lang="en-US"><head itemscope itemtype="http://schema.org/WebSite"><meta charset="UTF-8">... Always force latest IE rendering engine (even in intranet) & Chrome Frame -->...[if IE ]><meta http-equiv="X-U
2023-12-12 20:38:15 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 Data Ascii: <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black">
2023-12-12 20:38:15 UTC	1369	IN	Data Raw: 74 3d 22 61 72 74 69 63 6c 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 50 6f 6c 79 6e 6f 6d 69 61 6c 20 52 6f 6f 74 2d 66 69 6e 64 69 6e 67 20 77 69 74 68 20 74 68 65 20 4a 65 6e 6b 69 6e 73 2d 54 72 61 75 62 20 41 6c 67 6f 72 69 74 68 6d 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 4a 65 6e 6b 69 6e 73 2d 54 72 61 75 62 20 41 6c 67 6f 72 69 74 68 6d 20 69 73 20 61 20 73 74 61 6e 64 61 72 64 20 69 6e 20 74 68 65 20 66 69 65 6c 64 20 6f 66 20 6e 75 6d 65 72 69 63 61 6c 20 63 6f 6d 70 75 74 61 74 69 6f 6e 20 6f 66 20 70 6f 6c 79 6e 6f 6d 69 61 6c 20 72 6f 6f 74 73 2c 20 Data Ascii: t="article" /><meta property="og:title" content="Polynomial Root-finding with the Jenkins-Traub Algorithm" /><meta property="og:description" content="The Jenkins-Traub Algorithm is a standard in the field of numerical computation of polynomial roots,
2023-12-12 20:38:15 UTC	1369	IN	Data Raw: 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 44 61 76 69 64 20 42 69 6e 6e 65 72 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 20 63 6c 61 73 73 3d 22 79 6f 61 73 74 2d 73 63 68 65 6d 61 2d 67 72 61 70 68 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 57 65 62 50 61 67 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 Data Ascii: /><meta name="author" content="David Binner" /><meta name="twitter:card" content="summary_large_image" /><script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://mathb
2023-12-12 20:38:15 UTC	1369	IN	Data Raw: 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 70 6f 6c 79 6e 6f 6d 69 61 6c 2d 72 6f 6f 74 2d 66 69 6e 64 69 6e 67 2d 77 69 74 68 2d 74 68 65 2d 6a 65 6e 6b 69 6e 73 2d 74 72 61 75 62 2d 61 6c 67 6f 72 69 74 68 6d 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 73 6f 63 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 65 2f 69 72 3f 74 3d 61 6e 74 6f 6e 69 6f 63 61 6e 67 69 61 2d 32 30 26 61 6d 70 3b 6c 3d 61 73 32 26 61 6d 70 3b 6f 3d 31 26 61 6d 70 3b 61 3d 30 34 38 36 34 31 34 35 34 58 22 2c 22 63 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 73 6f 63 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 65 2f 69 72 3f 74 3d 61 6e 74 6f 6e 69 6f 63 61 6e 67 69 61 2d 32 30 26 61 6d 70 3b 6c 3d 61 Data Ascii: mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#primaryimage","url":"https://www.assoc-amazon.com/e/ir?t=antoniocangia-20&l=as2&o=1&a=048641454X","contentUrl":"https://www.assoc-amazon.com/e/ir?t=antoniocangia-20&l=a
2023-12-12 20:38:15 UTC	1369	IN	Data Raw: 36 26 64 3d 69 64 65 6e 74 69 63 6f 6e 26 72 3d 67 22 2c 22 63 61 70 74 69 6f 6e 22 3a 22 44 61 76 69 64 20 42 69 6e 6e 65 72 22 7d 2c 22 73 61 6d 65 41 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 6b 69 74 69 2e 63 61 22 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 61 75 74 68 6f 72 2f 62 69 6e 6e 65 72 2f 22 7d 5d 7d 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 21 2d 2d 20 2f 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 2e 20 2d 2d 3e 0a 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 73 63 72 69 70 74 73 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 Data Ascii: 6&d=identicon&r=g","caption":"David Binner"},"sameAs":["https://akiti.ca"],"url":"https://mathblog.com/author/binner/"}]}</script>... / Yoast SEO plugin. --><link rel='dns-prefetch' href='//scripts.mediavine.com' /><style id='classic-theme-styles-i
2023-12-12 20:38:15 UTC	1369	IN	Data Raw: 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 30 38 2c 31 33 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 32 2c 31 38 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e Data Ascii: ient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: lin
2023-12-12 20:38:15 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 3a 20 33 36 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 3a 20 34 32 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 32 30 3a 20 30 2e 34 34 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 33 30 3a 20 30 2e 36 37 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 34 30 3a 20 31 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 35 30 3a 20 31 2e 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d Data Ascii: -size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--
2023-12-12 20:38:15 UTC	1369	IN	Data Raw: 3a 77 68 65 72 65 28 3a 6e 6f 74 28 2e 61 6c 69 67 6e 6c 65 66 74 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 72 69 67 68 74 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 66 75 6c 6c 29 29 7b 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 67 6c 6f 62 61 6c 2d 2d 63 6f 6e 74 65 6e 74 2d 73 69 7a 65 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 77 69 64 65 7b 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 67 6c 6f 62 61 6c 2d 2d 77 69 64 65 2d 73 69 7a 65 29 Data Ascii: :where(:not(.alignleft):not(.alignright):not(.alignfull)){max-width: var(--wp--style--global--content-size);margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignwide{max-width: var(--wp--style--global--wide-size)
2023-12-12 20:38:15 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 Data Ascii: color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.22	49241	35.244.193.51	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:15 UTC	654	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1--- HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:15 UTC	763	IN	HTTP/1.1 307 Temporary Redirect vary: origin access-control-allow-credentials: true access-control-allow-origin: https://mathblog.com location: https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1---&b=1&g=wO%2BZMA%2FYawPipMinqc8CXvDYcoUq3KBxFo%2FbBkaLyP0%3D referrer-policy: unsafe-url cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT Content-Length: 0 set-cookie: check=true; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:38:15 GMT; Path=/; Domain=.33across.com; Secure; SameSite=None via: 1.1 google date: Tue, 12 Dec 2023 20:38:15 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.22	49239	34.120.155.137	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:15 UTC	589	OUT	GET /api/identity/envelope?pid=2 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:15 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: https://mathblog.com Cache-Control: no-cache, no-store Timing-Allow-Origin: * Date: Tue, 12 Dec 2023 20:38:15 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.22	49238	74.119.119.139	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:15 UTC	598	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&cw=1&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://mathblog.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:15 UTC	519	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:38:15 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://mathblog.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 396523 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:38:15 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.22	49242	172.67.164.44	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:15 UTC	395	OUT	GET /update?cats=687,687,687,687,687 HTTP/1.1 Host: sda.fyi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_sda=2023-12-12_687_5
2023-12-12 20:38:16 UTC	758	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:15 GMT Content-Type: application/json Content-Length: 25 Connection: close Access-Control-Allow-Origin: * Set-Cookie: mv_sda=2023-12-12_687_10; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jvzqMyLpf3hNMGASPY2Rq%2BA4KvPq7qxgoBevgbcoKQj%2Fc05JGZUR%2FpfuBvrrO%2FymQiq08HEImeflGOi17u8PpgWf35M9NB2JlKUTnzei08KvuzLKWKk9rT4K"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c51d79fd9ac3-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:16 UTC	25	IN	Data Raw: 7b 22 32 30 32 33 2d 31 32 2d 31 32 22 3a 7b 22 36 38 37 22 3a 31 30 7d 7d Data Ascii: {"2023-12-12":{"687":10}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.22	49236	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:15 UTC	1277	OUT	GET / HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.0.1702413486.0.0.0; _ga=GA1.1.1980800170.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; am_tokens=null
2023-12-12 20:38:16 UTC	977	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close content-security-policy: block-all-mixed-content vary: Accept-Encoding, Cookie last-modified: Tue, 12 Dec 2023 20:17:50 GMT x-presslabs-stats: HIT; 0.100s; 2 queries; desktop; ttl 3600s; refresh in 2375s x-request-id: 4a8f07c3b8920b79b4d9d9c339d11e04 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aFR8Lv8SqpfSV4KDxYVhuEdE40fStaUsNV5LaHa338u%2FnjsRtG2VW0dqldhiBuvAbjaYyPzQIW%2Bpeyf3Wp7ajYFitzmo1QHrVov7nzgLruXIYnz%2BHmU%2BXLZkBpc5vAI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c51cff338d9c-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:16 UTC	392	IN	Data Raw: 37 62 65 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 53 69 74 65 22 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 20 41 6c 77 61 79 73 20 66 6f 72 63 65 20 6c 61 74 65 73 74 20 49 45 20 72 65 6e 64 65 72 69 6e 67 20 65 6e 67 69 6e 65 20 28 65 76 65 6e 20 69 6e 20 69 6e 74 72 61 6e 65 74 29 20 26 20 43 68 72 6f 6d 65 20 46 72 61 6d 65 20 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 5d 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 Data Ascii: 7be0<!DOCTYPE html><html class="no-js" lang="en-US"><head itemscope itemtype="http://schema.org/WebSite"><meta charset="UTF-8">... Always force latest IE rendering engine (even in intranet) & Chrome Frame -->...[if IE ]><meta http-equiv="X-U
2023-12-12 20:38:16 UTC	1369	IN	Data Raw: 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 Data Ascii: <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black">
2023-12-12 20:38:16 UTC	1369	IN	Data Raw: 74 3d 22 77 65 62 73 69 74 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 42 6c 6f 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 65 6d 61 74 69 63 73 20 69 73 20 77 6f 6e 64 65 72 66 75 6c 21 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 42 6c 6f 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 Data Ascii: t="website" /><meta property="og:title" content="MathBlog" /><meta property="og:description" content="Mathematics is wonderful!" /><meta property="og:url" content="https://mathblog.com/" /><meta property="og:site_name" content="MathBlog" /><meta
2023-12-12 20:38:16 UTC	1369	IN	Data Raw: 73 27 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 69 6c 65 5f 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: s'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:
2023-12-12 20:38:16 UTC	1369	IN	Data Raw: 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 28 32 30 37 2c 34 36 2c 34 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 30 25 2c 72 Data Ascii: (255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,r
2023-12-12 20:38:16 UTC	1369	IN	Data Raw: 2d 2d 73 70 61 63 69 6e 67 2d 2d 37 30 3a 20 33 2e 33 38 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 38 30 3a 20 35 2e 30 36 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 6e 61 74 75 72 61 6c 3a 20 36 70 78 20 36 70 78 20 39 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 64 65 65 70 3a 20 31 32 70 78 20 31 32 70 78 20 35 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 73 68 61 72 70 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d Data Ascii: --spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset-
2023-12-12 20:38:16 UTC	1369	IN	Data Raw: 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 7b 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 20 3e 20 2a 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 7b 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 20 3e 20 2a 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 Data Ascii: isplay: flex;}body .is-layout-flex{flex-wrap: wrap;align-items: center;}body .is-layout-flex > {margin: 0;}body .is-layout-grid{display: grid;}body .is-layout-grid > {margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns
2023-12-12 20:38:16 UTC	1369	IN	Data Raw: 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 Data Ascii: wp--preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-whi
2023-12-12 20:38:16 UTC	1369	IN	Data Raw: 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d Data Ascii: preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-
2023-12-12 20:38:16 UTC	1369	IN	Data Raw: 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 Data Ascii: dient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.22	49240	52.223.40.198	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:15 UTC	599	OUT	GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:15 UTC	592	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:15 GMT Content-Type: application/json Content-Length: 109 Connection: close server: Kestrel access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept access-control-allow-origin: https://mathblog.com cache-control: private expires: Thu, 11 Jan 2024 20:38:15 GMT set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:38:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none vary: Origin
2023-12-12 20:38:15 UTC	109	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 46 41 4c 53 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 33 2d 31 32 2d 31 32 54 32 30 3a 33 38 3a 31 35 22 7d Data Ascii: {"TDID":"3311a7f3-c44c-4d38-8196-dca4c2b0f8ec","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2023-12-12T20:38:15"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.22	49246	3.230.74.156	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:16 UTC	1277	OUT	GET /usersync/sync?origin=https://mathblog.com&src=//exchange.mediavine.com&s2sVersion=production&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22centro%22%3Atrue%2C%22emx_digital%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%7D HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:17 UTC	1126	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 5367 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache Set-Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:38:17 GMT; Secure; SameSite=None Set-Cookie: mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:38:17 GMT; Secure; SameSite=None Set-Cookie: am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:38:17 GMT; Secure; SameSite=None Set-Cookie: am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:38:17 GMT; Secure; SameSite=None
2023-12-12 20:38:17 UTC	5367	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 0a 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 3a 20 27 73 79 6e 63 55 72 6c 73 27 2c 0a 20 20 20 20 20 20 20 20 74 6f 6b 65 6e 73 3a 20 7b 22 6d 76 5f 75 75 69 64 22 3a 22 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 7d 2c 0a 20 20 20 20 20 20 20 20 73 79 6e 63 55 72 6c 73 3a 20 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f Data Ascii: <script> window.parent.postMessage({ message: 'syncUrls', tokens: {"mv_uuid":"6120f800-992e-11ee-8a65-3f15d911ca60","version":"invalidate-verizon-pushes"}, syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.22	49248	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:16 UTC	1238	OUT	GET /2WOFDurG0lJJ.js?ts=26386 HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.0.1702413486.0.0.0; _ga=GA1.1.1980800170.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; am_tokens=null
2023-12-12 20:38:17 UTC	942	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:17 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-request-id: 21fe0b1f644b9ee89aa7eff949a33b84 x-presslabs-stats: desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: max-age=31536000 CF-Cache-Status: MISS Last-Modified: Tue, 12 Dec 2023 20:38:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vfbH3kIQGkU%2Fs%2FDDMN%2BZfXSLyNpjbcSeOYgrrTIGOpPH2R6nyr7lVv7i%2Bs0g3MiVSPYT%2Fg8dRBfsJCWKT5%2BZ3T4rZxpTm%2Bao4Xyah%2F0Z6AUYPli9fWCssiyF2lpNxQI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c5243ddc74ac-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:17 UTC	82	IN	Data Raw: 34 63 0d 0a 2f 2f 20 74 68 69 73 20 62 65 61 63 6f 6e 20 69 73 20 75 73 65 64 20 62 79 20 50 72 65 73 73 6c 61 62 73 20 66 6f 72 20 6d 65 74 72 69 63 20 63 6f 6d 70 75 74 61 74 69 6f 6e 73 20 6f 6e 20 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 0a 0d 0a Data Ascii: 4c// this beacon is used by Presslabs for metric computations on mathblog.com
2023-12-12 20:38:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.22	49251	35.244.193.51	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:17 UTC	733	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1---&b=1&g=wO%2BZMA%2FYawPipMinqc8CXvDYcoUq3KBxFo%2FbBkaLyP0%3D HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true
2023-12-12 20:38:17 UTC	362	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://mathblog.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Tue, 12 Dec 2023 20:38:17 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:38:17 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.22	49252	74.119.119.139	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:17 UTC	675	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&cw=1&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:17 UTC	475	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:38:17 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: https://mathblog.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 895782 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:38:17 UTC	374	IN	Data Raw: 31 36 41 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 4f 6b 71 50 72 46 39 6c 52 57 56 59 52 6a 46 4d 55 44 42 5a 61 53 55 79 52 6c 42 6f 56 55 78 53 52 47 31 6a 56 6b 4e 75 51 55 78 5a 63 6e 68 57 52 31 64 47 55 31 46 32 63 47 4a 42 64 56 5a 46 63 31 5a 50 4e 56 68 4a 64 58 42 6d 53 7a 52 56 53 32 39 49 4e 47 4a 6a 63 30 38 33 59 6b 78 46 65 45 6f 34 63 6e 4a 72 57 55 4a 52 64 6b 70 6e 52 6e 6b 30 56 48 4a 4e 57 54 4e 48 59 55 31 76 55 58 4e 31 4d 7a 64 4a 63 6c 42 52 64 32 39 69 62 43 55 79 52 6c 4a 58 57 56 67 78 52 79 55 79 52 6c 49 30 4d 48 46 4a 4f 44 64 6d 55 57 6c 42 52 6b 5a 35 63 48 4e 46 4e 41 22 2c 22 62 69 64 49 64 22 3a 22 74 4e 57 69 77 31 38 6c 4d 6b 5a 48 53 44 56 68 65 69 55 79 52 6c 6c 53 65 48 64 32 65 47 35 4c 51 6b 6c 73 56 31 5a 51 61 56 Data Ascii: 16A{"bundle":"OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA","bidId":"tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.22	49258	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:17 UTC	1382	OUT	POST /wp-admin/admin-ajax.php HTTP/1.1 Host: mathblog.com Connection: keep-alive Content-Length: 27 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://mathblog.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.0.1702413486.0.0.0; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens=null; mediavine_session={%22depth%22:2%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; _ga=GA1.2.1980800170.1702413486
2023-12-12 20:38:17 UTC	27	OUT	Data Raw: 61 63 74 69 6f 6e 3d 6d 74 73 5f 76 69 65 77 5f 63 6f 75 6e 74 26 69 64 3d 33 34 Data Ascii: action=mts_view_count&id=34
2023-12-12 20:38:18 UTC	1354	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: https://mathblog.com access-control-allow-credentials: true x-robots-tag: noindex x-content-type-options: nosniff expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 referrer-policy: strict-origin-when-cross-origin x-frame-options: SAMEORIGIN x-request-id: 01e0d1dcf773488944bc9e3bdbd01963 access-control-allow-methods: HEAD,GET,POST,OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-WP-Nonce access-control-expose-headers: Content-Length,Content-Range,X-WP-Total,X-WP-TotalPages,Link x-presslabs-stats: desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wobB0vfgUaR0SiB8HT%2BMX43nsKEhPAaO2EKF4pzFdfo0ig7mpME6cGWjXG7Bwz%2B4Gicw5L03pHZmkUOSaaInHDbWZKIGDF%2BrkURfpZr%2Bq76AdD38ZvS6tYB%2FdbH%2Fom4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c5290ed5b3df-MIA
2023-12-12 20:38:18 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.22	49257	52.223.40.198	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:17 UTC	425	OUT	GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec
2023-12-12 20:38:17 UTC	354	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:17 GMT Content-Type: application/json Content-Length: 108 Connection: close server: Kestrel cache-control: private expires: Thu, 11 Jan 2024 20:38:17 GMT set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:38:17 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:38:17 UTC	108	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 54 52 55 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 33 2d 31 31 2d 31 32 54 32 30 3a 33 38 3a 31 37 22 7d Data Ascii: {"TDID":"3311a7f3-c44c-4d38-8196-dca4c2b0f8ec","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2023-11-12T20:38:17"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.22	49263	35.244.159.8	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:17 UTC	899	OUT	GET /w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId= HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	672	IN	HTTP/1.1 302 Found Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:38:18 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://u.openx.net/w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId= Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.22	49266	35.71.139.29	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:17 UTC	890	OUT	GET /getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	662	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:38:18 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.22	49267	172.64.151.101	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:17 UTC	882	OUT	GET /usermatchredir?s=193478&cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	1318	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Length: 0 Connection: close Location: /usermatchredir?cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D&s=193478&C=1 CF-Ray: 8348c52b3a64b3c1-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; Path=/; Domain=casalemedia.com; Expires=Wed, 11 Dec 2024 20:38:18 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=633; Path=/; Domain=casalemedia.com; Expires=Mon, 11 Mar 2024 20:38:18 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=633; Path=/; Domain=casalemedia.com; Expires=Mon, 11 Mar 2024 20:38:18 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=amNPTjXSubaLQChO%2BfK0%2BvuTN0ZTJnH2SPNtDt5d82iSgH42%2B%2BeeMPr1P1%2BG%2BEXdkvyNS1dE5rPpZ%2Fq0aCijR30eSxMLfZJlGuJ8Cojnwmpvwq%2BxG6Rxouc96tCOd69msx1LtcoYF6l06Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.22	49261	198.148.27.131	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:17 UTC	927	OUT	GET /bh/rtset?pid=562036&ev=6120f800-992e-11ee-8a65-3f15d911ca60&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpulsepoint%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	1133	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-5c6449b65-gvtwm Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=4trFhcvjylTg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 06-Dec-2024 20:38:18 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1oif\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Wed, 11-Dec-2024 20:38:18 GMT;Max-Age=31536000;SameSite=None Location: https://exchange.mediavine.com/usersync/redirect?partner=pulsepoint&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=4trFhcvjylTg&ev=6120f800-992e-11ee-8a65-3f15d911ca60&pid=562036 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=185d6ef7c41ed78f; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.22	49272	104.110.176.23	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:17 UTC	953	OUT	GET /cksync.php?cs=19&type=mdv&ovsid=6120f800-992e-11ee-8a65-3f15d911ca60&us_privacy=1---&redirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediadotnet%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%3Cvsid%3E HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	1031	IN	HTTP/1.1 302 Moved Temporarily Server: Apache Content-Length: 154 Content-Type: text/html Location: https://exchange.mediavine.com/usersync/redirect?partner=mediadotnet&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3454150986930039084V10 Set-Cookie: visitor-id=3454150986930039084V10; Expires=Wed, 11 Dec 2024 20:38:18 GMT; domain=.media.net; Path=/; sameSite=none; secure=true Set-Cookie: data-mv=6120f800-992e-11ee-8a65-3f15d911ca60~~19;Expires=Wed, 11 Dec 2024 20:38:18 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 x-mnet-hl2: E Expires: Tue, 12 Dec 2023 20:38:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 12 Dec 2023 20:38:18 GMT Connection: close
2023-12-12 20:38:18 UTC	154	IN	Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 41 6e 20 65 72 72 6f 72 20 28 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 29 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><TITLE>Error Page</TITLE></HEAD><BODY>An error (302 Moved Temporarily) has occurred in response to this request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.22	49268	216.22.16.5	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:17 UTC	704	OUT	GET /api/sync?callerId=8 HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	269	IN	HTTP/1.1 200 OK content-length: 872 content-type: text/html date: Tue, 12 Dec 2023 20:38:18 GMT set-cookie: pid=2527372694113908282; expires=Sat, 11 Jan 2025 20:37:18 GMT; domain=smartadserver.com; path=/; samesite=None; secure; samesite=none connection: close
2023-12-12 20:38:18 UTC	872	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 73 6d 61 72 74 6d 65 64 69 61 26 70 61 72 74 6e 65 72 49 64 3d 32 35 32 37 33 37 32 36 39 34 31 31 33 39 30 38 32 38 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 20 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 67 65 74 3f 70 3d 4d 35 30 31 39 39 31 36 34 38 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 25 32 46 72 65 64 69 72 25 32 46 25 Data Ascii: <html><head></head><body><img src="//exchange.mediavine.com/usersync/redirect?partner=smartmedia&partnerId=2527372694113908282&gdpr=0&gdpr_consent=" /><img src="https://a.audrte.com/get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.22	49271	67.202.105.21	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	948	OUT	GET /ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true
2023-12-12 20:38:18 UTC	792	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:38:18 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8340000C server: 33XP007 location: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X content-length: 0 date: Tue, 12 Dec 2023 20:38:18 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.22	49274	35.244.193.51	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	508	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1---&b=1&g=wO%2BZMA%2FYawPipMinqc8CXvDYcoUq3KBxFo%2FbBkaLyP0%3D HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true
2023-12-12 20:38:18 UTC	257	IN	HTTP/1.1 200 OK cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Tue, 12 Dec 2023 20:38:18 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:38:18 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.22	49262	151.101.1.108	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	697	OUT	GET /dmp/async_usersync.html HTTP/1.1 Host: acdn.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	552	IN	HTTP/1.1 200 OK Connection: close Content-Length: 53044 Server: nginx/1.18.0 (Ubuntu) Content-Type: text/html Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT ETag: "623de86a-cf34" Expires: Thu, 16 Nov 2023 08:05:33 GMT Cache-Control: max-age=86402 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 12 Dec 2023 20:38:18 GMT Age: 45105 X-Served-By: cache-lga13626-LGA, cache-pdk-kpdk1780051-PDK X-Cache: HIT, HIT X-Cache-Hits: 6980, 1 X-Timer: S1702413498.159668,VS0,VE2 Vary: Accept-Encoding
2023-12-12 20:38:18 UTC	1371	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 61 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 74 2c 61 2e 63 3d 65 2c 61 2e 64 3d 66 75 6e 63 74 69 6f Data Ascii: <!DOCTYPE html><html><head></head><body><script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=functio
2023-12-12 20:38:18 UTC	1371	IN	Data Raw: 6e 20 61 29 69 28 61 2c 6e 29 26 26 28 74 5b 6e 5d 3d 61 5b 6e 5d 29 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 65 2e 73 68 72 69 6e 6b 42 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 3f 74 3a 74 2e 73 75 62 61 72 72 61 79 3f 74 2e 73 75 62 61 72 72 61 79 28 30 2c 65 29 3a 28 74 2e 6c 65 6e 67 74 68 3d 65 2c 74 29 7d 3b 76 61 72 20 72 3d 7b 61 72 72 61 79 53 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 6e 2c 69 29 7b 69 66 28 65 2e 73 75 62 61 72 72 61 79 26 26 74 2e 73 75 62 61 72 72 61 79 29 74 2e 73 65 74 28 65 2e 73 75 62 61 72 72 61 79 28 61 2c 61 2b 6e 29 2c 69 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 74 5b 69 2b 72 5d 3d 65 5b 61 2b 72 5d 7d 2c Data Ascii: n a)i(a,n)&&(t[n]=a[n])}}return t},e.shrinkBuf=function(t,e){return t.length===e?t:t.subarray?t.subarray(0,e):(t.length=e,t)};var r={arraySet:function(t,e,a,n,i){if(e.subarray&&t.subarray)t.set(e.subarray(a,a+n),i);else for(var r=0;r<n;r++)t[i+r]=e[a+r]},
2023-12-12 20:38:18 UTC	1371	IN	Data Raw: 22 6f 6e 22 2b 74 2c 65 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 7c 7c 21 74 2e 70 75 72 70 6f 73 65 7c 7c 21 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 7c 7c 21 30 3d 3d 3d 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 31 5d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 64 61 74 61 3b 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 61 3d 65 2e 5f 5f 63 6d 70 52 65 74 75 72 6e 7c 7c 65 2e 5f 5f 74 63 66 61 70 69 52 65 74 75 72 6e 3b 61 26 26 28 22 67 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 22 3d 3d 3d 61 2e 63 6f 6d 6d 61 6e 64 26 26 61 2e 72 65 74 75 72 6e 56 61 6c 75 65 3f 68 28 61 2e 63 61 6c 6c 49 64 2c 61 2e 72 65 74 Data Ascii: "on"+t,e)},o=function(t){return!t\|\|!t.purpose\|\|!t.purpose.consents\|\|!0===t.purpose.consents[1]},l=function(t){var e=t.data;try{e=JSON.parse(e)}catch(t){}var a=e.__cmpReturn\|\|e.__tcfapiReturn;a&&("getConsentData"===a.command&&a.returnValue?h(a.callId,a.ret
2023-12-12 20:38:18 UTC	1371	IN	Data Raw: 33 3a 61 3b 64 6f 7b 72 3d 72 2b 28 69 3d 69 2b 65 5b 6e 2b 2b 5d 7c 30 29 7c 30 7d 77 68 69 6c 65 28 2d 2d 73 29 3b 69 25 3d 36 35 35 32 31 2c 72 25 3d 36 35 35 32 31 7d 72 65 74 75 72 6e 20 69 7c 72 3c 3c 31 36 7c 30 7d 7d 2c 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 5b 5d 2c 61 3d 30 3b 61 3c 32 35 36 3b 61 2b 2b 29 7b 74 3d 61 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 38 3b 6e 2b 2b 29 74 3d 31 26 74 3f 33 39 38 38 32 39 32 33 38 34 5e 74 3e 3e 3e 31 3a 74 3e 3e 3e 31 3b 65 5b 61 5d 3d 74 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 69 29 7b Data Ascii: 3:a;do{r=r+(i=i+e[n++]\|0)\|0}while(--s);i%=65521,r%=65521}return i\|r<<16\|0}},20:function(t,e,a){"use strict";var n=function(){for(var t,e=[],a=0;a<256;a++){t=a;for(var n=0;n<8;n++)t=1&t?3988292384^t>>>1:t>>>1;e[a]=t}return e}();t.exports=function(t,e,a,i){
2023-12-12 20:38:18 UTC	1371	IN	Data Raw: 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 62 69 6e 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6c 28 74 2c 74 2e 6c 65 6e 67 74 68 29 7d 2c 65 2e 62 69 6e 73 74 72 69 6e 67 32 62 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 65 77 20 6e 2e 42 75 66 38 28 74 2e 6c 65 6e 67 74 68 29 2c 61 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 61 3c 69 3b 61 2b 2b 29 65 5b 61 5d 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 61 2c 6e 2c 69 2c 72 2c 6f 3d 65 7c 7c 74 2e 6c 65 6e 67 74 68 2c 68 3d 6e 65 77 20 41 72 72 61 79 28 32 2a 6f 29 3b 66 6f 72 28 6e 3d 30 2c 61 3d 30 3b 61 3c 6f Data Ascii: urn e},e.buf2binstring=function(t){return l(t,t.length)},e.binstring2buf=function(t){for(var e=new n.Buf8(t.length),a=0,i=e.length;a<i;a++)e[a]=t.charCodeAt(a);return e},e.buf2string=function(t,e){var a,n,i,r,o=e\|\|t.length,h=new Array(2*o);for(n=0,a=0;a<o
2023-12-12 20:38:18 UTC	1371	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 61 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 61 3c 6e 3b 61 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 69 29 26 26 28 74 5b 69 5d 3d 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 69 3d 61 28 33 37 29 2c 72 3d 28 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e Data Ascii: tion(){return(n=Object.assign\|\|function(t){for(var e,a=1,n=arguments.length;a<n;a++)for(var i in e=arguments[a])Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i]);return t}).apply(this,arguments)};e.__esModule=!0;var i=a(37),r=(window&&window.location
2023-12-12 20:38:18 UTC	1371	IN	Data Raw: 65 3d 6e 6f 6e 65 3b 73 65 63 75 72 65 3b 70 61 74 68 3d 22 2b 69 2b 72 7d 2c 74 68 69 73 2e 77 72 69 74 65 50 69 78 65 6c 4d 61 70 54 6f 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 70 69 78 65 6c 4d 61 70 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 65 2e 70 69 78 65 6c 4d 61 70 5b 74 5d 2c 6e 3d 61 2e 69 64 2c 69 3d 61 2e 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3b 72 65 74 75 72 6e 7b 69 64 3a 6e 2c 73 79 6e 63 5f 73 74 61 72 74 3a 61 2e 73 79 6e 63 5f 73 74 61 72 74 2c 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3a 69 7d 7d 29 2c 61 3d 69 2e 65 6e 63 6f 64 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 76 65 72 73 69 6f 6e 3a 73 2c 70 69 78 65 6c 73 3a 74 Data Ascii: e=none;secure;path="+i+r},this.writePixelMapToCookie=function(){var t=Object.keys(e.pixelMap).map(function(t){var a=e.pixelMap[t],n=a.id,i=a.sync_complete;return{id:n,sync_start:a.sync_start,sync_complete:i}}),a=i.encode(JSON.stringify({version:s,pixels:t
2023-12-12 20:38:18 UTC	1371	IN	Data Raw: 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 50 69 78 65 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3b 74 3d 65 2e 70 69 78 65 6c 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 29 7b 76 61 72 20 61 3d 74 2e 69 64 3b 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 7c 7c 28 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 3d 74 2c 65 2e 6c 6f 61 64 50 69 78 65 6c 28 74 29 29 7d 7d 2c 74 68 69 73 2e 69 6d 70 62 75 73 55 72 6c 3d 74 7c 7c 64 2c 74 68 69 73 2e 70 69 78 65 6c 51 75 65 75 65 3d 5b 5d 2c 74 68 69 73 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 3d 7b 7d 2c 74 68 69 73 2e 70 69 78 65 6c 4d 61 70 3d 74 68 69 73 2e 72 65 61 64 50 69 78 65 6c 4d 61 70 46 72 6f 6d 43 6f 6f Data Ascii: .firstChild)},this.processPixels=function(){for(var t;t=e.pixelQueue.shift();){var a=t.id;e.pixelRequestMap[a]\|\|(e.pixelRequestMap[a]=t,e.loadPixel(t))}},this.impbusUrl=t\|\|d,this.pixelQueue=[],this.pixelRequestMap={},this.pixelMap=this.readPixelMapFromCoo
2023-12-12 20:38:18 UTC	1371	IN	Data Raw: 29 3e 3e 38 29 2c 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 32 35 35 26 61 29 29 2c 65 7d 7d 2c 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 66 6f 72 28 74 3d 53 74 72 69 6e 67 28 74 29 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 74 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3e 32 35 35 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 61 3d 22 22 3b 66 6f 72 28 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 3d 33 29 7b 76 61 72 20 6e 3d 5b 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 5d 3b 6e 5b 30 5d 3d 74 2e 63 68 61 72 43 6f 64 Data Ascii: )>>8),e+=String.fromCharCode(255&a)),e}},40:function(t,e,a){"use strict";t.exports=function(t){var e;for(t=String(t),e=0;e<t.length;e++)if(t.charCodeAt(e)>255)return null;var a="";for(e=0;e<t.length;e+=3){var n=[void 0,void 0,void 0,void 0];n[0]=t.charCod
2023-12-12 20:38:18 UTC	1371	IN	Data Raw: 65 77 20 45 72 72 6f 72 28 73 5b 61 5d 29 3b 69 66 28 65 2e 68 65 61 64 65 72 26 26 6e 2e 64 65 66 6c 61 74 65 53 65 74 48 65 61 64 65 72 28 74 68 69 73 2e 73 74 72 6d 2c 65 2e 68 65 61 64 65 72 29 2c 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 7b 76 61 72 20 5f 3b 69 66 28 5f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 69 63 74 69 6f 6e 61 72 79 3f 72 2e 73 74 72 69 6e 67 32 62 75 66 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 42 75 66 66 65 72 5d 22 3d 3d 3d 6c 2e 63 61 6c 6c 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 65 2e 64 69 63 74 69 6f 6e 61 72 79 2c 28 61 3d 6e 2e 64 65 66 6c 61 74 65 53 65 74 44 69 63 Data Ascii: ew Error(s[a]);if(e.header&&n.deflateSetHeader(this.strm,e.header),e.dictionary){var _;if(_="string"==typeof e.dictionary?r.string2buf(e.dictionary):"[object ArrayBuffer]"===l.call(e.dictionary)?new Uint8Array(e.dictionary):e.dictionary,(a=n.deflateSetDic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.22	49275	52.22.5.155	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	1207	OUT	GET /usersync.min.js?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D If-None-Match: W/"3217-18c5aeae8c1" If-Modified-Since: Mon, 11 Dec 2023 22:06:33 GMT
2023-12-12 20:38:18 UTC	352	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 12823 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: no-cache, private Accept-Ranges: bytes Last-Modified: Sun, 10 Dec 2023 21:54:17 GMT ETag: W/"3217-18c55b94fd8"
2023-12-12 20:38:18 UTC	12823	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 75 73 65 72 73 79 6e 63 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 33 34 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 76 61 72 20 69 2c 6f 2c 72 3b 76 6f 69 64 20 30 3d 3d 3d 28 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 69 3d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 6e 3d 7b 7d 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 6e 5b 69 5d 3d 74 5b 69 5d 7d 72 65 74 75 72 Data Ascii: /! For license information please see usersync.min.js.LICENSE.txt /(()=>{var e={34:(e,n,t)=>{var i,o,r;void 0===(o="function"==typeof(i=r=function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var i in t)n[i]=t[i]}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.22	49269	3.231.76.254	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	867	OUT	GET /usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	362	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 2981 Connection: close Server: nginx Set-Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b; Domain=.gumgum.com; Expires=Wed, 11 Dec 2024 20:38:18 GMT; Path=/; Secure; SameSite=None ETag: "0bf6efeb88aee59f7b5c580ade5903179" Timing-Allow-Origin: *
2023-12-12 20:38:18 UTC	2981	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 67 75 6d 67 75 6d 32 26 75 73 65 72 5f 69 64 3d 75 5f 37 65 36 61 33 63 36 65 2d 65 63 36 34 2d 34 32 37 32 2d 62 31 32 62 2d 31 66 64 33 65 64 33 61 32 33 37 62 Data Ascii: <html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/><img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.22	49265	34.199.146.203	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	901	OUT	GET /pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	836	IN	HTTP/1.1 302 Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=3zzUbmittUiV3rjzJy9H%7C1702339200000%7C0; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:38:18 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Location: https://exchange.mediavine.com/usersync/redirect?partner=yieldmo&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3zzUbmittUiV3rjzJy9H&gdpr=&gdpr_consent=&us_privacy=1--- Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.22	49270	172.240.155.68	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	876	OUT	GET /ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D HTTP/1.1 Host: sync.colossusssp.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	736	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:38:18 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: gtm_usr=77ed72d2-2d26-4504-96ec-f9c2a46444c1; path=/; domain=.colossusssp.com; expires=Wed, 11 Dec 2024 20:38:18 GMT;SameSite=None;Secure Set-Cookie: lmg_r=15; path=/; domain=.colossusssp.com; expires=Wed, 11 Dec 2024 20:38:18 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://exchange.mediavine.com/usersync/redirect?partner=huddled_masses&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=77ed72d2-2d26-4504-96ec-f9c2a46444c1 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
2023-12-12 20:38:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.22	49277	74.119.119.139	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	444	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&cw=1&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	349	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:38:17 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 544102 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:38:18 UTC	382	IN	Data Raw: 31 37 32 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 46 6d 37 46 58 31 39 31 55 32 77 78 4e 48 6c 61 62 30 59 79 65 6d 35 43 56 6c 6f 79 57 58 70 52 4a 54 4a 43 4e 45 52 6d 64 6c 70 72 53 79 55 79 51 6e 42 51 4a 54 4a 43 65 54 4a 53 64 55 35 56 4e 46 46 72 61 30 39 4a 54 47 35 59 55 54 68 45 4a 54 4a 43 4d 6d 70 46 4d 6b 68 78 4d 32 39 6c 53 6b 35 34 61 53 55 79 52 6d 78 31 51 57 64 74 4e 32 52 33 55 44 5a 52 5a 55 52 31 65 54 46 6b 5a 47 56 55 55 6d 68 61 4e 55 46 32 5a 6e 6b 35 59 56 67 31 52 30 34 35 61 58 51 6c 4d 6b 59 77 53 6e 51 78 62 33 68 78 53 6e 4e 4c 53 6b 56 34 4f 54 42 34 61 45 35 44 54 33 42 4e 57 55 63 79 61 51 22 2c 22 62 69 64 49 64 22 3a 22 55 46 67 72 30 6c 39 48 53 32 56 77 63 32 46 68 64 6e 5a 43 64 6a 46 59 64 57 77 77 65 43 55 79 51 6e Data Ascii: 172{"bundle":"Fm7FX191U2wxNHlab0Yyem5CVloyWXpRJTJCNERmdlprSyUyQnBQJTJCeTJSdU5VNFFra09JTG5YUThEJTJCMmpFMkhxM29lSk54aSUyRmx1QWdtN2R3UDZRZUR1eTFkZGVUUmhaNUF2Znk5YVg1R045aXQlMkYwSnQxb3hxSnNLSkV4OTB4aE5DT3BNWUcyaQ","bidId":"UFgr0l9HS2Vwc2FhdnZCdjFYdWwweCUyQn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.22	49278	63.251.86.49	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	576	OUT	GET /www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Type: text/javascript Content-Length: 8895 Last-Modified: Mon, 31 Jul 2023 16:20:24 GMT Connection: close Vary: Accept-Encoding ETag: "64c7df48-22bf" Expires: Tue, 12 Dec 2023 21:38:18 GMT Cache-Control: max-age=3600 Cache-Control: must-revalidate Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type X-Robots-Tag: noindex X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:38:18 UTC	3777	IN	Data Raw: 2f 2a 20 73 6f 76 72 6e 5f 73 74 6e 64 61 6c 6e 65 5f 62 65 61 63 6f 6e 20 76 30 2e 30 2e 31 20 0a 55 70 64 61 74 65 64 20 3a 20 32 30 32 33 2d 30 37 2d 33 31 20 2a 2f 0a 77 69 6e 64 6f 77 2e 73 6f 76 72 6e 3d 77 69 6e 64 6f 77 2e 73 6f 76 72 6e 7c 7c 7b 7d 2c 73 6f 76 72 6e 2e 61 75 63 74 69 6f 6e 3d 73 6f 76 72 6e 2e 61 75 63 74 69 6f 6e 7c 7c 7b 7d 3b 6c 65 74 20 62 65 61 63 6f 6e 46 6c 61 67 3d 21 31 2c 63 6d 70 56 65 72 73 69 6f 6e 3d 30 3b 73 6f 76 72 6e 2e 61 75 63 74 69 6f 6e 3d 7b 64 6f 4e 6f 74 54 72 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6e 3d 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2c 74 3d 74 7c 7c 77 69 6e 64 6f 77 3b 76 61 72 20 65 3d 73 6f 76 72 6e 2e 61 75 63 74 69 6f 6e 2e 72 65 61 64 43 6f 6f 6b 69 65 28 22 74 72 61 63 6b 69 Data Ascii: /* sovrn_stndalne_beacon v0.0.1 Updated : 2023-07-31 */window.sovrn=window.sovrn\|\|{},sovrn.auction=sovrn.auction\|\|{};let beaconFlag=!1,cmpVersion=0;sovrn.auction={doNotTrack:function(n,t){n=n\|\|navigator,t=t\|\|window;var e=sovrn.auction.readCookie("tracki
2023-12-12 20:38:18 UTC	5118	IN	Data Raw: 2c 21 31 29 7d 2c 6c 6f 6f 6b 75 70 49 61 62 43 6f 6e 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6f 29 7b 6f 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 63 53 74 72 69 6e 67 3f 22 74 63 6c 6f 61 64 65 64 22 3d 3d 3d 65 2e 65 76 65 6e 74 53 74 61 74 75 73 7c 7c 22 75 73 65 72 61 63 74 69 6f 6e 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 65 2e 65 76 65 6e 74 53 74 61 74 75 73 7c 7c 22 63 6d 70 75 69 73 68 6f 77 6e 22 3d 3d 3d 65 2e 65 76 65 6e 74 53 74 61 74 75 73 26 26 65 2e 74 63 53 74 72 69 6e 67 2e 6c 65 6e 67 74 68 3e 30 26 26 21 30 3d 3d 3d 65 2e 70 75 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 3f 6e 28 65 29 3a 74 28 22 43 6f 6e 73 65 6e 74 20 73 74 72 69 6e 67 20 69 73 20 6e Data Ascii: ,!1)},lookupIabConsent:function(n,t){function e(e,o){o&&"string"==typeof e.tcString?"tcloaded"===e.eventStatus\|\|"useractioncomplete"===e.eventStatus\|\|"cmpuishown"===e.eventStatus&&e.tcString.length>0&&!0===e.purposeOneTreatment?n(e):t("Consent string is n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.22	49279	63.251.86.49	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	750	OUT	GET /pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:18 UTC	659	IN	HTTP/1.1 307 Temporary Redirect Connection: close Date: Tue, 12 Dec 2023 20:38:18 GMT Location: https://ap.lijit.com/pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID&sovrn_retry=true Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type X-Sovrn-Pod: ad_ap1dca1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.22	49280	35.71.139.29	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	934	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:38:18 UTC	602	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Length: 0 Connection: close Location: https://exchange.mediavine.com/usersync/redirect?partner=triplelift&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3571062816453612499566 Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:38:18 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.22	49281	35.244.159.8	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	963	OUT	GET /w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId= HTTP/1.1 Host: u.openx.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498
2023-12-12 20:38:18 UTC	631	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:38:18 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1702413498\|vMbwgag2gKhEvPkWgyiK; Version=1; Expires=Wed, 27-Dec-2023 20:38:18 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Type: text/html Content-Length: 1341 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:38:18 UTC	1252	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 6f 70 65 6e 78 26 75 75 69 64 3d 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 26 73 32 73 56 65 72 73 69 6f 6e 3d 70 72 6f 64 75 63 74 69 6f 6e 26 70 61 72 74 6e 65 72 49 64 3d 31 30 34 66 31 62 35 37 2d 39 37 65 39 2d 30 62 38 64 2d 30 64 35 37 2d 30 32 32 61 63 33 36 38 36 65 66 39 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 70 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9"><img src="https://up
2023-12-12 20:38:18 UTC	89	IN	Data Raw: 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6f 70 65 6e 78 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 73 63 22 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: tps://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.22	49285	172.64.151.101	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	946	OUT	GET /usermatchredir?cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D&s=193478&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:38:18 UTC	1147	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Length: 0 Connection: close Location: https://exchange.mediavine.com/usersync/redirect?partner=indexExchange&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=ZXjEurXK3YbtORulaCkY0QAA%26633 CF-Ray: 8348c52f1e9009ca-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; Path=/; Domain=casalemedia.com; Expires=Wed, 11 Dec 2024 20:38:18 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=633; Path=/; Domain=casalemedia.com; Expires=Mon, 11 Mar 2024 20:38:18 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JQ0w6C2sGHTFdoiqQil9wqI46CU%2BZZ0lgzrzkxzGaC%2FwFmhzBiPFXL%2BsOsMXZWaNBPZqI2ZwpXN1xSGqElL0KkzPnZsnMGhNSq1dbMUogTJCFvp4z0HbY7JupCozK4RFKV6LFIhc8SarnQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.22	49284	3.230.74.156	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	1420	OUT	GET /usersync/redirect?partner=pulsepoint&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=4trFhcvjylTg&ev=6120f800-992e-11ee-8a65-3f15d911ca60&pid=562036 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:18 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.22	49283	3.230.74.156	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	1380	OUT	GET /usersync/redirect?partner=mediadotnet&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3454150986930039084V10 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:19 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.22	49287	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	1603	OUT	GET /wp-admin/admin-ajax.php HTTP/1.1 Host: mathblog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; _gat_gtag_UA_192905992_1=1; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:2%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413496.0.0.0; _ga=GA1.1.1980800170.1702413486; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; cto_bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA; cto_bidid=tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNNlk2bnJzaVNzWGpPb2xpRWUlMkZHUWpBJTNEJTNE
2023-12-12 20:38:19 UTC	951	IN	HTTP/1.1 400 Bad Request Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-robots-tag: noindex expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 x-request-id: 979ed7da8cf619faebdb65817da5bad9 vary: Accept-Encoding x-presslabs-stats: MISS; desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hQtCmTPXGNh2lcyLOswFfdwteYazztjjzE8pTW5iNAuZyI3CJ1hgAnL%2B1Zp9%2F8SKN985jfpiOEgRoEE68txRpam%2FP3eABPXN7Ox0PQDmJGlDW0A%2FgaKy4AouPaPHcvM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c52fbc67741e-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:19 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2023-12-12 20:38:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.22	49286	3.230.74.156	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	1410	OUT	GET /usersync/redirect?partner=yieldmo&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3zzUbmittUiV3rjzJy9H&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:19 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.22	49291	3.230.74.156	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	1397	OUT	GET /usersync/redirect?partner=huddled_masses&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=77ed72d2-2d26-4504-96ec-f9c2a46444c1 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:19 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.22	49290	67.202.105.31	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	920	OUT	GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:19 UTC	856	IN	HTTP/1.1 307 location: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: uid=OTTukGV4xLvEI2PjCmMC3Q==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure referrer-policy: unsafe-url content-length: 0 date: Tue, 12 Dec 2023 20:38:18 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.22	49289	104.36.115.113	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:18 UTC	674	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=68913394&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:19 UTC	909	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157108:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:38:18 GMT Transfer-Encoding: chunked Connection: close
2023-12-12 20:38:19 UTC	2704	IN	Data Raw: 61 38 34 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 72 6b 71 4d 50 52 43 57 52 5a 71 77 6b 53 75 74 31 51 43 66 55 67 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 Data Ascii: a84PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=rkqMPRCWRZqwkSut1QCfUg%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.22	49292	63.251.86.49	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	812	OUT	GET /pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID&sovrn_retry=true HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb
2023-12-12 20:38:19 UTC	601	IN	HTTP/1.1 307 Temporary Redirect Connection: close Date: Tue, 12 Dec 2023 20:38:19 GMT Location: https://exchange.mediavine.com/usersync/redirect?partner=sovrn&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=Hz32hLZHBFKxs3xrQUqrw0Qb Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type X-Sovrn-Pod: ad_ap1dca1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.22	49296	3.230.74.156	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	1379	OUT	GET /usersync/redirect?partner=triplelift&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3571062816453612499566 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:19 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.22	49297	3.230.74.156	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	1390	OUT	GET /usersync/redirect?partner=indexExchange&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=ZXjEurXK3YbtORulaCkY0QAA%26633 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:19 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.22	49298	3.230.74.156	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	1284	OUT	GET /usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:19 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.22	49293	68.67.161.208	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	813	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:19 UTC	1151	IN	HTTP/1.1 307 Redirection Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA%3D%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D AN-X-Request-Uuid: d4979f32-5b17-41d8-9d51-a60132f4d5bd Set-Cookie: uuid2=8216955376890449583; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:38:19 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.22	49295	63.251.86.49	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	777	OUT	GET /beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb
2023-12-12 20:38:19 UTC	802	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:38:19 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtbexp=eJxdkDsOxEAIQ%2B8ydQpgGMC52mrvHiWiweUzHxt%2BC7luTdlhW4BrRUy2iSokpHLDnoITZxuIlr0MdARzoFqpOVNCJhTSQf3kWU58iGlf0VOM9p3qxCfiqwdx0o30NIw8%2Fwd0uUyv; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:38:19 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:38:19 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: text/html Vary: Accept-Encoding, User-Agent Content-Length: 4700 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:38:19 UTC	671	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 0a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 73 6f 76 72 6e 20 42 65 61 63 6f 6e 20 28 32 34 20 53 65 6e 74 20 2f 20 2d 31 20 4d 61 78 29 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 20 73 72 63 3d 27 68 74 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""https://www.w3.org/TR/html4/strict.dtd"><html><head><title>sovrn Beacon (24 Sent / -1 Max)</title></head><body><img class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0' src='htt
2023-12-12 20:38:19 UTC	4029	IN	Data Raw: 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 63 6d 73 2e 71 75 61 6e 74 73 65 72 76 65 2e 63 6f 6d 2f 70 69 78 65 6c 2f 70 2d 43 58 74 36 31 7a 4e 42 70 4b 55 74 31 2e 67 69 66 3f 69 64 6d 61 74 63 68 3d 30 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 Data Ascii: mg class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0' src='https://cms.quantserve.com/pixel/p-CXt61zNBpKUt1.gif?idmatch=0&gdpr=0&gdpr_consent='><img class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.22	49294	68.67.160.186	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	724	OUT	GET /getuid?https://exchange.mediavine.com/usersync/redirect?partner=appnexus&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:19 UTC	1167	IN	HTTP/1.1 307 Redirection Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dappnexus%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID AN-X-Request-Uuid: ba1a05b8-ee96-4c36-98aa-d27eb0f39907 Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:38:19 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.22	49304	3.225.218.10	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	644	OUT	GET /ups/58294/sync?_origin=1&uid=f0c208bb-f950-06a8-3e6f-2503e69ff72d HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:19 UTC	592	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=f0c208bb-f950-06a8-3e6f-2503e69ff72d&verify=true Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; Expires=Thu, 12 Dec 2024 02:38:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.22	49307	68.67.161.208	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	890	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA%3D%26piggybackCookie%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8216955376890449583
2023-12-12 20:38:19 UTC	1090	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=8216955376890449583&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 7f3ed97e-08ef-4f6f-8539-f84db09c117d Set-Cookie: uuid2=8216955376890449583; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:38:19 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.22	49310	3.230.74.156	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	1395	OUT	GET /usersync/redirect?partner=pubmatic&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:19 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.22	49308	67.202.105.32	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	963	OUT	GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 HTTP/1.1 Host: hde.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=OTTukGV4xLvEI2PjCmMC3Q==
2023-12-12 20:38:20 UTC	1033	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%227daaa56bb0%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure referrer-policy: unsafe-url content-type: text/html content-length: 1740 date: Tue, 12 Dec 2023 20:38:19 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2023-12-12 20:38:20 UTC	1740	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 5f 3d 31 37 30 32 34 31 33 34 39 39 38 33 38 2e 26 72 69 3d 30 30 31 34 30 30 30 30 30 30 78 76 45 66 77 41 41 45 26 67 64 70 72 5f 35 38 3d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 Data Ascii: <!doctype html><html><head></head><body><script>(function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://ssc-cms.33across.com/ps/?_=1702413499838.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.22	49300	68.67.160.114	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	631	OUT	GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:19 UTC	1062	IN	HTTP/1.1 307 Redirection Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dapn%26i%3D%24UID AN-X-Request-Uuid: 661253af-2015-4ffc-8691-0eac643d185e Set-Cookie: uuid2=4050678938750962602; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:38:19 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 672.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.22	49311	52.22.5.155	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	1273	OUT	GET /usersync/redirect?partner=sovrn&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=Hz32hLZHBFKxs3xrQUqrw0Qb HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:20 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.22	49301	35.211.178.172	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	673	OUT	GET /sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:19 UTC	830	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1--- Set-Cookie: tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; path=/; expires=Wed, 11-Dec-2024 20:38:19 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1702413499; path=/; expires=Wed, 11-Dec-2024 20:38:19 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1702413499; path=/; expires=Wed, 11-Dec-2024 20:38:19 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1702413499; path=/; expires=Wed, 11-Dec-2024 20:38:19 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.22	49305	35.211.178.172	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	849	OUT	GET /check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:19 UTC	1008	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:38:19 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 Set-Cookie: tuuid=52e9468d-7612-40fb-a140-7429121814ba; path=/; expires=Wed, 11-Dec-2024 20:38:19 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1702413499; path=/; expires=Wed, 11-Dec-2024 20:38:19 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1702413499; path=/; expires=Wed, 11-Dec-2024 20:38:19 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1702413499; path=/; expires=Wed, 11-Dec-2024 20:38:19 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.22	49314	34.111.113.62	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	664	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:20 UTC	1087	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:19 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:38:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:38:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3371&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.22	49316	68.67.161.208	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	541	OUT	GET /async_usersync?cbfn=queuePixels HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acdn.adnxs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:20 UTC	945	IN	HTTP/1.1 307 Redirection Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:38:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels AN-X-Request-Uuid: aa8a7e47-19c0-4f94-bbf6-f365f7ed24f9 Set-Cookie: uuid2=7440927298114728342; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:38:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.22	49313	169.197.150.7	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:19 UTC	717	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:20 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_1296d48b0e654caba2d72; Max-Age=47260800; SameSite=None; Expires=Wed, 11 Jun 2025 20:38:20 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220231212%22%7D; Max-Age=47260800; SameSite=None; Expires=Wed, 11 Jun 2025 20:38:20 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Tue, 12 Dec 2023 20:38:20 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.22	49312	209.54.182.161	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	801	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AE4A8C3D-1096-459A-B091-2BADD5009F52&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:20 UTC	815	IN	HTTP/1.1 302 Found Server: Server Date: Tue, 12 Dec 2023 20:38:20 GMT Content-Length: 0 Connection: close x-amz-rid: FFYWJRN49YC2AVP22V1H Set-Cookie: ad-id=AwbPq6dwREYYqZr4aa5dxqw\|t; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 20:38:20 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AE4A8C3D-1096-459A-B091-2BADD5009F52&redir=true&gdpr=0&gdpr_consent=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.22	49320	68.67.160.186	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	799	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dappnexus%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353
2023-12-12 20:38:20 UTC	1104	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:38:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://exchange.mediavine.com/usersync/redirect?partner=appnexus&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=2638779048715878353 AN-X-Request-Uuid: 7780c714-006f-41b4-8dd1-e8c95327a3e4 Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:38:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.22	49317	52.223.40.198	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	791	OUT	GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec
2023-12-12 20:38:20 UTC	508	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:20 GMT Content-Length: 193 Connection: close server: Kestrel location: https://usersync.gumgum.com/usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:38:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwjYxqeioNe9PBAFOAFaBmd1bWd1bWAC; expires=Thu, 12 Dec 2024 20:38:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:38:20 UTC	193	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 3e 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://usersync.gumgum.com/usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec">https://usersync.gumgum.com/usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.22	49323	3.230.74.156	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	1243	OUT	GET /usersync/redirect?partner=smartmedia&partnerId=2527372694113908282&gdpr=0&gdpr_consent= HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:20 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.22	49319	185.184.8.90	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	696	OUT	GET /cm-notify?pi=gumgum HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:20 UTC	718	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:38:20 GMT vary: Accept-Encoding set-cookie: u=wa1Gajuky8DdE2iDg0B6;Path=/;Domain=.creativecdn.com;Expires=Wed, 11-Dec-2024 20:38:20 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: g=wa1Gajuky8DdE2iDg0B6_1702413500542;Path=/;Domain=.creativecdn.com;Expires=Wed, 11-Dec-2024 20:38:20 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1702413500;Path=/;Domain=.creativecdn.com;Expires=Wed, 11-Dec-2024 20:38:20 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=gumgum&tc=1 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.22	49338	35.211.178.172	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	675	OUT	GET /sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:20 UTC	187	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:38:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2023-12-12 20:38:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.22	49315	52.86.218.58	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	717	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:20 UTC	388	IN	HTTP/1.1 303 See Other Date: Tue, 12 Dec 2023 20:38:20 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Tue, 12 Dec 2023 20:48:20 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.22	49330	52.223.40.198	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	693	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec
2023-12-12 20:38:20 UTC	625	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:20 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent= set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:38:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwiCzbL6ide9PBAFGAEgASgCMgsIgMC1p6DXvTwQBTgBWghwdWJtYXRpY2AC; expires=Thu, 12 Dec 2024 20:38:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:38:20 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.22	49332	185.184.8.90	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	611	OUT	GET /cm-notify?pi=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:20 UTC	738	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:38:20 GMT vary: Accept-Encoding set-cookie: u=cbwfSD2W6hDiwC0lhEhO;Path=/;Domain=.creativecdn.com;Expires=Wed, 11-Dec-2024 20:38:20 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: g=cbwfSD2W6hDiwC0lhEhO_1702413500822;Path=/;Domain=.creativecdn.com;Expires=Wed, 11-Dec-2024 20:38:20 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1702413500;Path=/;Domain=.creativecdn.com;Expires=Wed, 11-Dec-2024 20:38:20 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=sovrn&gdpr=0&gdpr_consent=&tc=1 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.22	49369	68.67.161.208	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	693	OUT	GET /getuid?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D92%263pid%3D%24UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=4050678938750962602
2023-12-12 20:38:21 UTC	1024	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ce.lijit.com/merge?pid=92&3pid=4050678938750962602&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 7c310aaa-5731-432d-8af8-7a02527f97ec Set-Cookie: uuid2=4050678938750962602; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:38:21 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.22	49327	35.71.139.29	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	700	OUT	GET /xuid?mid=7976&xuid=AE4A8C3D-1096-459A-B091-2BADD5009F52&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:38:21 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:38:21 GMT; Secure; SameSite=None
2023-12-12 20:38:21 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.22	49372	209.54.182.161	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	848	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=AE4A8C3D-1096-459A-B091-2BADD5009F52&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AwbPq6dwREYYqZr4aa5dxqw\|t
2023-12-12 20:38:21 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: Z3RGJXBETVFX5S60ZMJ7 Set-Cookie: ad-id=AwbPq6dwREYYqZr4aa5dxqw; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 20:38:21 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2029 20:38:21 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-12 20:38:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.22	49333	68.67.161.208	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	663	OUT	GET /getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=4050678938750962602
2023-12-12 20:38:21 UTC	1013	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://us-u.openx.net/w/1.0/sd?id=537072399&val=4050678938750962602 AN-X-Request-Uuid: 577ff6f8-7237-4865-b2a3-5c2a10efc775 Set-Cookie: uuid2=4050678938750962602; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:38:21 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.22	49343	3.225.218.10	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	763	OUT	GET /ups/58294/sync?_origin=1&uid=f0c208bb-f950-06a8-3e6f-2503e69ff72d&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
2023-12-12 20:38:21 UTC	608	IN	HTTP/1.1 204 No Content Date: Tue, 12 Dec 2023 20:38:21 GMT Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=18za~2fkk;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 11-Dec-2024 20:38:21 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; Expires=Thu, 12 Dec 2024 02:38:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.22	49348	63.251.86.49	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	817	OUT	GET /dsp/google/cookiematch/beacon?gdpr=0&gdpr_consent= HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxdkDsOxEAIQ%2B8ydQpgGMC52mrvHiWiweUzHxt%2BC7luTdlhW4BrRUy2iSokpHLDnoITZxuIlr0MdARzoFqpOVNCJhTSQf3kWU58iGlf0VOM9p3qxCfiqwdx0o30NIw8%2Fwd0uUyv
2023-12-12 20:38:21 UTC	528	IN	HTTP/1.1 302 Found Connection: close Date: Tue, 12 Dec 2023 20:38:21 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_hm=SHozMmhMWkhCRkt4czN4clFVcXJ3MFFi&gdpr=0 Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type X-Sovrn-Pod: ad_ap1dca1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.22	49331	52.223.40.198	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	907	OUT	GET /track/cmf/generic?ttd_pid=1mahn14&ttd_puid=6120f800-992e-11ee-8a65-3f15d911ca60&ttd_tpi=1&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthe_trade_desk%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%25%25TDID%25%25 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec
2023-12-12 20:38:21 UTC	560	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Length: 289 Connection: close server: Kestrel location: https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:38:21 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwi2_5mroNe9PBAFOAFaBzFtYWhuMTRgAg..; expires=Thu, 12 Dec 2024 20:38:21 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:38:21 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 74 68 65 5f 74 72 61 64 65 5f 64 65 73 6b 26 74 79 70 65 3d 70 69 78 65 6c 26 70 61 72 74 6e 65 72 49 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 3e 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 74 68 65 5f 74 72 61 64 65 5f 64 65 73 6b 26 74 79 70 65 3d 70 69 78 65 6c 26 70 61 72 74 6e 65 72 49 64 3d 33 33 31 31 61 37 Data Ascii: Redirecting to: <a href="https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec">https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=3311a7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.22	49326	35.211.178.172	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	942	OUT	GET /ul_cb/check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid_lu=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d
2023-12-12 20:38:21 UTC	640	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://exchange.mediavine.com/usersync/redirect?partner=mediagrid&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d Set-Cookie: tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; path=/; expires=Wed, 11-Dec-2024 20:38:21 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1702413501; path=/; expires=Wed, 11-Dec-2024 20:38:21 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.22	49371	35.244.193.51	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	744	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1--- HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:38:21 UTC	362	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://mathblog.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Tue, 12 Dec 2023 20:38:20 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:38:21 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.22	49356	104.21.41.99	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	595	OUT	GET /update?cats=687,687,687,687,687 HTTP/1.1 Host: sda.fyi Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_sda=2023-12-12_687_10
2023-12-12 20:38:21 UTC	773	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: application/json Content-Length: 25 Connection: close Access-Control-Allow-Origin: https://mathblog.com Set-Cookie: mv_sda=2023-12-12_687_15; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9g6aRUfaDllR4b8sTqJN18Un7hiIVVXimhRpPoGQMOQibHmXu86Bg3XvTXNDPa2vt9hhAn1VYm7ZuE0eSDN7q2zb9AtMUlqMY2hpdKu2R212F%2Ft8ZdlMFT%2Fu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c53d4aaa74b4-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:21 UTC	25	IN	Data Raw: 7b 22 32 30 32 33 2d 31 32 2d 31 32 22 3a 7b 22 36 38 37 22 3a 31 35 7d 7d Data Ascii: {"2023-12-12":{"687":15}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.22	49375	52.22.5.155	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	1271	OUT	GET /usersync/redirect?partner=appnexus&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=2638779048715878353 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:21 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.22	49340	209.54.182.161	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	661	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=86d0f74f-3d90-871b-ad46-669e190fc8a4 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	783	IN	HTTP/1.1 302 Found Server: Server Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Length: 0 Connection: close x-amz-rid: KXDHX5SWFPXMN6G29ZSY Set-Cookie: ad-id=A1rhKsjaRkteiTTzE0HaIE4\|t; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 20:38:21 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=86d0f74f-3d90-871b-ad46-669e190fc8a4&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.22	49339	68.67.161.208	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	590	OUT	GET /bounce?%2Fasync_usersync%3Fcbfn%3DqueuePixels HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acdn.adnxs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=7440927298114728342
2023-12-12 20:38:21 UTC	930	IN	HTTP/1.1 200 OK Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: ff8ec274-49cb-4030-8572-9f11d3475ff5 Set-Cookie: uuid2=7440927298114728342; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:38:21 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.22	49350	69.90.254.78	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	640	OUT	GET /tum?umid=27&uid=Hz32hLZHBFKxs3xrQUqrw0Qb&gdpr=0&gdpr_consent= HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	609	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=863968679737; Domain=.acuityplatform.com; Expires=Wed, 11-Dec-2024 20:38:21 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+/uGdmVyc2lvbsL7; Domain=.acuityplatform.com; Expires=Wed, 11-Dec-2024 20:38:21 GMT; Path=/; SameSite=None; Secure Location: https://ce.lijit.com/merge?pid=66&3pid=863968679737

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.22	49361	34.98.64.218	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	953	OUT	GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498\|vMbwgag2gKhEvPkWgyiK
2023-12-12 20:38:21 UTC	645	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:38:21 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1702413498.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI; Version=1; Expires=Wed, 27-Dec-2023 20:38:21 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: text/html Content-Length: 782 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:38:21 UTC	782	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 37 36 26 33 70 69 64 3d 62 32 65 38 35 35 66 32 2d 63 62 38 65 2d 30 36 65 63 2d 32 61 66 34 2d 35 32 61 66 30 39 38 64 33 63 31 36 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 2f 73 79 6e 63 3f 6e 69 64 3d 32 36 38 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6f 72 74 61 2e 63 6c 69 63 6b 61 67 79 2e 63 6f 6d 2f 70 69 78 65 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://ce.lijit.com/merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16&gdpr=0&gdpr_consent="><img src="https://sync.srv.stackadapt.com/sync?nid=268"><img src="https://aorta.clickagy.com/pixe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.22	49374	3.230.74.156	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	1920	OUT	GET /usersync/sync?origin=https://mathblog.com&src=//exchange.mediavine.com&s2sVersion=production&mv_uuid=6120f800-992e-11ee-8a65-3f15d911ca60&version=invalidate-verizon-pushes&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22centro%22%3Atrue%2C%22emx_digital%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%7D HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:21 UTC	1126	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 3967 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache Set-Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:38:21 GMT; Secure; SameSite=None Set-Cookie: mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:38:21 GMT; Secure; SameSite=None Set-Cookie: am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:38:21 GMT; Secure; SameSite=None Set-Cookie: am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:38:21 GMT; Secure; SameSite=None
2023-12-12 20:38:21 UTC	3967	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 0a 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 3a 20 27 73 79 6e 63 55 72 6c 73 27 2c 0a 20 20 20 20 20 20 20 20 74 6f 6b 65 6e 73 3a 20 7b 22 6d 76 5f 75 75 69 64 22 3a 22 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 7d 2c 0a 20 20 20 20 20 20 20 20 73 79 6e 63 55 72 6c 73 3a 20 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f Data Ascii: <script> window.parent.postMessage({ message: 'syncUrls', tokens: {"mv_uuid":"6120f800-992e-11ee-8a65-3f15d911ca60","version":"invalidate-verizon-pushes"}, syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.22	49345	34.200.65.202	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	644	OUT	GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	591	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA&verify=true Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBL3EeGUCEJGz65uH_HGwY-J62P2LHp0FEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAlix49UuR3BzPtgCAG87mnI; Expires=Thu, 12 Dec 2024 02:38:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.22	49355	34.111.113.62	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	750	OUT	GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054
2023-12-12 20:38:21 UTC	1227	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:21 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:38:21 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:38:21 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sat, 10 Feb 2024 20:38:21 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%252C%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.22	49318	211.120.53.204	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	697	OUT	GET /aux/idsync?proto=gumgum HTTP/1.1 Host: tg.socdm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	836	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Length: 0 Connection: close Cache-Control: private Location: https://usersync.gumgum.com/usersync?b=sus&i=ZXjEvcCo5tEAAK927qYAAAAA P3P: CP="See also http://www.scaleout.jp/privacy/" Set-Cookie: SOC=ZXjEvcCo5tEAAK927qYAAAAA; path=/; expires=Thu, 11-Dec-25 20:38:21 GMT; domain=socdm.com; secure; SameSite=None X-SO-Ads-Time: 4 X-SO-HostName: a-ad40018.dc2p.scaleout.jp X-SO-LB-Hostname: a-tgng40013.dc2p.scaleout.jp X-SO-LB-Data: {"ban":false,"clean_query":"\/aux\/idsync?proto=gumgum","cluster_id":0,"gdpr":false,"ipv4":"102.129.152.212","key":"ZXjEvcCo5tEAAK927qYAAAAA","privacy_sensitive":false,"uid":"","upstream_id":"a-ad40018"} X-SO-Key: ZXjEvcCo5tEAAK927qYAAAAA X-SO-IP: 102.129.152.212 X-SO-Cluster-ID: 0 X-SO-Upstream-ID: a-ad40018

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.22	49362	34.98.64.218	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:20 UTC	788	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498\|vMbwgag2gKhEvPkWgyiK
2023-12-12 20:38:21 UTC	555	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:38:21 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://id.rlcdn.com/464246.gif?partner_uid=8bc0f454-ec7d-0a81-3231-64fa48a7629c Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.22	49341	52.223.40.198	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	687	OUT	GET /track/cmf/openx?oxid=de068b32-213a-3ce1-6d48-e409713c0344&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec
2023-12-12 20:38:21 UTC	543	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Length: 335 Connection: close server: Kestrel location: https://us-u.openx.net/w/1.0/sd?id=537072971&val=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=de068b32-213a-3ce1-6d48-e409713c0344&gdpr=0&gdpr_consent= set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:38:21 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=IAEoAg..; expires=Thu, 12 Dec 2024 20:38:21 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:38:21 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 26 74 74 64 5f 70 75 69 64 3d 64 65 30 36 38 62 33 32 2d 32 31 33 61 2d 33 63 65 31 2d 36 64 34 38 2d 65 34 30 39 37 31 33 63 30 33 34 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=de068b32-213a-3ce1-6d48-e409713c0344&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=3311a7f3-c44c-4d38-8196-dca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.22	49366	162.248.18.37	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	1040	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=8216955376890449583&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71
2023-12-12 20:38:21 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:38:21 GMT; path=/ Set-Cookie: PugT=1702413501; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:38:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:38:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.22	49353	69.194.240.13	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	615	OUT	GET /usersync2/rmpssp?sub=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	643	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:38:21 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22zdxidn%22%3A%222069.80%22%7D; path=/; expires=Wed, 11 Dec 2024 20:38:21 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmpssp?sub=sovrn&zcc=1&cb=1702413501086 etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:38:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.22	49352	35.236.220.17	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	724	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	961	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=3D4546CEEFDB42BD8A492CB96DA2690E; Path=/; domain=simpli.fi; Expires=Thu, 12-Dec-24 20:38:21 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=3D4546CEEFDB42BD8A492CB96DA2690E; Path=/; domain=simpli.fi; Expires=Thu, 12-Dec-24 20:38:21 GMT; Secure; Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:3D4546CEEFDB42BD8A492CB96DA2690E Expires: Mon, 11 Dec 2023 20:38:21 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2023-12-12 20:38:21 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.22	49334	34.251.97.118	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	726	OUT	GET /get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	970	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Tue, 12 Dec 2023 20:38:21 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=ar101281&google_hm=Z2hoaGxMS2Y4T21UakNxMXgtT2JWTTFtdw==&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZGdoaGhsTEtmOE9tVGpDcTF4LU9iVk0xbXciLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn0seyJuYW1lIjoic21hcnQifV19%26gdpr%3D0%26gdpr_consent%3D Server: nginx/1.22.1 Set-Cookie: arcki2=ghhhlLKf8OmTjCq1x-ObVM1mw!20220908!1702413501136!ip#102.129.152.212; Max-Age=1296000; Expires=Wed, 27 Dec 2023 20:38:21 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.22	49351	35.236.220.17	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	614	OUT	GET /lj_match?r=1702413499453&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	891	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=EAF92472013E4E6D9A751C1DA567BFFF; Path=/; domain=simpli.fi; Expires=Thu, 12-Dec-24 20:38:21 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=EAF92472013E4E6D9A751C1DA567BFFF; Path=/; domain=simpli.fi; Expires=Thu, 12-Dec-24 20:38:21 GMT; Secure; Location: https://ce.lijit.com/merge?pid=2&3pid=EAF92472013E4E6D9A751C1DA567BFFF Expires: Mon, 11 Dec 2023 20:38:21 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2023-12-12 20:38:21 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.22	49365	44.207.23.148	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	736	OUT	GET /sync/openx/4ac1ed76-b196-aea8-5c9f-f2fc8e6bce0d?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
2023-12-12 20:38:21 UTC	778	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; Expires=Thu, 12 Dec 2024 02:38:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2023-12-12 20:38:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.22	49377	74.119.119.150	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	780	OUT	GET /dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=0&gdpr_consent= HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	701	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:38:20 GMT server: Kestrel cache-control: no-cache expires: Tue, 12 Dec 2023 00:00:00 GMT location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=79&partneruserid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31; expires=Sun, 05 Jan 2025 20:38:21 GMT; domain=.criteo.com; path=/; secure; samesite=none x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1117788 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.22	49346	18.214.147.224	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	764	OUT	GET /server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId={PUB_USER_ID} HTTP/1.1 Host: ice.360yield.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	746	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: tuuid=9bfa3b33-914e-4ccc-b6f8-0f92df65339b; Expires=Mon, 11 Mar 2024 20:38:21 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: tuuid_lu=1702413501; Expires=Mon, 11 Mar 2024 20:38:21 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://ice.360yield.com/ul_cb/server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=%7BPUB_USER_ID%7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.22	49380	34.98.64.218	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	835	OUT	GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498\|vMbwgag2gKhEvPkWgyiK
2023-12-12 20:38:21 UTC	556	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:38:21 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://usersync.gumgum.com/usersync?b=opx&i=293b2f42-092f-04b7-0a33-f4e4b96c0202 Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.22	49381	44.207.23.148	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	716	OUT	GET /sync/gumgum?gdpr=&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
2023-12-12 20:38:21 UTC	852	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Length: 0 Connection: close Location: https://usersync.gumgum.com/usersync?b=oth&i=y-i5Vemz9E2pcAB3qsj5sq4a92wTUal4GhEbBQ~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; Expires=Thu, 12 Dec 2024 02:38:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.22	49347	44.194.252.189	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	821	OUT	GET /api/v1/dsync/mediavine?exid=6120f800-992e-11ee-8a65-3f15d911ca60us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	456	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702; Path=/; Domain=kargo.com; Expires=Wed, 11 Dec 2024 20:38:21 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2023-12-12 20:38:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.22	49383	68.67.160.114	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	696	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dapn%26i%3D%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353
2023-12-12 20:38:21 UTC	1009	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://usersync.gumgum.com/usersync?b=apn&i=2638779048715878353 AN-X-Request-Uuid: 938a3742-7c96-4add-8a87-b582f59d09ac Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:38:21 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 672.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.22	49384	35.211.178.172	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	766	OUT	GET /ul_cb/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid_lu=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d
2023-12-12 20:38:21 UTC	534	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //c1.adform.net/serving/cookie/match/?party=24&bidswitch_ssp_id=gumgum2 Set-Cookie: tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; path=/; expires=Wed, 11-Dec-2024 20:38:21 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1702413501; path=/; expires=Wed, 11-Dec-2024 20:38:21 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.22	49370	74.119.119.139	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	792	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA&cw=1&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://mathblog.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	519	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:38:20 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://mathblog.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 217888 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:38:21 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.22	49382	169.197.150.7	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	764	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_1296d48b0e654caba2d72; CDIPARTNERS=%7B%221%22%3A%2220231212%22%7D
2023-12-12 20:38:21 UTC	645	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://usersync.gumgum.com/usersync?b=dit&i=di_1296d48b0e654caba2d72 set-cookie: CDIUSER=di_1296d48b0e654caba2d72; Max-Age=47260800; SameSite=None; Expires=Wed, 11 Jun 2025 20:38:21 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220231212%22%2C%22142%22%3A%2220231212%22%7D; Max-Age=47260800; SameSite=None; Expires=Wed, 11 Jun 2025 20:38:21 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Tue, 12 Dec 2023 20:38:21 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.22	49373	192.184.69.201	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	644	OUT	GET /pixel/p-EtBqU4Lj3YbAv.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	723	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://rtb-csync.smartadserver.com/redir/?partnerid=80&gdpr=0&partneruserid=-EvU3K1KgYDjSNfc-BrOgvkc0NbjTtuG_UhBsDl0 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EBcBDQHSKoir0QA; expires=Mon, 11-Mar-2024 20:38:21 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=6578c4bd-6486d-f7b32-08b36; expires=Sat, 11-Jan-2025 20:38:21 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.22	49349	192.184.69.201	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	631	OUT	GET /pixel/p-CXt61zNBpKUt1.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	718	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://ce.lijit.com/merge?pid=43&gdpr=0&gdpr_consent=&us_privacy=&3pid=UjViGgc0N0ZJNmFDBjN4FgcyYRZJMzcSVzX0p7v6 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EFMBDQHSKt-owQA; expires=Mon, 11-Mar-2024 20:38:21 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=6578c4bd-64ab3-4c244-3b035; expires=Sat, 11-Jan-2025 20:38:21 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.22	49344	40.76.134.238	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	833	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%20AE4A8C3D-1096-459A-B091-2BADD5009F52&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:21 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: text/html Content-Length: 581 Connection: close
2023-12-12 20:38:21 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.22	49376	52.207.45.55	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	786	OUT	GET /usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:38:21 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:38:21 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.22	49405	44.207.23.148	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	758	OUT	GET /sync/pubmatic/AE4A8C3D-1096-459A-B091-2BADD5009F52?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
2023-12-12 20:38:21 UTC	778	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; Expires=Thu, 12 Dec 2024 02:38:21 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2023-12-12 20:38:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.22	49397	52.86.218.58	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	759	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2023-12-12 20:38:21 UTC	795	IN	HTTP/1.1 303 See Other Date: Tue, 12 Dec 2023 20:38:21 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCM3drN0s4WWtBQUJUQUQ4OGdKUQ&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AAB3wk7K8YkAABTAD88gJQ; Domain=bidr.io; expires=Fri, 10 Jan 2025 15:38:21 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Fri, 10 Jan 2025 15:38:21 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.22	49407	209.54.182.161	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	708	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=86d0f74f-3d90-871b-ad46-669e190fc8a4&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A1rhKsjaRkteiTTzE0HaIE4\|t
2023-12-12 20:38:21 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: FWX563QPARFPQ9NP2TWZ Set-Cookie: ad-id=A1rhKsjaRkteiTTzE0HaIE4; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 20:38:21 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2029 20:38:21 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-12 20:38:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.22	49395	67.202.105.21	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	1353	OUT	GET /ps/?us_privacy=1---&ts=1702413499838.7&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:38:22 UTC	735	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:38:22 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP001 location: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=1---&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D25%26external_user_id%3D content-length: 0 date: Tue, 12 Dec 2023 20:38:21 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.22	49402	162.248.18.37	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	954	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71
2023-12-12 20:38:21 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:38:21 GMT; path=/ Set-Cookie: PugT=1702413501; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:38:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:38:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.22	49396	3.231.76.254	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	784	OUT	GET /usersync?b=adf&i=8152669554817989381&gdpr=&gdpr_consent= HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:38:22 UTC	263	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:38:21 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Timing-Allow-Origin: *
2023-12-12 20:38:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.22	49392	3.225.218.10	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	965	OUT	GET /ups/58350/sync?redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
2023-12-12 20:38:22 UTC	724	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=190u~2fkk;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 11-Dec-2024 20:38:22 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ssc-cms.33across.com/ps/?xi=99&us_privacy=&xu=y-3hIIPuNE2uEpAN8318tuW.r.Mw5CiIR.~A Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; Expires=Thu, 12 Dec 2024 02:38:22 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.22	49386	54.146.33.131	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	767	OUT	GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:22 UTC	460	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:38:21 GMT Location: https://usersync.gumgum.com/usersync?b=vnt&i=6a94c3ca-b8e5-480a-b19e-d5eecf790ed8 Set-Cookie: cu=6a94c3ca-b8e5-480a-b19e-d5eecf790ed8\|1702413501938; Path=/; Domain=ipredictive.com; Expires=Wed, 11 Dec 2024 20:38:21 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 1a6fa7e8-33a3-4076-af2b-0c10b2c9c469 Content-Length: 108 Connection: Close
2023-12-12 20:38:22 UTC	108	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 76 6e 74 26 61 6d 70 3b 69 3d 36 61 39 34 63 33 63 61 2d 62 38 65 35 2d 34 38 30 61 2d 62 31 39 65 2d 64 35 65 65 63 66 37 39 30 65 64 38 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=vnt&i=6a94c3ca-b8e5-480a-b19e-d5eecf790ed8">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.22	49399	52.22.5.155	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	1052	OUT	GET /usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:22 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.22	49398	185.184.8.90	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	786	OUT	GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u=wa1Gajuky8DdE2iDg0B6; g=wa1Gajuky8DdE2iDg0B6_1702413500542; ts=1702413500
2023-12-12 20:38:22 UTC	402	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:38:22 GMT vary: Accept-Encoding location: https://usersync.gumgum.com/usersync?b=rth&i=V1qRjAw1eTvnuk3RzYeT6Du-qBGtYdD9FvwI8chbqsg&pi=gumgum&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Tue, 12 Dec 2023 20:38:22 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.22	49390	67.202.105.21	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:21 UTC	1018	OUT	GET /ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:38:22 UTC	792	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:38:22 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8340000A server: 33XP006 location: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X content-length: 0 date: Tue, 12 Dec 2023 20:38:21 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.22	49400	52.22.5.155	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	1040	OUT	GET /usersync/redirect?partner=sovrn&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=Hz32hLZHBFKxs3xrQUqrw0Qb HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:22 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.22	49401	52.22.5.155	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	997	OUT	GET /usersync/redirect?partner=smartmedia&partnerId=2527372694113908282&gdpr=0&gdpr_consent= HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:38:22 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.22	49422	52.207.45.55	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	774	OUT	GET /usersync?b=sus&i=ZXjEvcCo5tEAAK927qYAAAAA HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:38:22 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:38:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.22	49428	35.244.154.8	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	627	OUT	GET /464246.gif?partner_uid=8bc0f454-ec7d-0a81-3231-64fa48a7629c HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:22 UTC	729	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://id.rlcdn.com/1000.gif?memo=CPaqHBIvCisIARCUaxokOGJjMGY0NTQtZWM3ZC0wYTgxLTMyMzEtNjRmYTQ4YTc2MjljEAAaDQi-ieOrBhIFCOgHEABCAEoA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=Fz/V4byI2Z3hm+q0GvVSlp/Bhyt0rrFWvUk+bF1wm9I=; Path=/; Domain=rlcdn.com; Expires=Wed, 11 Dec 2024 20:38:22 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 10 Feb 2024 20:38:22 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.22	49243	172.67.164.44	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	396	OUT	GET /update?cats=687,687,687,687,687 HTTP/1.1 Host: sda.fyi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_sda=2023-12-12_687_15
2023-12-12 20:38:22 UTC	756	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: application/json Content-Length: 25 Connection: close Access-Control-Allow-Origin: * Set-Cookie: mv_sda=2023-12-12_687_20; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VZZwLml1v93sj7PpmNgrK7MAfreGcClU6CmXgkZUCNZPx7WM2B%2F5nDy5B58yeMnweE09nyZ1bNXl1gXQKHIhbxlvnkWwrQJqdmwuaX8QtTzc%2FaRHQYCoc%2Bg0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c546cdcb09c6-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:38:22 UTC	25	IN	Data Raw: 7b 22 32 30 32 33 2d 31 32 2d 31 32 22 3a 7b 22 36 38 37 22 3a 32 30 7d 7d Data Ascii: {"2023-12-12":{"687":20}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.22	49434	8.28.7.83	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	1047	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEFcZYvZrLd3rzdzlSqdT4SY&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; PugT=1702413501
2023-12-12 20:38:22 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:02:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:02:26 GMT; path=/ Set-Cookie: PugT=1702378946; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:02:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:38:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.22	49429	35.244.159.8	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	1012	OUT	GET /w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId= HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI
2023-12-12 20:38:22 UTC	669	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:38:22 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1702413498.3.1\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi; Version=1; Expires=Wed, 27-Dec-2023 20:38:22 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: text/html Content-Length: 1053 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:38:22 UTC	1053	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 6f 70 65 6e 78 26 75 75 69 64 3d 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 26 73 32 73 56 65 72 73 69 6f 6e 3d 70 72 6f 64 75 63 74 69 6f 6e 26 70 61 72 74 6e 65 72 49 64 3d 31 30 34 66 31 62 35 37 2d 39 37 65 39 2d 30 62 38 64 2d 30 64 35 37 2d 30 32 32 61 63 33 36 38 36 65 66 39 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9"><img src="https://cm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.22	49432	8.28.7.83	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	989	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; PugT=1702413501
2023-12-12 20:38:23 UTC	160	IN	HTTP/1.1 502 Bad Gateway Server: nginx Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 568 Connection: close
2023-12-12 20:38:23 UTC	568	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 Data Ascii: <html><head><title>502 Bad Gateway</title></head><body bgcolor="white"><center><h1>502 Bad Gateway</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.22	49409	34.98.64.218	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	713	OUT	GET /w/1.0/sd?id=537072399&val=4050678938750962602 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498\|vMbwgag2gKhEvPkWgyiK
2023-12-12 20:38:22 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:38:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.22	49404	70.42.32.223	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	746	OUT	GET /usersync/gumgum/?puid=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:22 UTC	623	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 217 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=&gdpr_consent=&puid=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&s=2&us_privacy=1--- P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=1DASsxNWMH7qY1-EP1FQ; Path=/; Domain=zemanta.com; Expires=Wed, 11 Dec 2024 20:38:22 GMT; Max-Age=31536000; Secure; SameSite=None Date: Tue, 12 Dec 2023 20:38:22 GMT
2023-12-12 20:38:22 UTC	217	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 67 75 6d 67 75 6d 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 25 32 46 75 73 65 72 73 79 6e 63 25 33 46 62 25 33 44 7a 65 6d 25 32 36 69 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 75 69 64 3d 75 5f 37 65 36 61 33 63 36 65 2d 65 63 36 34 2d 34 32 37 32 2d 62 31 32 62 2d 31 66 64 33 65 64 33 61 32 33 37 62 26 61 6d 70 3b 73 3d 32 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=&gdpr_consent=&puid=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&s=2&us_privacy=1---">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.22	49406	34.98.64.218	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	761	OUT	GET /w/1.0/sd?id=537073061&val=7558899468789434902&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI
2023-12-12 20:38:23 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:38:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.22	49389	54.146.33.131	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	666	OUT	GET /d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID} HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:22 UTC	464	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:38:22 GMT Location: https://us-u.openx.net/w/1.0/sd?id=537073028&val=8a323469-881a-408a-9858-5975924b765a Set-Cookie: cu=8a323469-881a-408a-9858-5975924b765a\|1702413502774; Path=/; Domain=ipredictive.com; Expires=Wed, 11 Dec 2024 20:38:22 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: bb439f4b-bac8-4f0b-9d9c-61b63852e0d5 Content-Length: 112 Connection: Close
2023-12-12 20:38:22 UTC	112	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 33 30 32 38 26 61 6d 70 3b 76 61 6c 3d 38 61 33 32 33 34 36 39 2d 38 38 31 61 2d 34 30 38 61 2d 39 38 35 38 2d 35 39 37 35 39 32 34 62 37 36 35 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://us-u.openx.net/w/1.0/sd?id=537073028&val=8a323469-881a-408a-9858-5975924b765a">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.22	49424	52.223.40.198	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	762	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=IAEoAg..
2023-12-12 20:38:23 UTC	619	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Length: 359 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%2C%2C set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:38:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFAoFdGFwYWQSCwjgrICPite9PBAFGAEgASgCMgsI6qKDvKDXvTwQBTgBWgV0YXBhZGAC; expires=Thu, 12 Dec 2024 20:38:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:38:23 UTC	359	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 26 74 74 64 5f 70 75 69 64 3d 65 33 31 62 38 65 30 65 2d 62 65 61 32 2d 34 39 35 66 2d 38 64 32 37 2d 63 32 32 37 65 65 38 32 65 30 35 34 25 32 43 25 32 43 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%2C%2C">https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.22	49430	3.231.76.254	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	971	OUT	GET /usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b If-None-Match: "0bf6efeb88aee59f7b5c580ade5903179"
2023-12-12 20:38:23 UTC	216	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 2770 Connection: close Server: nginx ETag: "00136e8549f4df6242a5485fb4b7a2e8e" Timing-Allow-Origin: *
2023-12-12 20:38:23 UTC	2770	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 67 75 6d 67 75 6d 32 26 75 73 65 72 5f 69 64 3d 75 5f 37 65 36 61 33 63 36 65 2d 65 63 36 34 2d 34 32 37 32 2d 62 31 32 62 2d 31 66 64 33 65 64 33 61 32 33 37 62 Data Ascii: <html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/><img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.22	49427	18.164.84.102	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	585	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AwbPq6dwREYYqZr4aa5dxqw; ad-privacy=0
2023-12-12 20:38:23 UTC	642	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 276088 Connection: close Date: Tue, 12 Dec 2023 20:38:23 GMT Last-Modified: Tue, 05 Dec 2023 22:47:10 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 c34bd35d24f6df50307d1ac92d0f6110.cloudfront.net (CloudFront), 1.1 bfcf96734b4cc9857b114ec0d9419dc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 ETag: "ccfaf15c322e197d2e6d0d6bd5642adc" Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: 7IqUKrXHghb_6l8IEnKf66lwGmA1LJcOm0PJbZ3LsCOkCLLwmYOtLw==
2023-12-12 20:38:23 UTC	15742	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 33 2e 31 31 32 39 2e 32 30 35 35 20 2d 20 32 30 32 33 2d 31 31 2d 32 39 20 32 30 3a 35 35 3a 30 37 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v23.1129.2055 - 2023-11-29 20:55:07 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n i
2023-12-12 20:38:23 UTC	11090	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 50 2e 69 6e 63 6c 75 64 65 73 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 62 65 20 77 72 69 74 74 65 6e 20 74 6f 20 62 72 6f 77 73 65 72 20 73 74 6f 72 61 67 65 22 29 29 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 2e 63 6f 6e 63 61 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 2c 22 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 77 72 69 74 74 61 62 6c 65 20 74 6f 20 62 72 6f 77 73 65 72 20 73 74 6f 72 61 67 65 22 29 29 3b 74 68 69 73 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 6c 6f 63 Data Ascii: ction(t,e){if(!P.includes(t))throw new Error("".concat(t," is not allowed to be written to browser storage"));if("string"!=typeof e)throw new Error("".concat(JSON.stringify(e)," must be a string to be writtable to browser storage"));this.globalContext.loc
2023-12-12 20:38:23 UTC	16384	IN	Data Raw: 68 69 73 2e 74 68 72 6f 77 4f 6e 49 6e 66 69 6e 69 74 65 4c 6f 6f 70 28 29 2c 42 28 29 26 26 45 2e 69 6e 66 6f 28 27 23 20 44 69 73 70 61 74 63 68 20 66 72 6f 6d 20 6d 65 74 68 6f 64 20 22 27 2e 63 6f 6e 63 61 74 28 75 2e 6d 65 74 68 6f 64 2c 27 22 20 6f 6e 20 65 76 65 6e 74 20 22 27 29 2e 63 6f 6e 63 61 74 28 6e 75 6c 6c 21 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 75 2e 65 76 65 6e 74 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 30 5d 2e 74 79 70 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 22 75 6e 64 65 66 69 6e 65 64 22 2c 27 22 20 77 69 74 68 20 73 6f 75 72 63 65 20 22 27 29 2e 63 6f 6e 63 61 74 28 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 75 2e 65 76 65 6e 74 73 29 Data Ascii: his.throwOnInfiniteLoop(),B()&&E.info('# Dispatch from method "'.concat(u.method,'" on event "').concat(null!==(n=null===(e=u.events)\|\|void 0===e?void 0:e[0].type)&&void 0!==n?n:"undefined",'" with source "').concat(null!==(i=null===(r=null===(o=u.events)
2023-12-12 20:38:23 UTC	16384	IN	Data Raw: 6c 65 2e 6d 61 72 67 69 6e 54 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 22 2e 63 6f 6e 63 61 74 28 63 5b 31 5d 2c 22 70 78 22 29 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 72 61 6d 65 62 6f 72 64 65 72 22 2c 22 30 22 29 3b 76 61 72 20 64 3d 6e 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 76 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6c 6f 63 61 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 22 61 66 74 65 72 65 6e 64 Data Ascii: le.marginTop="0",u.style.height="".concat(c[1],"px"),u.style.width="100%",u.setAttribute("scrolling","no"),u.setAttribute("frameborder","0");var d=n.globalContext.document.createElement("div"),v=null!==(i=null==o?void 0:o.location)&&void 0!==i?i:"afterend
2023-12-12 20:38:23 UTC	16384	IN	Data Raw: 2c 6e 75 6c 6c 5d 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 5b 32 5d 7d 7d 29 29 7d 29 29 7d 76 61 72 20 5a 74 3d 7b 67 6f 6f 67 6c 65 5f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 5f 73 65 74 3a 22 67 6f 6f 67 6c 65 2f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 2f 73 65 74 22 2c 67 6f 6f 67 6c 65 5f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3a 22 67 6f 6f 67 6c 65 2f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 2f 69 6e 69 74 69 61 6c 69 7a 65 22 7d 2c 24 74 3d 6e 65 77 20 4d 61 70 28 5b 5b 5a 74 2e 67 6f 6f 67 6c 65 5f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 5f 73 65 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 3b 72 65 74 75 72 6e 20 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 2c 75 28 76 6f 69 64 20 Data Ascii: ,null];case 4:return[2]}}))}))}var Zt={google_secureSignals_set:"google/secureSignals/set",google_secureSignals_initialize:"google/secureSignals/initialize"},$t=new Map([[Zt.google_secureSignals_set,function(t){var e=t.account;return t.customEvent,u(void
2023-12-12 20:38:23 UTC	16384	IN	Data Raw: 68 74 6d 6c 22 2c 44 45 46 41 55 4c 54 5f 54 49 4d 45 4f 55 54 3a 32 65 33 2c 44 54 42 5f 50 41 54 48 3a 22 2f 65 2f 64 74 62 22 2c 54 45 53 54 5f 50 41 54 48 5f 46 52 45 51 55 45 4e 43 59 3a 30 2c 54 45 53 54 5f 42 49 44 5f 45 4e 44 50 4f 49 4e 54 3a 6e 75 6c 6c 2c 54 45 53 54 5f 50 41 54 48 5f 4c 41 54 45 4e 43 59 5f 53 41 4d 50 4c 45 5f 52 41 54 45 3a 6e 75 6c 6c 2c 50 49 58 45 4c 5f 50 41 54 48 3a 22 2f 78 2f 70 78 2f 22 2c 4c 41 54 45 4e 43 59 5f 53 41 4d 50 4c 49 4e 47 5f 52 41 54 45 3a 31 2c 43 4f 4f 4b 49 45 5f 4d 41 54 43 48 5f 44 45 4c 41 59 3a 30 2c 4d 41 58 5f 53 4c 4f 54 53 5f 50 45 52 5f 52 45 51 55 45 53 54 3a 31 2c 53 4c 4f 54 5f 52 45 4e 44 45 52 5f 53 41 4d 50 4c 49 4e 47 5f 52 41 54 45 3a 31 2c 46 45 41 54 55 52 45 5f 53 41 4d 50 4c 49 Data Ascii: html",DEFAULT_TIMEOUT:2e3,DTB_PATH:"/e/dtb",TEST_PATH_FREQUENCY:0,TEST_BID_ENDPOINT:null,TEST_PATH_LATENCY_SAMPLE_RATE:null,PIXEL_PATH:"/x/px/",LATENCY_SAMPLING_RATE:1,COOKIE_MATCH_DELAY:0,MAX_SLOTS_PER_REQUEST:1,SLOT_RENDER_SAMPLING_RATE:1,FEATURE_SAMPLI
2023-12-12 20:38:23 UTC	16384	IN	Data Raw: 28 65 2c 6e 29 7b 67 28 74 68 69 73 2c 74 29 2c 76 28 74 68 69 73 2c 22 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 22 2c 76 6f 69 64 20 30 29 2c 76 28 74 68 69 73 2c 22 73 74 61 74 65 43 6f 6e 74 61 69 6e 65 72 22 2c 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 3d 65 2c 74 68 69 73 2e 73 74 61 74 65 43 6f 6e 74 61 69 6e 65 72 3d 6e 7d 72 65 74 75 72 6e 20 4f 28 74 2c 5b 7b 6b 65 79 3a 22 70 72 69 76 61 63 79 52 65 67 75 6c 61 74 69 6f 6e 41 70 70 6c 69 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3d 3d 28 65 3d 6c 2e 61 2e 72 65 61 64 53 74 6f 72 65 64 43 6f 6e 73 65 6e 74 44 61 74 61 28 74 68 69 73 2e 73 74 61 74 65 43 6f 6e 74 61 69 6e 65 72 29 29 3f 76 6f 69 64 20 30 3a 65 2e Data Ascii: (e,n){g(this,t),v(this,"globalContext",void 0),v(this,"stateContainer",void 0),this.globalContext=e,this.stateContainer=n}return O(t,[{key:"privacyRegulationApplies",value:function(){var t=null==(e=l.a.readStoredConsentData(this.stateContainer))?void 0:e.
2023-12-12 20:38:23 UTC	16384	IN	Data Raw: 65 6f 75 74 29 3a 6e 29 3f 4f 28 65 2e 63 66 67 2e 44 45 46 41 55 4c 54 5f 54 49 4d 45 4f 55 54 29 3a 6e 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 61 2e 62 29 28 74 2c 22 67 65 74 54 69 6d 65 6f 75 74 22 2c 7b 6d 61 6b 65 56 69 73 69 62 6c 65 54 6f 41 6c 6c 55 73 65 72 73 3a 21 30 7d 29 2c 32 65 33 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 69 66 28 21 72 29 74 72 79 7b 74 28 65 29 7d 63 61 74 63 68 28 65 29 7b 4f 62 6a 65 63 74 28 61 2e 62 29 28 65 2c 22 65 78 65 63 75 74 65 46 75 6e 63 74 69 6f 6e 4f 6e 63 65 57 69 74 68 54 69 6d 65 6f 75 74 2d 77 72 61 70 70 65 64 46 75 6e 63 74 69 6f 6e 22 2c 7b 6d 61 6b 65 56 69 73 69 62 6c 65 54 6f 41 Data Ascii: eout):n)?O(e.cfg.DEFAULT_TIMEOUT):n}catch(t){return Object(a.b)(t,"getTimeout",{makeVisibleToAllUsers:!0}),2e3}}function j(t,e){var n,r=!1;function o(e){if(!r)try{t(e)}catch(e){Object(a.b)(e,"executeFunctionOnceWithTimeout-wrappedFunction",{makeVisibleToA
2023-12-12 20:38:23 UTC	16384	IN	Data Raw: 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 52 5b 74 5d 29 7d 29 29 2e 6a 6f 69 6e 28 22 26 22 29 29 2c 47 3d 28 4e 2e 63 6f 6f 6b 69 65 73 50 61 72 61 6d 73 26 26 28 48 2b 3d 4e 2e 63 6f 6f 6b 69 65 73 50 61 72 61 6d 73 29 2c 22 22 2e 63 6f 6e 63 61 74 28 69 2e 74 29 2e 63 6f 6e 63 61 74 28 5f 29 2e 63 6f 6e 63 61 74 28 50 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 48 29 29 3b 72 65 74 75 72 6e 20 72 2e 61 2e 64 69 73 70 61 74 63 68 28 7b 74 79 70 65 3a 22 52 45 43 4f 52 44 5f 41 41 58 5f 52 45 51 5f 50 52 4f 50 22 2c 62 69 64 52 65 71 49 44 3a 74 2e 62 69 64 52 65 71 49 44 2c 6b 65 79 3a 22 75 72 6c 4c 65 6e 67 74 68 22 2c 76 61 6c 75 65 3a 47 2e 6c 65 6e 67 74 68 7d 29 2c 47 7d 63 61 74 Data Ascii: "".concat(t,"=").concat(R[t])})).join("&")),G=(N.cookiesParams&&(H+=N.cookiesParams),"".concat(i.t).concat(_).concat(P,"/").concat(E,"?").concat(H));return r.a.dispatch({type:"RECORD_AAX_REQ_PROP",bidReqID:t.bidReqID,key:"urlLength",value:G.length}),G}cat
2023-12-12 20:38:24 UTC	16384	IN	Data Raw: 3a 22 70 65 72 66 22 2c 76 61 6c 75 65 3a 4f 62 6a 65 63 74 28 55 74 2e 63 29 28 77 69 6e 64 6f 77 2c 6e 29 7d 29 29 2c 4f 62 6a 65 63 74 28 52 74 2e 6b 29 28 74 2c 22 63 66 67 22 29 26 26 50 74 2e 61 2e 64 69 73 70 61 74 63 68 28 7b 74 79 70 65 3a 22 53 45 54 5f 43 46 47 22 2c 63 66 67 3a 74 2e 63 66 67 7d 29 2c 69 74 28 74 2c 65 29 7d 63 61 74 63 68 28 74 29 7b 4f 62 6a 65 63 74 28 4d 74 2e 62 29 28 74 2c 22 5f 64 6f 4f 6e 41 61 78 52 65 73 70 6f 6e 73 65 22 2c 7b 6d 61 6b 65 56 69 73 69 62 6c 65 54 6f 41 6c 6c 55 73 65 72 73 3a 21 30 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 28 74 29 7b 74 72 79 7b 4f 62 6a 65 63 74 28 5a 74 2e 62 29 28 74 29 2c 42 28 74 29 2c 4f 62 6a 65 63 74 28 52 74 2e 6b 29 28 74 2c 22 63 66 67 22 29 26 26 59 74 2e 61 2e 67 65 74 Data Ascii: :"perf",value:Object(Ut.c)(window,n)})),Object(Rt.k)(t,"cfg")&&Pt.a.dispatch({type:"SET_CFG",cfg:t.cfg}),it(t,e)}catch(t){Object(Mt.b)(t,"_doOnAaxResponse",{makeVisibleToAllUsers:!0})}}function V(t){try{Object(Zt.b)(t),B(t),Object(Rt.k)(t,"cfg")&&Yt.a.get

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.22	49448	52.207.45.55	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	808	OUT	GET /usersync?b=rth&i=V1qRjAw1eTvnuk3RzYeT6Du-qBGtYdD9FvwI8chbqsg&pi=gumgum&tc=1 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:38:22 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:38:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.22	49385	52.86.155.246	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	612	OUT	GET /sync?nid=1&gdpr=&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:22 UTC	1336	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:38:22 GMT Location: https://usersync.gumgum.com/usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212 Set-Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgSvPgr5.L3735JdPN%2FFxQGjexpyN9NR%2Fbo9uvMiHG8mJCapyhY8; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgSvPgr5.L3735JdPN%2FFxQGjexpyN9NR%2Fbo9uvMiHG8mJCapyhY8; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 129 Connection: Close
2023-12-12 20:38:22 UTC	129	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 73 74 61 26 61 6d 70 3b 69 3d 30 2d 31 38 37 66 63 39 62 63 2d 33 38 66 63 2d 35 36 33 37 2d 36 66 61 63 2d 31 39 34 65 36 61 66 31 65 36 61 37 24 69 70 24 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 31 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.22	49412	192.178.50.33	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	825	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 828ea6707d12e484b3921bd7195f251f.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIlKHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:22 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Tue, 12 Dec 2023 20:38:22 GMT Expires: Wed, 11 Dec 2024 20:38:22 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:38:22 UTC	545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2023-12-12 20:38:22 UTC	1252	IN	Data Raw: 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 Data Ascii: .createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=functi
2023-12-12 20:38:22 UTC	1252	IN	Data Raw: 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 Data Ascii: this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"st
2023-12-12 20:38:22 UTC	1252	IN	Data Raw: 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c Data Ascii: ();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),
2023-12-12 20:38:22 UTC	1252	IN	Data Raw: 5b 32 5d 2c 45 3d 43 5b 33 5d 3b 69 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c Data Ascii: [2],E=C[3];if(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hl
2023-12-12 20:38:22 UTC	609	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b Data Ascii: .location.href,!1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.22	49452	34.200.65.202	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	769	OUT	GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDSYNC=18za~2fkk; A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
2023-12-12 20:38:22 UTC	796	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18za~2fkk:19bx~2fkk";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 11-Dec-2024 20:38:22 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://exchange.mediavine.com/usersync/redirect?partner=verizon&partnerId=y-lx7NKpZE2uIevh65FgChwsUh2tPcpg85~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; Expires=Thu, 12 Dec 2024 02:38:22 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.22	49391	35.211.178.172	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	948	OUT	GET /sync?ssp=the33across&us_privacy=1--- HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid_lu=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d
2023-12-12 20:38:22 UTC	256	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //p.rfihub.com/cm?in=1&pub=20513&ssp=the33across&gdpr=&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.22	49442	172.240.155.68	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	940	OUT	GET /ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D HTTP/1.1 Host: sync.colossusssp.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gtm_usr=77ed72d2-2d26-4504-96ec-f9c2a46444c1; lmg_r=15
2023-12-12 20:38:23 UTC	736	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:38:22 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: gtm_usr=77ed72d2-2d26-4504-96ec-f9c2a46444c1; path=/; domain=.colossusssp.com; expires=Wed, 11 Dec 2024 20:38:22 GMT;SameSite=None;Secure Set-Cookie: lmg_r=15; path=/; domain=.colossusssp.com; expires=Wed, 11 Dec 2024 20:38:22 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://exchange.mediavine.com/usersync/redirect?partner=huddled_masses&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=77ed72d2-2d26-4504-96ec-f9c2a46444c1 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
2023-12-12 20:38:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.22	49443	67.202.105.21	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	1201	OUT	GET /ps/?_=1702413499838.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:38:22 UTC	700	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:38:22 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 100000000008200000A server: 33XP010 location: https://exchange.mediavine.com/usersync/redirect?partner=thirty_three_across&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=212377533762873 content-length: 0 date: Tue, 12 Dec 2023 20:38:21 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.22	49451	18.214.147.224	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	837	OUT	GET /server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId={PUB_USER_ID} HTTP/1.1 Host: ice.360yield.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=9bfa3b33-914e-4ccc-b6f8-0f92df65339b; tuuid_lu=1702413501
2023-12-12 20:38:22 UTC	429	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=9bfa3b33-914e-4ccc-b6f8-0f92df65339b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.22	49441	18.164.124.81	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	527	OUT	GET /ope-dmplite.js HTTP/1.1 Host: cdn.opecloud.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:23 UTC	573	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 62130 Connection: close Server: nginx/1.24.0 Last-Modified: Tue, 12 Dec 2023 15:52:17 GMT Accept-Ranges: bytes Date: Tue, 12 Dec 2023 20:14:46 GMT Expires: Tue, 19 Dec 2023 20:02:32 GMT Cache-Control: max-age=604800 Cache-Control: public ETag: "657881b1-f2b2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 909ec3586e2eba60d35c2f3468905558.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: NQJHDGTN1HadgQ_zLAj8gpK-V1ZUyPqZcTki4bwsTORcTjT5wMFLpA== Age: 2150
2023-12-12 20:38:23 UTC	15811	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 69 6e 69 74 69 61 6c 43 61 6c 6c 50 72 6f 6d 69 73 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6d 61 78 43 61 6c 6c 44 65 6c 61 79 4d 73 3d 32 65 33 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 50 69 78 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d Data Ascii: !function(){"use strict";var t=function(){function t(){this.initialCallPromise=null,this.maxCallDelayMs=2e3}return t.prototype.callPixel=function(t,n){var e=this,r=function(t,n){return new Promise((function(r){Object.entries(n).forEach((function(n){var e=
2023-12-12 20:38:23 UTC	16384	IN	Data Raw: 6e 28 74 2c 6e 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 65 7c 7c 28 65 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 74 72 79 7b 75 28 72 2e 6e 65 78 74 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 69 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 74 72 79 7b 75 28 72 2e 74 68 72 6f 77 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 69 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 76 61 72 20 6e 3b 74 2e 64 6f 6e 65 3f 6f 28 74 2e 76 61 6c 75 65 29 3a 28 6e 3d 74 2e 76 61 6c 75 65 2c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 6e 3a 6e 65 77 20 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 28 6e 29 7d 29 29 29 2e 74 68 65 6e 28 61 2c 63 29 7d 75 28 28 72 3d Data Ascii: n(t,n,e,r){return new(e\|\|(e=Promise))((function(o,i){function a(t){try{u(r.next(t))}catch(t){i(t)}}function c(t){try{u(r.throw(t))}catch(t){i(t)}}function u(t){var n;t.done?o(t.value):(n=t.value,n instanceof e?n:new e((function(t){t(n)}))).then(a,c)}u((r=
2023-12-12 20:38:23 UTC	16384	IN	Data Raw: 29 3b 72 2e 74 61 67 67 65 72 43 6c 69 65 6e 74 2e 63 61 6c 6c 50 69 78 65 6c 28 61 2c 69 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 73 65 74 54 68 69 72 64 50 61 72 74 79 54 72 61 63 6b 61 62 69 6c 69 74 79 28 74 2e 69 73 54 68 69 72 64 50 61 72 74 79 54 72 61 63 6b 61 62 6c 65 29 2c 65 2e 66 69 72 73 74 56 69 73 69 74 45 76 65 6e 74 53 65 6e 74 28 29 7d 29 29 2c 72 2e 63 75 73 74 6f 6d 45 76 65 6e 74 51 75 65 75 65 3d 5b 5d 7d 29 29 2c 74 68 69 73 2e 76 69 73 69 74 45 76 65 6e 74 51 75 65 75 65 3d 5b 5d 2c 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 65 6e 74 51 75 65 75 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 69 3d 6e 74 28 6e 74 28 6e 74 28 7b 7d 2c 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 54 6f Data Ascii: );r.taggerClient.callPixel(a,i).then((function(t){e.setThirdPartyTrackability(t.isThirdPartyTrackable),e.firstVisitEventSent()})),r.customEventQueue=[]})),this.visitEventQueue=[],this.customEventQueue.forEach((function(o){var i=nt(nt(nt({},t.customEventTo
2023-12-12 20:38:23 UTC	13551	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 70 69 50 61 72 61 6d 65 74 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 67 70 70 53 74 72 69 6e 67 3a 74 68 69 73 2e 67 70 70 53 74 72 69 6e 67 7d 7d 2c 74 7d 28 29 2c 49 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 6e 2e 64 65 76 69 63 65 41 63 63 65 73 73 52 65 73 74 72 69 63 74 65 64 3d 21 30 2c 6e 2e 6c 69 73 74 65 6e 65 72 49 64 3d 6e 75 6c 6c 2c 6e 7d 72 65 74 75 72 6e 20 78 74 28 6e 2c 74 29 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f Data Ascii: unction(){return{}},t.prototype.papiParameters=function(){return{gppString:this.gppString}},t}(),It=function(t){function n(){var n=null!==t&&t.apply(this,arguments)\|\|this;return n.deviceAccessRestricted=!0,n.listenerId=null,n}return xt(n,t),n.prototype.lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.22	49388	52.86.155.246	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	594	OUT	GET /sync?nid=268 HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:38:23 UTC	1306	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:38:22 GMT Location: https://us-u.openx.net/w/1.0/sd?id=537082476&val=GH_JvDj8VjdvrBlOavHmp2aBmNQ Set-Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 103 Connection: Close
2023-12-12 20:38:23 UTC	103	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 38 32 34 37 36 26 61 6d 70 3b 76 61 6c 3d 47 48 5f 4a 76 44 6a 38 56 6a 64 76 72 42 6c 4f 61 76 48 6d 70 32 61 42 6d 4e 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://us-u.openx.net/w/1.0/sd?id=537082476&val=GH_JvDj8VjdvrBlOavHmp2aBmNQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.22	49445	35.211.178.172	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	762	OUT	GET /sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:38:23 UTC	264	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //c1.adform.net/serving/cookie/match/?party=24&bidswitch_ssp_id=themediagrid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.22	49454	52.207.45.55	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	687	OUT	GET /usersync?b=oth&i=y-i5Vemz9E2pcAB3qsj5sq4a92wTUal4GhEbBQ~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:38:23 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:38:22 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:38:23 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.22	49393	35.71.139.29	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:22 UTC	928	OUT	GET /getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:38:23 UTC	602	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:23 GMT Content-Length: 0 Connection: close Location: https://exchange.mediavine.com/usersync/redirect?partner=triplelift&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3571062816453612499566 Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:38:23 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.22	49416	34.98.64.218	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:23 UTC	812	OUT	GET /w/1.0/sd?id=537072971&val=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=de068b32-213a-3ce1-6d48-e409713c0344&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI
2023-12-12 20:38:23 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|3311a7f3-c44c-4d38-8196-dca4c2b0f8ec\|1702413503111611; Version=1; Expires=Wed, 27-Dec-2023 20:38:23 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:38:23 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:38:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.22	49446	35.211.178.172	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:23 UTC	936	OUT	GET /check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:38:23 UTC	365	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:38:23 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://exchange.mediavine.com/usersync/redirect?partner=mediagrid&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.22	49444	44.194.252.189	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:23 UTC	873	OUT	GET /api/v1/dsync/mediavine?exid=6120f800-992e-11ee-8a65-3f15d911ca60us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
2023-12-12 20:38:23 UTC	660	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:38:23 GMT Content-Type: text/html; charset=utf-8 Content-Length: 208 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Location: https://exchange.mediavine.com/usersync/redirect?partner=kargo&partnerId=0c8954a7-ffa8-19a4-1cc4-650bafbcd1f0&s2sVersion=production&uuid=6120f800-992e-11ee-8a65-3f15d911ca60 Pragma: no-cache Set-Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702; Path=/; Domain=kargo.com; Expires=Wed, 11 Dec 2024 20:38:23 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2023-12-12 20:38:23 UTC	208	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 6b 61 72 67 6f 26 61 6d 70 3b 70 61 72 74 6e 65 72 49 64 3d 30 63 38 39 35 34 61 37 2d 66 66 61 38 2d 31 39 61 34 2d 31 63 63 34 2d 36 35 30 62 61 66 62 63 64 31 66 30 26 61 6d 70 3b 73 32 73 56 65 72 73 69 6f 6e 3d 70 72 6f 64 75 63 74 69 6f 6e 26 61 6d 70 3b 75 75 69 64 3d 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://exchange.mediavine.com/usersync/redirect?partner=kargo&partnerId=0c8954a7-ffa8-19a4-1cc4-650bafbcd1f0&s2sVersion=production&uuid=6120f800-992e-11ee-8a65-3f15d911ca60">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.22	49489	207.198.113.86	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:26 UTC	123	IN	HTTP/1.1 408 Request Time-out content-length: 110 cache-control: no-cache content-type: text/html connection: close
2023-12-12 20:38:26 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.22	49475	69.194.240.13	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:26 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2023-12-12 20:38:26 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.22	49529	198.148.27.131	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:29 UTC	102	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a Data Ascii: HTTP/1.0 408 Request Time-outCache-Control: no-cacheConnection: closeContent-Type: text/html
2023-12-12 20:38:29 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.22	49530	216.22.16.5	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:33 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2023-12-12 20:38:33 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.22	49503	216.22.16.40	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:34 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2023-12-12 20:38:34 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.22	49526	67.202.105.21	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:34 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2023-12-12 20:38:34 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.22	49521	67.202.105.31	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:34 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2023-12-12 20:38:34 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.22	49502	216.22.16.40	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:38:34 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2023-12-12 20:38:34 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.22	49568	192.178.50.77	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:53 UTC	849	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+962; SOCS=CAESHAgCEhJnd3NfMjAyMzA4MDEtMF9SQzMaAmVuIAEaBgiAi8amBg; AEC=Ad49MVFCiIL4dH3NdVUPM9qw5tUX8unGaMgN_qTAwv0uoiOzKAI-JttOlg; __Secure-ENID=14.SE=LM-NkPAvbCtuNhK73uRS1U27fKMegq7R6_Ue_GnOGI1dekNKandC6Dto1fKS9ocnnyUmf2MAXGM269U9HhkgndYLxWy3FrZaGzh_yODdv1ouU12fBCNmRhMUwM3dzKbRlYRnbKhIQz9fV5WGdCRRjXQx5RGii6FbIw100Hc46oWQ6bysmy2hqA
2023-12-12 20:39:53 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-12-12 20:39:53 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 12 Dec 2023 20:39:53 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-70G4yULgKUzAFcpOHly1xg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-12 20:39:53 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-12-12 20:39:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.22	49574	104.21.64.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:55 UTC	2093	OUT	GET /polynomial-root-finding-with-the-jenkins-traub-algorithm/ HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:2%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413496.0.0.0; _ga=GA1.1.1980800170.1702413486; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; cto_bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA; cto_bidid=tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNNlk2bnJzaVNzWGpPb2xpRWUlMkZHUWpBJTNEJTNE; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A
2023-12-12 20:39:55 UTC	979	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:39:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close content-security-policy: block-all-mixed-content vary: Accept-Encoding, Cookie last-modified: Mon, 11 Dec 2023 09:28:31 GMT x-presslabs-stats: HIT; 0.099s; 16 queries; desktop; ttl 172800s; refresh in 46116s x-request-id: 042fca33970d3ab9987620ec71d80efc strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PS%2B821na4SxBv%2B3HSINP6D0XnWvAkJlk6vFJajd44KGNrtHVLcBrPn46ASo3SF8veSiRM8FxcRDfZrwJPTl5Ti9wSuTpR2labDox18d%2BYfvtsM8i4OkFqK2BorwHZGU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c78bfd62dadd-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:39:55 UTC	390	IN	Data Raw: 37 34 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 53 69 74 65 22 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 20 41 6c 77 61 79 73 20 66 6f 72 63 65 20 6c 61 74 65 73 74 20 49 45 20 72 65 6e 64 65 72 69 6e 67 20 65 6e 67 69 6e 65 20 28 65 76 65 6e 20 69 6e 20 69 6e 74 72 61 6e 65 74 29 20 26 20 43 68 72 6f 6d 65 20 46 72 61 6d 65 20 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 5d 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 Data Ascii: 74c4<!DOCTYPE html><html class="no-js" lang="en-US"><head itemscope itemtype="http://schema.org/WebSite"><meta charset="UTF-8">... Always force latest IE rendering engine (even in intranet) & Chrome Frame -->...[if IE ]><meta http-equiv="X-U
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 Data Ascii: <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black">
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 22 61 72 74 69 63 6c 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 50 6f 6c 79 6e 6f 6d 69 61 6c 20 52 6f 6f 74 2d 66 69 6e 64 69 6e 67 20 77 69 74 68 20 74 68 65 20 4a 65 6e 6b 69 6e 73 2d 54 72 61 75 62 20 41 6c 67 6f 72 69 74 68 6d 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 4a 65 6e 6b 69 6e 73 2d 54 72 61 75 62 20 41 6c 67 6f 72 69 74 68 6d 20 69 73 20 61 20 73 74 61 6e 64 61 72 64 20 69 6e 20 74 68 65 20 66 69 65 6c 64 20 6f 66 20 6e 75 6d 65 72 69 63 61 6c 20 63 6f 6d 70 75 74 61 74 69 6f 6e 20 6f 66 20 70 6f 6c 79 6e 6f 6d 69 61 6c 20 72 6f 6f 74 73 2c 20 66 75 Data Ascii: "article" /><meta property="og:title" content="Polynomial Root-finding with the Jenkins-Traub Algorithm" /><meta property="og:description" content="The Jenkins-Traub Algorithm is a standard in the field of numerical computation of polynomial roots, fu
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 44 61 76 69 64 20 42 69 6e 6e 65 72 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 20 63 6c 61 73 73 3d 22 79 6f 61 73 74 2d 73 63 68 65 6d 61 2d 67 72 61 70 68 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 57 65 62 50 61 67 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f Data Ascii: <meta name="author" content="David Binner" /><meta name="twitter:card" content="summary_large_image" /><script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://mathblo
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 74 68 62 6c 6f 67 2e 63 6f 6d 2f 70 6f 6c 79 6e 6f 6d 69 61 6c 2d 72 6f 6f 74 2d 66 69 6e 64 69 6e 67 2d 77 69 74 68 2d 74 68 65 2d 6a 65 6e 6b 69 6e 73 2d 74 72 61 75 62 2d 61 6c 67 6f 72 69 74 68 6d 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 73 6f 63 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 65 2f 69 72 3f 74 3d 61 6e 74 6f 6e 69 6f 63 61 6e 67 69 61 2d 32 30 26 61 6d 70 3b 6c 3d 61 73 32 26 61 6d 70 3b 6f 3d 31 26 61 6d 70 3b 61 3d 30 34 38 36 34 31 34 35 34 58 22 2c 22 63 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 73 6f 63 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 65 2f 69 72 3f 74 3d 61 6e 74 6f 6e 69 6f 63 61 6e 67 69 61 2d 32 30 26 61 6d 70 3b 6c 3d 61 73 32 Data Ascii: thblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#primaryimage","url":"https://www.assoc-amazon.com/e/ir?t=antoniocangia-20&l=as2&o=1&a=048641454X","contentUrl":"https://www.assoc-amazon.com/e/ir?t=antoniocangia-20&l=as2
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 64 3d 69 64 65 6e 74 69 63 6f 6e 26 72 3d 67 22 2c 22 63 61 70 74 69 6f 6e 22 3a 22 44 61 76 69 64 20 42 69 6e 6e 65 72 22 7d 2c 22 73 61 6d 65 41 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 6b 69 74 69 2e 63 61 22 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 61 75 74 68 6f 72 2f 62 69 6e 6e 65 72 2f 22 7d 5d 7d 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 21 2d 2d 20 2f 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 2e 20 2d 2d 3e 0a 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 73 63 72 69 70 74 73 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c Data Ascii: d=identicon&r=g","caption":"David Binner"},"sameAs":["https://akiti.ca"],"url":"https://mathblog.com/author/binner/"}]}</script>... / Yoast SEO plugin. --><link rel='dns-prefetch' href='//scripts.mediavine.com' /><style id='classic-theme-styles-inl
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 30 38 2c 31 33 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 32 2c 31 38 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e 65 61 Data Ascii: nt(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linea
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 69 7a 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 3a 20 33 36 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 3a 20 34 32 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 32 30 3a 20 30 2e 34 34 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 33 30 3a 20 30 2e 36 37 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 34 30 3a 20 31 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 35 30 3a 20 31 2e 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 36 30 Data Ascii: ize--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 68 65 72 65 28 3a 6e 6f 74 28 2e 61 6c 69 67 6e 6c 65 66 74 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 72 69 67 68 74 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 66 75 6c 6c 29 29 7b 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 67 6c 6f 62 61 6c 2d 2d 63 6f 6e 74 65 6e 74 2d 73 69 7a 65 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 77 69 64 65 7b 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 67 6c 6f 62 61 6c 2d 2d 77 69 64 65 2d 73 69 7a 65 29 3b 7d Data Ascii: here(:not(.alignleft):not(.alignright):not(.alignfull)){max-width: var(--wp--style--global--content-size);margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignwide{max-width: var(--wp--style--global--wide-size);}
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 Data Ascii: lor{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.22	49573	104.21.64.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:55 UTC	2151	OUT	GET / HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:2%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413496.0.0.0; _ga=GA1.1.1980800170.1702413486; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; cto_bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA; cto_bidid=tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNNlk2bnJzaVNzWGpPb2xpRWUlMkZHUWpBJTNEJTNE; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A
2023-12-12 20:39:55 UTC	981	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:39:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close content-security-policy: block-all-mixed-content vary: Accept-Encoding, Cookie last-modified: Tue, 12 Dec 2023 20:17:50 GMT x-presslabs-stats: HIT; 0.100s; 2 queries; desktop; ttl 3600s; refresh in 2275s x-request-id: 6722a040a39505b800427e07efb9881d strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Y%2Bq1wLPQIpY4y5q9Bo%2BlXnq2H39MxqbPnXV%2BGT0G2Qs0sGT0HIh2pY8GOURgcWl1RyDxc1eohXhtrhBWKJ4h%2BGKXOfzdY%2FHEKcQWSfb1I1tepq%2BH0Dbc6i9BlN3r80%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c78d49b6288c-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:39:55 UTC	388	IN	Data Raw: 37 62 64 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 53 69 74 65 22 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 20 41 6c 77 61 79 73 20 66 6f 72 63 65 20 6c 61 74 65 73 74 20 49 45 20 72 65 6e 64 65 72 69 6e 67 20 65 6e 67 69 6e 65 20 28 65 76 65 6e 20 69 6e 20 69 6e 74 72 61 6e 65 74 29 20 26 20 43 68 72 6f 6d 65 20 46 72 61 6d 65 20 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 5d 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 Data Ascii: 7bdc<!DOCTYPE html><html class="no-js" lang="en-US"><head itemscope itemtype="http://schema.org/WebSite"><meta charset="UTF-8">... Always force latest IE rendering engine (even in intranet) & Chrome Frame -->...[if IE ]><meta http-equiv="X-U
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 Data Ascii: <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black">
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 42 6c 6f 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 65 6d 61 74 69 63 73 20 69 73 20 77 6f 6e 64 65 72 66 75 6c 21 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 42 6c 6f 67 22 20 2f 3e 0a 09 3c Data Ascii: ntent="website" /><meta property="og:title" content="MathBlog" /><meta property="og:description" content="Mathematics is wonderful!" /><meta property="og:url" content="https://mathblog.com/" /><meta property="og:site_name" content="MathBlog" /><
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 74 2f 63 73 73 27 3e 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 69 6c 65 5f 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f Data Ascii: t/css'>/! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{backgro
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 28 32 30 37 2c 34 36 2c 34 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 Data Ascii: rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220)
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 37 30 3a 20 33 2e 33 38 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 38 30 3a 20 35 2e 30 36 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 6e 61 74 75 72 61 6c 3a 20 36 70 78 20 36 70 78 20 39 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 64 65 65 70 3a 20 31 32 70 78 20 31 32 70 78 20 35 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 73 68 61 72 70 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 Data Ascii: eset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--pre
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 65 78 7b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 7b 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 20 3e 20 2a 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 7b 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 20 3e 20 2a 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c Data Ascii: ex{display: flex;}body .is-layout-flex{flex-wrap: wrap;align-items: center;}body .is-layout-flex > {margin: 0;}body .is-layout-grid{display: grid;}body .is-layout-grid > {margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-col
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 Data Ascii: r(--wp--preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 Data Ascii: wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{bor
2023-12-12 20:39:55 UTC	1369	IN	Data Raw: 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e Data Ascii: -gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-oran

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.22	49576	104.21.64.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:56 UTC	1991	OUT	GET /2WOFDurG0lJJ.js?ts=79188 HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:2%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413496.0.0.0; _ga=GA1.1.1980800170.1702413486; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; cto_bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA; cto_bidid=tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNNlk2bnJzaVNzWGpPb2xpRWUlMkZHUWpBJTNEJTNE; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A
2023-12-12 20:39:56 UTC	932	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:39:56 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-request-id: f3c7d8a0a9b1c1a2544d8139b66922be x-presslabs-stats: desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: max-age=31536000 CF-Cache-Status: MISS Last-Modified: Tue, 12 Dec 2023 20:39:56 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yrf2YJsGDHdZCDaBO5YyWIzYlGn77%2BPTm0ohuI53RxzrtDwCOMFqelZdYBjaNAQJOr%2F9T08tgClUgQOY%2BaiJNMvzMPiRl43quaO4pPxxooDhaKUI08ErMn6G3XJWCKo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c79018a34958-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:39:56 UTC	82	IN	Data Raw: 34 63 0d 0a 2f 2f 20 74 68 69 73 20 62 65 61 63 6f 6e 20 69 73 20 75 73 65 64 20 62 79 20 50 72 65 73 73 6c 61 62 73 20 66 6f 72 20 6d 65 74 72 69 63 20 63 6f 6d 70 75 74 61 74 69 6f 6e 73 20 6f 6e 20 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 0a 0d 0a Data Ascii: 4c// this beacon is used by Presslabs for metric computations on mathblog.com
2023-12-12 20:39:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.22	49575	203.210.102.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:56 UTC	668	OUT	GET / HTTP/1.1 Host: www.interactiveds.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:39:56 UTC	208	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:39:56 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 221 Connection: close Location: http://www.interactiveds.com.au/IDSau
2023-12-12 20:39:56 UTC	221	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 69 6e 74 65 72 61 63 74 69 76 65 64 73 2e 63 6f 6d 2e 61 75 2f 49 44 53 61 75 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="http://www.interactiveds.com.au/IDSau">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.22	49579	104.21.64.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:56 UTC	2163	OUT	POST /wp-admin/admin-ajax.php HTTP/1.1 Host: mathblog.com Connection: keep-alive Content-Length: 27 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://mathblog.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; mediavine_session={%22depth%22:2%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; cto_bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA; cto_bidid=tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNNlk2bnJzaVNzWGpPb2xpRWUlMkZHUWpBJTNEJTNE; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413595.0.0.0; _ga=GA1.1.1980800170.1702413486
2023-12-12 20:39:56 UTC	27	OUT	Data Raw: 61 63 74 69 6f 6e 3d 6d 74 73 5f 76 69 65 77 5f 63 6f 75 6e 74 26 69 64 3d 33 34 Data Ascii: action=mts_view_count&id=34
2023-12-12 20:39:56 UTC	1348	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:39:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: https://mathblog.com access-control-allow-credentials: true x-robots-tag: noindex x-content-type-options: nosniff expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 referrer-policy: strict-origin-when-cross-origin x-frame-options: SAMEORIGIN x-request-id: 75b2ea713ce37445fa11acf02d66380e access-control-allow-methods: HEAD,GET,POST,OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-WP-Nonce access-control-expose-headers: Content-Length,Content-Range,X-WP-Total,X-WP-TotalPages,Link x-presslabs-stats: desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dUopH36qOEBb%2FZjYBRLPADCiPN0OO7XcBNH4zesgSOQS5QxAqampn%2BRr3%2BN8k8m2ZFcz0C0kDwHZWxrHyTMUP3VO3UAoej4m0SCC3FDD0jBrcDE0E3Wt780UYlUTIdQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c791df9e74ca-MIA
2023-12-12 20:39:56 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2023-12-12 20:39:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.22	49584	172.67.187.225	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:57 UTC	1787	OUT	GET /wp-admin/admin-ajax.php HTTP/1.1 Host: mathblog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; cto_bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA; cto_bidid=tNWiw18lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNNlk2bnJzaVNzWGpPb2xpRWUlMkZHUWpBJTNEJTNE; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413595.0.0.0; _ga=GA1.1.1980800170.1702413486; mediavine_session={%22depth%22:3%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}
2023-12-12 20:39:57 UTC	955	IN	HTTP/1.1 400 Bad Request Date: Tue, 12 Dec 2023 20:39:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-robots-tag: noindex expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 x-request-id: 64ef411cbc86f51137726bb2d8b6da76 vary: Accept-Encoding x-presslabs-stats: MISS; desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A%2BnuWfNTOPZNWZzGzIoRr2AnZZTUApf3%2BWELk7sh%2F2wcwEu95a4XFQ3ZjMd7LjidJhHePOwso%2Fq8CwqyLMAyz2quUmI3oTRwZ0yPDC7%2BRFd%2BC0LhsqX2JOk036obv5s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c7982bbb31d7-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:39:57 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2023-12-12 20:39:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.22	49589	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:57 UTC	1207	OUT	GET /usersync.min.js?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D If-None-Match: W/"3217-18c55b94fd8" If-Modified-Since: Sun, 10 Dec 2023 21:54:17 GMT
2023-12-12 20:39:57 UTC	352	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:39:57 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 12823 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: no-cache, private Accept-Ranges: bytes Last-Modified: Sun, 10 Dec 2023 16:48:30 GMT ETag: W/"3217-18c54a15c0c"
2023-12-12 20:39:57 UTC	12823	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 75 73 65 72 73 79 6e 63 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 33 34 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 76 61 72 20 69 2c 6f 2c 72 3b 76 6f 69 64 20 30 3d 3d 3d 28 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 69 3d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 6e 3d 7b 7d 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 6e 5b 69 5d 3d 74 5b 69 5d 7d 72 65 74 75 72 Data Ascii: /! For license information please see usersync.min.js.LICENSE.txt /(()=>{var e={34:(e,n,t)=>{var i,o,r;void 0===(o="function"==typeof(i=r=function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var i in t)n[i]=t[i]}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.22	49585	203.210.102.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:58 UTC	673	OUT	GET /IDSau HTTP/1.1 Host: www.interactiveds.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:39:58 UTC	222	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 12 Dec 2023 20:39:58 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 247 Connection: close Location: https://www.interactiveds.com.au/IDSau/
2023-12-12 20:39:58 UTC	247	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 74 65 72 61 63 74 69 76 65 64 73 2e 63 6f 6d 2e 61 75 2f 49 44 53 61 75 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.interactiveds.com.au/IDSau/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.22	49590	35.190.80.1	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:58 UTC	535	OUT	OPTIONS /report/v3?s=A%2BnuWfNTOPZNWZzGzIoRr2AnZZTUApf3%2BWELk7sh%2F2wcwEu95a4XFQ3ZjMd7LjidJhHePOwso%2Fq8CwqyLMAyz2quUmI3oTRwZ0yPDC7%2BRFd%2BC0LhsqX2JOk036obv5s%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://mathblog.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:39:58 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 12 Dec 2023 20:39:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.22	49591	35.190.80.1	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:58 UTC	480	OUT	POST /report/v3?s=A%2BnuWfNTOPZNWZzGzIoRr2AnZZTUApf3%2BWELk7sh%2F2wcwEu95a4XFQ3ZjMd7LjidJhHePOwso%2Fq8CwqyLMAyz2quUmI3oTRwZ0yPDC7%2BRFd%2BC0LhsqX2JOk036obv5s%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 407 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:39:58 UTC	407	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 33 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 38 37 2e 32 32 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 77 Data Ascii: [{"age":0,"body":{"elapsed_time":1035,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.187.225","status_code":400,"type":"http.error"},"type":"network-error","url":"https://mathblog.com/w
2023-12-12 20:39:59 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 12 Dec 2023 20:39:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.22	49592	203.210.102.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:39:59 UTC	674	OUT	GET /IDSau/ HTTP/1.1 Host: www.interactiveds.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:00 UTC	269	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 12 Dec 2023 20:40:00 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Pingback: http://interactiveds.com.au/IDSau/xmlrpc.php Location: https://interactiveds.com.au/IDSau/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.22	49593	203.210.102.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:01 UTC	670	OUT	GET /IDSau/ HTTP/1.1 Host: interactiveds.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:02 UTC	216	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Pingback: http://interactiveds.com.au/IDSau/xmlrpc.php
2023-12-12 20:40:02 UTC	7708	IN	Data Raw: 31 65 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 3c 68 74 6d 6c 20 69 64 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 36 29 20 7c 20 21 28 49 45 20 37 29 20 7c 20 21 28 49 45 20 38 29 20 20 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 Data Ascii: 1e14<!DOCTYPE html>...[if IE 6]><html id="ie6" lang="en-US"><![endif]-->...[if IE 7]><html id="ie7" lang="en-US"><![endif]-->...[if IE 8]><html id="ie8" lang="en-US"><![endif]-->...[if !(IE 6) \| !(IE 7) \| !(IE 8) ]>...><html lang="en-US
2023-12-12 20:40:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.22	49597	172.67.164.44	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:02 UTC	595	OUT	GET /update?cats=687,687,687,687,687 HTTP/1.1 Host: sda.fyi Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_sda=2023-12-12_687_20
2023-12-12 20:40:03 UTC	783	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:03 GMT Content-Type: application/json Content-Length: 25 Connection: close Access-Control-Allow-Origin: https://mathblog.com Set-Cookie: mv_sda=2023-12-12_687_25; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9BcW5wpB2RPbEiOzxo3FgcZ7BltEvPxwMSj9C9a88qPXb5C%2BELekvLdp9QV%2Bn9zCaf%2BLfT4XWG57MX8sQ%2B2JWtj801%2BaM0uyC%2FUnIO4YkPhX%2BwjAv6YWAI85"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c7bac8788e03-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:03 UTC	25	IN	Data Raw: 7b 22 32 30 32 33 2d 31 32 2d 31 32 22 3a 7b 22 36 38 37 22 3a 32 35 7d 7d Data Ascii: {"2023-12-12":{"687":25}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.22	49599	74.119.119.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:02 UTC	792	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA&cw=1&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://mathblog.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:03 UTC	519	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:40:02 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://mathblog.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 536730 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:40:03 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.22	49602	35.244.193.51	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:02 UTC	519	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.20.0&coppa=0&us_privacy=1--- HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:03 UTC	257	IN	HTTP/1.1 200 OK cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Tue, 12 Dec 2023 20:40:02 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:03 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.22	49603	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:03 UTC	1920	OUT	GET /usersync/sync?origin=https://mathblog.com&src=//exchange.mediavine.com&s2sVersion=production&mv_uuid=6120f800-992e-11ee-8a65-3f15d911ca60&version=invalidate-verizon-pushes&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22centro%22%3Atrue%2C%22emx_digital%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%7D HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:03 UTC	1126	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 3967 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache Set-Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:40:03 GMT; Secure; SameSite=None Set-Cookie: mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:40:03 GMT; Secure; SameSite=None Set-Cookie: am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:40:03 GMT; Secure; SameSite=None Set-Cookie: am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:40:03 GMT; Secure; SameSite=None
2023-12-12 20:40:03 UTC	3967	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 0a 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 3a 20 27 73 79 6e 63 55 72 6c 73 27 2c 0a 20 20 20 20 20 20 20 20 74 6f 6b 65 6e 73 3a 20 7b 22 6d 76 5f 75 75 69 64 22 3a 22 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 7d 2c 0a 20 20 20 20 20 20 20 20 73 79 6e 63 55 72 6c 73 3a 20 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f Data Ascii: <script> window.parent.postMessage({ message: 'syncUrls', tokens: {"mv_uuid":"6120f800-992e-11ee-8a65-3f15d911ca60","version":"invalidate-verizon-pushes"}, syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.22	49601	203.210.102.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:03 UTC	592	OUT	GET /IDSau/wp-content/themes/twentyeleven/style.css HTTP/1.1 Host: interactiveds.com.au Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://interactiveds.com.au/IDSau/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:04 UTC	205	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Type: text/css Content-Length: 54966 Connection: close Last-Modified: Fri, 07 Dec 2012 20:43:34 GMT Accept-Ranges: bytes
2023-12-12 20:40:04 UTC	15155	IN	Data Raw: 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 54 77 65 6e 74 79 20 45 6c 65 76 65 6e 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 6f 72 64 70 72 65 73 73 2e 6f 72 67 2f 65 78 74 65 6e 64 2f 74 68 65 6d 65 73 2f 74 77 65 6e 74 79 65 6c 65 76 65 6e 0a 41 75 74 68 6f 72 3a 20 74 68 65 20 57 6f 72 64 50 72 65 73 73 20 74 65 61 6d 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 6f 72 64 70 72 65 73 73 2e 6f 72 67 2f 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 32 30 31 31 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 50 72 65 73 73 20 69 73 20 73 6f 70 68 69 73 74 69 63 61 74 65 64 2c 20 6c 69 67 68 74 77 65 69 67 68 74 2c 20 61 6e 64 20 61 64 61 70 74 61 62 6c 65 2e 20 4d 61 6b 65 20 69 74 20 79 6f 75 72 73 20 77 69 74 68 Data Ascii: /*Theme Name: Twenty ElevenTheme URI: http://wordpress.org/extend/themes/twentyelevenAuthor: the WordPress teamAuthor URI: http://wordpress.org/Description: The 2011 theme for WordPress is sophisticated, lightweight, and adaptable. Make it yours with
2023-12-12 20:40:04 UTC	16384	IN	Data Raw: 65 20 7b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 09 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 36 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 65 6d 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 2e 33 65 6d 3b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 35 70 78 3b 0a 7d 0a 2e 65 6e 74 72 79 2d 74 69 74 6c 65 2c 0a 2e 65 6e 74 72 79 2d 74 69 74 6c 65 20 61 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 65 6e 74 72 79 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 2c 0a 2e 65 6e 74 72 79 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 0a 2e 65 6e 74 Data Ascii: e {clear: both;color: #222;font-size: 26px;font-weight: bold;line-height: 1.5em;padding-bottom: .3em;padding-top: 15px;}.entry-title,.entry-title a {color: #222;text-decoration: none;}.entry-title a:hover,.entry-title a:focus,.ent
2023-12-12 20:40:04 UTC	16384	IN	Data Raw: 2c 32 35 35 2c 31 29 20 31 30 30 25 29 3b 20 2f 2a 20 46 46 33 2e 36 2b 20 2a 2f 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 2c 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 30 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 29 29 3b 20 2f 2a 20 43 68 72 6f 6d 65 2c 53 61 66 61 72 69 34 2b 20 2a 2f 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 20 30 25 2c 72 67 62 61 Data Ascii: ,255,1) 100%); /* FF3.6+ /background: -webkit-gradient(linear, left top, left bottom, color-stop(0%,rgba(255,255,255,0)), color-stop(100%,rgba(255,255,255,1))); / Chrome,Safari4+ */background: -webkit-linear-gradient(top, rgba(255,255,255,0) 0%,rgba
2023-12-12 20:40:04 UTC	7043	IN	Data Raw: 09 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 2e 36 32 35 65 6d 3b 0a 09 09 77 69 64 74 68 3a 20 36 34 25 3b 0a 09 7d 0a 09 2e 6f 6e 65 2d 63 6f 6c 75 6d 6e 20 61 72 74 69 63 6c 65 2e 66 65 61 74 75 72 65 2d 69 6d 61 67 65 2e 73 6d 61 6c 6c 20 2e 65 6e 74 72 79 2d 73 75 6d 6d 61 72 79 20 7b 0a 09 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 7d 0a 09 61 72 74 69 63 6c 65 2e 66 65 61 74 75 72 65 2d 69 6d 61 67 65 2e 73 6d 61 6c 6c 20 2e 65 6e 74 72 79 2d 73 75 6d 6d 61 72 79 20 70 20 61 20 7b 0a 09 09 6c 65 66 74 3a 20 30 3b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 30 70 78 3b 0a 09 09 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 09 7d Data Ascii: float: right;margin: 0 0 1.625em;width: 64%;}.one-column article.feature-image.small .entry-summary {height: auto;}article.feature-image.small .entry-summary p a {left: 0;padding-left: 20px;padding-right: 20px;width: auto;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.22	49600	203.210.102.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:03 UTC	647	OUT	GET /IDSau/wp-content/uploads/2013/01/cropped-DSC06269-c.jpg HTTP/1.1 Host: interactiveds.com.au Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactiveds.com.au/IDSau/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:04 UTC	207	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Type: image/jpeg Content-Length: 63462 Connection: close Last-Modified: Sat, 26 Jan 2013 10:17:42 GMT Accept-Ranges: bytes
2023-12-12 20:40:04 UTC	15153	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 20 03 e8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC "
2023-12-12 20:40:04 UTC	16384	IN	Data Raw: 65 03 86 5e 7f bc 2a 45 cc 55 32 34 3f eb 79 5f ef 01 9a 71 09 20 cc 6e 0e 7b 1a 7b 23 2e 4a f2 2a 07 85 5f e6 4f dc c9 fd ec 50 3d c0 c6 c3 39 e2 a2 91 d9 07 15 32 49 32 8c 4a 04 83 fb c3 bd 21 1b d4 10 30 3d 28 02 34 97 77 06 9c f1 a9 1c 10 29 86 31 9f ee d4 6d 13 93 80 e0 8a 00 9c 33 81 9e be f5 2a 4c 02 90 c3 ad 56 dc e9 80 4e 3d e9 7c c3 ce 46 47 a8 a2 e0 5c 8c 00 02 ee 07 dc d3 25 b5 47 27 77 27 d6 a9 ee 25 89 42 7e 99 a9 61 b9 62 d8 73 f8 55 27 70 23 96 cd 08 38 eb ef 50 32 48 a3 05 03 28 f5 e6 ad 5d d9 c9 28 0f 04 8a 48 3c ab 9f e5 49 24 52 43 b7 3b 81 c7 3e 94 01 5b ed 85 71 fb bc e3 ae 38 a2 68 2d ef 54 19 63 04 81 c1 c7 22 91 61 72 49 93 04 76 20 53 79 56 21 4f 1e 99 aa 4f 97 54 4b 49 e8 65 5d 69 91 3a ed 4f be a7 21 48 c6 6b 2a e6 d1 22 97 32 Data Ascii: e^EU24?y_q n{{#.J_OP=92I2J!0=(4w)1m3LVN=\|FG\%G'w'%B~absU'p#8P2H(](H<I$RC;>[q8h-Tc"arIv SyV!OOTKIe]i:O!Hk"2
2023-12-12 20:40:05 UTC	16384	IN	Data Raw: 0c 43 80 b9 a2 a4 b3 d1 ed ee ae 63 76 49 21 89 13 f8 48 3d 05 73 3e 39 ba b8 d4 ed 2e 2c ac 2e 4c 2e c9 91 20 3c fd 2a 77 d5 26 b1 b7 56 be 78 c4 ad 90 18 70 a2 b9 d5 bd 32 5d ca c2 31 b7 b4 9b b2 0d 4c 52 f8 8c 64 d9 5f c1 7a 44 ba 04 cc f2 4d 2d d4 cf 8c 87 3c 57 5c 75 46 2e cc 58 b2 76 0a 78 15 99 a7 36 c8 da e0 4a 0a 0f bc bb 4e 7f 3a 86 da db ed 33 cb 32 17 50 ed b7 61 e8 3d e9 b6 a4 28 97 ae 75 29 c4 78 cf ca 57 1b 89 e6 a3 b5 be b8 1a 57 99 0b 79 ac 8d f3 ee 3d aa 79 97 ec 7a 77 ef 22 f3 18 1c 82 e3 19 a6 d8 6b 16 6f 6a 22 58 c0 2d f7 c2 8e f4 ae c9 bb 28 4d 70 97 6a d7 72 09 67 7c 62 38 63 ee 6b a9 d0 65 9c da 42 f7 30 ac 05 86 02 1e ab 59 d6 76 16 f3 38 68 27 c4 b9 ce 06 38 a9 ec ee 27 b5 f3 63 65 95 d8 9c ef 90 75 fa 0a 6d 95 17 6d cd bb b9 60 Data Ascii: CcvI!H=s>9.,.L. <*w&Vxp2]1LRd_zDM-<W\uF.Xvx6JN:32Pa=(u)xWWy=yzw"koj"X-(Mpjrg\|b8ckeB0Yv8h'8'ceumm`
2023-12-12 20:40:05 UTC	15541	IN	Data Raw: 4a 9e 9b 71 59 8f a1 e8 3a 45 9a da 4b a4 5b 5c dc 23 6e ca 7b fb d7 41 e1 ab d8 61 b6 54 11 88 a4 ce 55 54 63 60 c6 38 aa 9d 4e 68 d9 13 0a 76 91 e4 be 2d fd 9d b4 ff 00 18 2e a3 a9 43 24 b6 7a cd d4 f2 5c 96 62 4a 17 66 ce 31 db 9a f2 49 be 16 78 83 c1 ef e2 1b 5b 9d 2e 42 b7 3a 7b 24 5e 50 2c b2 48 0a b1 40 3e a8 48 f6 af b0 2e 84 96 fb a4 12 e5 09 dc 41 38 27 9c d6 73 dd 0d 5b 5e d2 6c a3 90 99 e0 79 2e 26 5c 72 23 58 9e 3d d9 f7 32 28 1f ef 7b 54 d3 a9 2b 72 9a 4e 11 4f 98 f8 d3 c1 9f b3 cf 8b 7c 7f 77 72 ba 5d 8e c8 2d b6 ac 97 17 64 c6 33 b4 64 0c 8c 9e 7a d7 a2 69 9f b1 27 88 27 2d f6 ed 72 d2 db cb 6c 30 8d 4b f5 fc ab ed a1 6d 0d 86 9c e6 25 d8 0f cc 00 18 c1 3c 9e 95 9f 69 17 da 24 77 2a 70 4e 4a 8e e6 bb 94 b4 3c f9 3d 74 3e 70 bc fd 97 6c 7c Data Ascii: JqY:EK[\#n{AaTUTc`8Nhv-.C$z\bJf1Ix[.B:{$^P,H@>H.A8's[^ly.&\r#X=2({T+rNO\|wr]-d3dzi''-rl0Km%<i$w*pNJ<=t>pl\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.22	49610	74.119.119.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:03 UTC	919	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA&cw=1&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:03 UTC	475	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:40:02 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: https://mathblog.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 836928 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:40:03 UTC	440	IN	Data Raw: 31 41 43 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 6f 6e 52 31 67 6c 39 6c 52 57 56 59 52 6a 46 4d 55 44 42 5a 61 53 55 79 52 6c 42 6f 56 55 78 53 52 47 31 6a 56 6b 78 46 5a 57 70 35 53 6a 68 30 54 48 64 68 56 33 68 36 5a 30 39 4c 61 6c 63 35 54 31 56 33 63 53 55 79 52 6b 52 76 61 6e 68 58 65 6b 64 4c 54 47 4a 43 53 31 46 34 54 48 52 57 63 54 64 48 5a 54 42 55 51 6e 6c 45 5a 55 6c 71 65 44 68 61 5a 45 64 47 4a 54 4a 43 63 6d 31 4e 52 6e 56 6a 55 57 4d 35 56 6b 6f 32 65 6c 5a 7a 52 7a 49 30 64 47 6c 6e 61 6c 64 75 57 56 70 55 59 55 56 6c 65 6c 52 35 4a 54 4a 47 52 47 56 50 5a 57 68 47 4e 6d 35 75 4d 6d 46 73 56 6d 70 42 5a 32 4a 46 57 45 74 57 4e 58 52 75 64 45 39 42 4a 54 4a 43 65 6d 78 44 4f 48 6c 33 4a 54 4e 45 4a 54 4e 45 22 2c 22 62 69 64 49 64 22 3a 22 Data Ascii: 1AC{"bundle":"onR1gl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkxFZWp5Sjh0THdhV3h6Z09Lalc5T1V3cSUyRkRvanhXekdLTGJCS1F4THRWcTdHZTBUQnlEZUlqeDhaZEdGJTJCcm1NRnVjUWM5Vko2elZzRzI0dGlnalduWVpUYUVlelR5JTJGRGVPZWhGNm5uMmFsVmpBZ2JFWEtWNXRudE9BJTJCemxDOHl3JTNEJTNE","bidId":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.22	49611	34.102.146.192	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:03 UTC	518	OUT	GET /esp.js HTTP/1.1 Host: oa.openxcdn.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:03 UTC	803	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqT7lSh7eTnonD6ERs82Kx3RCe38S-Yyl7o7ZB-qP71G56wLiCK2MFRriTKagBW0GnokfGv3cf1hYHxr1mFSmKTtSWixAms x-goog-generation: 1622140251693895 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 7927 Content-Encoding: gzip x-goog-hash: crc32c=f21hYg== x-goog-hash: md5=31VCuIvA42jGmZdUpbniug== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 7927 Server: UploadServer Date: Wed, 29 Nov 2023 17:15:46 GMT Expires: Thu, 28 Nov 2024 17:15:46 GMT Cache-Control: no-transform Age: 1135457 Last-Modified: Thu, 27 May 2021 18:30:51 GMT ETag: "df5542b88bc0e368c6999754a5b9e2ba" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:03 UTC	449	IN	Data Raw: 1f 8b 08 08 5b e5 af 60 02 ff 74 6d 70 6d 74 39 72 5f 31 74 7a 00 cd 3c 0b 7b db 36 92 7f 45 e2 75 65 62 0d d3 56 d2 47 4a 85 d1 ba ae db 64 37 89 bd b1 d3 6d 4f 51 7d b4 04 49 6c 68 52 25 21 3b ae c5 fb ed 37 33 00 48 90 a2 ec 74 9b de 5d bf c6 e2 03 18 0c 06 f3 c6 80 37 51 32 4d 6f bc f4 c3 85 c8 97 c1 6c 95 4c 64 94 26 ae 64 77 d7 61 d6 11 c1 5d 31 30 0f 3b 99 9b b0 bb 68 e6 8a 51 32 66 99 90 ab 2c e9 e0 b5 27 3e 2c d3 4c e6 03 ec 92 06 f8 28 b8 8b fc 84 c7 7e b7 cf f5 4b ff ae 28 06 ba 93 c4 4e 93 30 8e dd d4 f4 e5 29 af ae 33 06 37 71 d0 3d a8 9e 15 ba 6b e6 5d 05 92 67 de 24 10 f0 77 6a 61 cc 05 07 f4 32 2f c5 4b b6 5e 9f 5c fe 22 26 d2 9b 8a 59 94 88 d3 2c 5d 8a 4c de 52 b3 3b 91 ac ae 44 16 5e c6 c2 87 31 e6 42 fa 49 c1 0a 80 97 d5 28 e0 ac 12 d5 Data Ascii: [`tmpmt9r_1tz<{6EuebVGJd7mOQ}IlhR%!;73Ht]7Q2MolLd&dwa]10;hQ2f,'>,L(~K(N0)37q=k]g$wja2/K^\"&Y,]LR;D^1BI(
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 34 ee 85 df f2 b2 64 64 c4 4b 70 27 74 80 fa 5c e0 70 69 63 49 74 43 4d a2 65 96 ca 14 27 e9 2d c2 fc e4 26 31 c4 52 c2 80 1d 10 c6 32 70 1c 9e 01 75 f3 a0 ff 88 15 ee a8 c6 e4 19 bb 93 46 2a 60 99 a1 01 af 0f 69 c9 2b b5 e7 48 b9 88 87 d0 2f bb 25 0a e4 81 1c 45 63 37 64 7c 15 e4 1e ad 46 31 09 e5 64 81 24 d2 18 5f a7 d1 14 21 b0 22 f7 a6 69 22 86 c2 5d 31 1f 10 be 8a 72 e1 65 22 4f e3 6b 7c e4 c9 85 48 70 71 58 51 a1 65 93 5c c3 b3 c8 a8 17 61 11 e5 3c 09 c2 6c 0e ac 91 80 f6 30 ab 26 6e 3a 7a 18 d7 2d 7b c1 0c 54 c7 30 90 5e b8 5c c6 b7 2e ca 7b a5 9c 72 1a cb 0d 69 ae 39 5f 71 27 11 1f 80 f5 60 02 65 9b d5 46 1b b9 c8 d2 1b 6a 94 bb 34 e3 03 56 30 56 14 bc 9c 8b 61 84 a0 7c 62 bd ab 78 08 94 55 7d 1d 70 9d 94 f0 d4 55 4a 2e 3a c8 ee 20 7f 03 45 87 26 Data Ascii: 4ddKp't\picItCMe'-&1R2puF*`i+H/%Ec7d\|F1d$_!"i"]1re"Ok\|HpqXQe\a<l0&n:z-{T0^\.{ri9_q'`eFj4V0Va\|bxU}pUJ.: E&
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 3d 1a 23 86 33 c0 47 dd 3f 86 b6 a4 80 00 ee 71 02 4e a2 c8 bd e5 2a 5f 80 82 ab c6 bf b0 82 2e 4f 1b 29 78 be 5e 83 62 17 b4 9a 41 69 63 70 16 52 74 88 0c dc 6e 1d 88 0a e0 09 02 6c 0c 1b 8c cc dc 9c 2c 4d a5 53 80 ce 2a 15 ef 07 42 52 a3 0a 44 14 d2 ed 1e 58 18 1e 23 40 94 9d 12 4f d0 79 c8 76 16 9f a9 e8 4c 31 e3 a6 1f ae 98 a3 16 67 77 a3 fc 75 f8 1a e4 31 16 c9 5c 2e 98 f1 07 f7 fa e0 65 96 43 0b 50 cd e8 82 0d 76 77 93 a7 a6 ed 80 51 60 ad 03 c2 84 55 58 68 55 35 4a 70 21 90 6d 03 cc ae 0c 1a ef b5 5c 9b 16 70 55 54 de 2a 31 73 54 68 d1 bb c3 5b ff d0 d2 4d 87 a5 b1 d0 0e 88 86 46 1e 08 b8 e6 46 66 63 cb 34 5e c3 4a 81 2b 9d ad 26 c0 a6 c1 82 2f 6a f7 31 8f c9 19 8b c3 5b 94 ac 20 77 17 a0 44 2b 77 f6 3b 43 4e 86 c2 9f 6f 3c 6f 89 de db 96 00 03 7a Data Ascii: =#3G?qN_.O)x^bAicpRtnl,MSBRDX#@OyvL1gwu1\.eCPvwQ`UXhU5Jp!m\pUT*1sTh[MFFfc4^J+&/j1[ wD+w;CNo<oz
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: a5 86 d7 eb 75 4a 7f 23 fa 8b 99 a6 3f 8e da 76 82 a2 81 72 a5 bd 75 02 a1 52 c5 97 56 de e2 28 4c 30 4f 81 7a be 13 76 26 71 98 e7 9d 10 fe 2f b7 3e 9c 4f 83 69 7d b3 b3 12 5f 58 4e 5c 3f e3 4f e3 32 1a 97 1a 17 32 f1 aa fd a8 c0 be 59 af c1 6b 4d 3c 7b 7f 0a fd 68 87 5c 68 07 1c 4e f4 9c 12 cf ec 57 c1 bb ed 5b f7 09 c6 09 1c f9 b5 9d 9e 96 bf 86 39 69 d7 de 04 04 15 9a d0 33 68 a4 e2 be 3f 69 51 2d 8d a0 1c ea e1 a7 dd cc f3 d5 c6 dc 27 99 83 2d 33 8f b7 09 07 f0 28 49 30 04 99 4a 92 25 63 96 c0 fc 69 a4 54 56 fc 9e 92 11 54 46 f0 70 a4 cb 41 8c c2 1d af d7 e6 8d bd 65 5b 56 d8 a8 c9 cc 20 ba fe 34 d8 7f 04 11 b5 a8 eb 29 e9 ea 8c 2a d9 62 91 93 eb 78 3f db d8 c6 2e a3 6a 93 3d d3 81 d7 13 be d7 37 d1 b0 73 62 f6 07 82 ac 91 c1 01 29 cb 82 da 13 95 98 Data Ascii: uJ#?vruRV(L0Ozv&q/>Oi}_XN\?O22YkM<{h\hNW[9i3h?iQ-'-3(I0J%ciTVTFpAe[V 4)*bx?.j=7sb)
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 3d d0 af 57 7b ab 2c 16 c9 24 9d 8a 69 73 6a 58 3f 6d 52 58 97 c8 fe 0d 2b 26 83 2b 7a a9 d2 eb b5 6d fe fa 84 36 75 af aa 3c 6a b4 aa 77 b4 f8 63 5b ff 87 39 b4 0e d2 c8 e2 e6 46 c2 24 5d a1 7b 90 4a d2 fc 1d d3 b0 83 bd 30 3b 83 d3 77 4a 9d f7 31 78 20 43 8e 69 b7 5c 65 00 2b 66 b7 a8 b8 75 c2 0d fa 1a d2 02 f7 6e 3a 6d 5b 40 0c b7 53 db 86 a1 84 5f 6b fe 2d 4d 40 eb 9f cc 66 c0 19 fc a1 06 bb db 1b 68 bb b1 59 29 df 8e 7e 99 df 2d d9 cf ec 7d 7f 30 f6 de 43 a9 dc 60 4a 55 da 6c b3 66 52 86 e5 db 59 d3 ec d7 9a e7 7c 8b 91 e5 c6 ba e2 fa 92 59 fd dd 5c db 9e 53 df b0 a0 30 a0 95 73 35 59 59 98 d9 c1 20 a9 d2 77 c9 ee 2e cb f0 58 91 d6 8c 18 e9 1f 81 18 1f 81 40 ab e3 48 d5 89 8c 5f d2 28 71 b1 66 7c 1b c9 3f 95 b4 e0 ba 6c 97 96 ba 8c 80 84 2c 8d 92 99 Data Ascii: =W{,$isjX?mRX+&+zm6u<jwc[9F$]{J0;wJ1x Ci\e+fun:m[@S_k-M@fhY)~-}0C`JUlfRY\|Y\S0s5YY w.X@H_(qf\|?l,
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 2f a5 f2 af d5 5f bc 09 93 79 73 0f 51 21 d4 41 61 ab 82 95 16 d4 45 49 94 bb 38 55 f9 13 ac 24 67 0a d3 b3 20 f7 40 66 ca 1a 55 2a e7 41 28 67 d5 de 93 7b d6 ea 3f 8b 3c 0f e7 58 45 a7 ea c3 f0 10 80 d0 41 86 42 55 6a 3f 03 10 99 bc 47 a5 83 bf e0 c6 6c 2b 84 a7 5e 36 d7 9c d9 5c 63 9d 3d 38 ab f4 c8 cb da 69 fc f6 64 b6 75 54 58 b3 34 ee 6e 53 0d a3 32 8d 60 db f4 95 17 5e a6 99 ac d2 ed 09 69 eb 33 f0 9f d4 73 70 1c e9 8a 50 75 f4 f6 64 44 60 7f 7c f5 f2 b9 94 cb 37 ca da 0d 6a e7 f4 22 05 17 14 7d d4 92 53 37 71 7f 12 98 35 8b 5a 58 3d 6a e3 73 17 6b 13 c1 8c 1c c6 f1 1b 91 83 ba cd c5 73 f5 ca a5 dd 26 9d 07 c0 63 37 95 26 cf 86 ef 92 d1 3b d9 19 1b 95 6e ac c3 3b 98 12 46 29 ad f5 f9 07 54 15 68 d8 d3 79 97 38 b8 71 92 af 2e 61 59 dc 3e 2f 0b af f0 Data Ascii: /_ysQ!AaEI8U$g @fU*A(g{?<XEABUj?Gl+^6\c=8iduTX4nS2`^i3spPudD`\|7j"}S7q5ZX=jsks&c7&;n;F)Thy8q.aY>/
2023-12-12 20:40:03 UTC	1218	IN	Data Raw: 82 14 a0 86 5e 48 a7 93 ab c5 26 3e 25 c6 c2 7d c1 ea 04 53 48 9f 60 71 37 b6 e3 06 03 96 83 97 82 91 9b 3a e0 a9 4f b1 df 4d 30 77 72 e0 97 df a0 00 2f e3 39 a6 e0 e9 60 cf 13 7d 04 cb 54 c5 04 ed 91 14 29 bb 1b f5 65 c1 8b 8b 55 be 0c 97 d1 d0 fd cc 23 5e 73 9d b7 67 d0 27 ba 0e 27 b7 9d 38 ba cc c2 ec 16 3f 6b b0 c4 13 a8 09 7e d0 c0 74 71 b1 f0 f3 ed d9 29 15 30 f2 3e 6f 84 6a c9 f0 1f 6e e6 41 53 c5 61 10 66 b8 cc b7 46 c9 45 d6 59 84 ea 7b 09 f3 08 cc 2f b1 2a 0c e1 e1 47 13 5c f0 c9 98 2f e8 e4 30 04 23 f4 ab 37 23 1f 9a 90 9c cc ea 13 3a 3f fa ee f0 f4 45 fb 64 1a bd 68 4e e7 47 6a 4a 8f 36 a7 d4 cd bc f9 74 99 1d a2 c7 26 c0 bd ca 3c 40 7c 9a 66 9e c6 3d 1f 7d f9 f5 18 4f d0 2d 57 d9 32 cd 45 f5 bc 3f fe b7 09 c0 11 68 45 85 e4 a3 a8 30 b9 5a 5a Data Ascii: ^H&>%}SH`q7:OM0wr/9`}T)eU#^sg''8?k~tq)0>ojnASafFEY{/*G\/0#7#:?EdhNGjJ6t&<@\|f=}O-W2E?hE0ZZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.22	49613	172.67.164.44	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:03 UTC	396	OUT	GET /update?cats=687,687,687,687,687 HTTP/1.1 Host: sda.fyi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_sda=2023-12-12_687_25
2023-12-12 20:40:03 UTC	758	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:03 GMT Content-Type: application/json Content-Length: 25 Connection: close Access-Control-Allow-Origin: * Set-Cookie: mv_sda=2023-12-12_687_30; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Etpy4GjRqtMnIcJmMtJmTrdqJdxSOR4mD8YXU5Mh4H49%2BWT4567zRxoI1uxREcUJ9VQV41EUJUeJ4P9RxBKfzTuygA1Eyr%2FXjDSk86RNndzNbfh%2BBVKN%2FPnC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c7bf5e94498e-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:03 UTC	25	IN	Data Raw: 7b 22 32 30 32 33 2d 31 32 2d 31 32 22 3a 7b 22 36 38 37 22 3a 33 30 7d 7d Data Ascii: {"2023-12-12":{"687":30}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.22	49614	35.241.45.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:03 UTC	520	OUT	GET /js/pandg-sdk.js HTTP/1.1 Host: pghub.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:03 UTC	925	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqH7KSfTP4AA37LhPCWqgEbr8yAQqZ1gQMtAKrEawxX4exn-0TRzZN7A4toUYwSVWaz7XUl9sSBfym1_bRqEF9hpg x-goog-generation: 1685983010517890 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 5009 x-goog-hash: crc32c=aHj4lg== x-goog-hash: md5=R6iGNTBWyvM6mYxgQeIIlg== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Access-Control-Allow-Origin X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Date: Tue, 12 Dec 2023 11:30:24 GMT Last-Modified: Mon, 05 Jun 2023 16:36:50 GMT ETag: W/"47a886353056caf33a998c6041e20896" Content-Type: application/javascript Vary: Accept-Encoding Content-Length: 17484 Age: 32979 Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:03 UTC	327	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=fun
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 6f 70 65 72 74 79 28 74 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 6e 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 31 26 65 26 26 28 74 3d 6e 28 74 29 29 2c 38 26 65 29 72 65 74 75 72 6e 20 74 3b 69 66 28 34 26 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6e 2e 72 28 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 Data Ascii: operty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 55 52 45 3d 22 66 61 69 6c 75 72 65 22 2c 74 2e 53 55 43 43 45 53 53 3d 22 73 75 63 63 65 73 73 22 7d 28 72 7c 7c 28 72 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 49 46 52 41 4d 45 3d 22 49 46 52 41 4d 45 22 2c 74 2e 58 48 52 3d 22 58 48 52 22 7d 28 6f 7c 7c 28 6f 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 42 52 4f 57 53 45 52 3d 22 42 52 4f 57 53 45 52 22 2c 74 2e 41 4d 50 3d 22 41 4d 50 22 7d 28 61 7c 7c 28 61 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 4d 4d 3d 22 6d 6d 22 2c 74 2e 54 54 44 3d 22 74 74 64 22 7d 28 69 7c 7c 28 69 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 6a 73 3d 22 6a 73 22 7d 28 75 7c 7c 28 75 3d 7b 7d 29 29 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 Data Ascii: URE="failure",t.SUCCESS="success"}(r\|\|(r={})),function(t){t.IFRAME="IFRAME",t.XHR="XHR"}(o\|\|(o={})),function(t){t.BROWSER="BROWSER",t.AMP="AMP"}(a\|\|(a={})),function(t){t.MM="mm",t.TTD="ttd"}(i\|\|(i={})),function(t){t.js="js"}(u\|\|(u={}));var p=function(t,e)
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 22 54 41 50 41 44 22 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 54 61 70 61 64 4d 65 74 61 43 6f 6f 6b 69 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 46 72 6f 6d 41 6c 6c 53 74 6f 72 65 73 28 74 68 69 73 2e 73 74 6f 72 61 67 65 4b 65 79 29 3b 74 72 79 7b 76 61 72 20 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 7b 7d 3a 6e 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 7b 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 54 61 70 61 64 4d 65 74 61 43 6f 6f 6b 69 65 49 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 54 61 70 61 64 4d 65 74 61 43 6f 6f 6b 69 65 28 29 3b 74 68 69 73 2e Data Ascii: oid 0!==t?t:"TAPAD"}},{key:"getTapadMetaCookie",value:function(){var e=t.getFromAllStores(this.storageKey);try{var n=JSON.parse(e);return null==n?{}:n}catch(t){return{}}}},{key:"setTapadMetaCookieId",value:function(t){var e=this.getTapadMetaCookie();this.
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 3b 76 61 72 20 72 2c 6f 2c 61 3d 5b 5d 2c 69 3d 21 30 2c 75 3d 21 31 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 74 29 3b 21 28 69 3d 28 72 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 61 2e 70 75 73 68 28 72 2e 76 61 6c 75 65 29 2c 21 65 7c 7c 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 29 3b 69 3d 21 30 29 3b 7d 63 61 74 63 68 28 74 29 7b 75 3d 21 30 2c 6f 3d 74 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 7c 7c 6e 75 6c 6c 3d 3d 6e 2e 72 65 74 75 72 6e 7c 7c 6e 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 75 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 61 7d 28 74 2c 65 29 7c 7c 6d 28 74 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 Data Ascii: f(null==n)return;var r,o,a=[],i=!0,u=!1;try{for(n=n.call(t);!(i=(r=n.next()).done)&&(a.push(r.value),!e\|\|a.length!==e);i=!0);}catch(t){u=!0,o=t}finally{try{i\|\|null==n.return\|\|n.return()}finally{if(u)throw o}}return a}(t,e)\|\|m(t,e)\|\|function(){throw new Ty
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 65 29 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 28 6e 75 6c 6c 3d 3d 65 7c 7c 65 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 65 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 65 29 3b 6e 3c 65 3b 6e 2b 2b 29 72 5b 6e 5d 3d 74 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 65 2e 69 6e 64 65 78 4f 66 28 72 29 3c 30 26 26 28 6e 5b 72 5d 3d 74 5b 72 5d 29 3b 69 66 28 6e 75 6c 6c 21 3d 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d Data Ascii: e):void 0}}function g(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}var b=function(t,e){var n={};for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&e.indexOf(r)<0&&(n[r]=t[r]);if(null!=t&&"function"=
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 74 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 29 7d 29 29 3a 5b 22 64 61 74 61 3d 22 2e 63 6f 6e 63 61 74 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 29 5d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 65 2c 74 5b 65 5d 5d 7d 29 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 79 28 74 2c 32 29 3b 65 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 5b 31 5d 7d 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 79 28 74 2c 32 29 2c 6e 3d 65 5b 30 5d 2c 72 3d 65 5b Data Ascii: t(encodeURIComponent(r))})):["data=".concat(encodeURIComponent(JSON.stringify(t)))]}function j(t){return Object.keys(t).map((function(e){return[e,t[e]]})).filter((function(t){var e=y(t,2);e[0];return null!=e[1]})).map((function(t){var e=y(t,2),n=e[0],r=e[
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 6c 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 4f 28 74 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 70 72 65 74 74 79 50 72 69 6e 74 44 61 74 61 50 61 72 61 6d 73 29 29 2c 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 29 7d 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 2c 6e 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 6e 2e 6c 61 73 74 43 68 69 6c 64 29 7d 29 29 7d 7d 5d 29 26 26 6b 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 6b 28 65 2c 72 29 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 72 Data Ascii: l,"?").concat(O(t,this.config.prettyPrintDataParams)),r.style.display="none",new Promise((function(t,e){r.onload=function(){return t()},r.onerror=function(t){return e(t)},n.insertBefore(r,n.lastChild)}))}}])&&k(e.prototype,n),r&&k(e,r),t}();function I(){r
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 49 73 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 7d 7d 5d 2c 28 6e 3d 5b 7b 6b 65 79 3a 22 73 79 6e 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 61 6c 6c 50 69 78 65 6c 53 65 72 76 65 72 28 74 2c 65 29 7d 7d 2c 7b 6b 65 79 3a 22 63 61 6c 6c 50 69 78 65 6c 53 65 72 76 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 73 79 6e 63 55 72 6c 28 29 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 4f 28 65 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 70 72 65 74 74 79 50 72 69 6e 74 44 61 74 61 50 61 72 61 6d 73 29 29 2c 6f 3d 6e 65 Data Ascii: IsXMLHttpRequest",value:function(t){return null!=t}}],(n=[{key:"sync",value:function(t,e){return this.callPixelServer(t,e)}},{key:"callPixelServer",value:function(e,n){var r="".concat(this.syncUrl(),"?").concat(O(e,this.config.prettyPrintDataParams)),o=ne
2023-12-12 20:40:03 UTC	1252	IN	Data Raw: 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2e 6b 65 79 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 28 55 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 2e 67 65 74 3f 52 65 66 6c 65 63 74 2e 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 3b 21 4f 62 6a 65 63 Data Ascii: ;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}function U(t,e,n){return(U="undefined"!=typeof Reflect&&Reflect.get?Reflect.get:function(t,e,n){var r=function(t,e){for(;!Objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.22	49612	18.173.219.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:03 UTC	542	OUT	GET /cs/27053452/beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:04 UTC	383	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Tue, 12 Dec 2023 20:40:03 GMT Location: /internal-cs/27053452/beacon.js Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 c5ee0f95b71de262d79b7462d2bdda18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: SPjuDR7q7T3NxLx36lfwamsM4Is0SXEzTQCvLk3-SeKT7c19tv_23A==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.22	49615	18.164.84.102	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:03 UTC	585	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:04 UTC	651	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 276088 Connection: close Date: Tue, 12 Dec 2023 20:38:23 GMT Last-Modified: Tue, 05 Dec 2023 22:47:10 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 c34bd35d24f6df50307d1ac92d0f6110.cloudfront.net (CloudFront), 1.1 153732004a8887453ca523567f55954a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 ETag: "ccfaf15c322e197d2e6d0d6bd5642adc" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: utu6PmOJ2t8qtNOPAqurfllUeuKABhxIed4_TBm-36OlWLJw7GL_3A== Age: 101
2023-12-12 20:40:04 UTC	15733	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 33 2e 31 31 32 39 2e 32 30 35 35 20 2d 20 32 30 32 33 2d 31 31 2d 32 39 20 32 30 3a 35 35 3a 30 37 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v23.1129.2055 - 2023-11-29 20:55:07 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n i
2023-12-12 20:40:04 UTC	16384	IN	Data Raw: 57 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 50 2e 69 6e 63 6c 75 64 65 73 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 62 65 20 77 72 69 74 74 65 6e 20 74 6f 20 62 72 6f 77 73 65 72 20 73 74 6f 72 61 67 65 22 29 29 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 2e 63 6f 6e 63 61 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 2c 22 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 20 74 6f 20 62 65 20 77 72 69 74 74 61 62 6c 65 20 74 6f 20 62 72 6f 77 73 65 72 20 73 74 6f 72 61 67 65 22 29 29 3b 74 68 69 73 2e 67 6c 6f 62 61 6c 43 6f Data Ascii: Write=function(t,e){if(!P.includes(t))throw new Error("".concat(t," is not allowed to be written to browser storage"));if("string"!=typeof e)throw new Error("".concat(JSON.stringify(e)," must be a string to be writtable to browser storage"));this.globalCo
2023-12-12 20:40:04 UTC	9457	IN	Data Raw: 72 6e 20 6e 75 6c 6c 21 3d 74 2e 73 74 61 74 75 73 45 76 65 6e 74 73 3f 74 2e 73 74 61 74 75 73 45 76 65 6e 74 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 74 2e 74 79 70 65 2c 73 74 61 74 75 73 3a 65 2e 74 79 70 65 2c 64 65 74 61 69 6c 3a 74 2e 64 65 74 61 69 6c 2c 74 69 6d 65 73 74 61 6d 70 3a 65 2e 74 69 6d 65 53 74 61 6d 70 7d 7d 29 29 3a 5b 5d 7d 29 29 2e 66 6c 61 74 28 29 29 2c 21 31 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 64 65 62 75 67 2f 22 29 7d 29 29 29 2e 73 6f 72 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 74 69 6d 65 73 74 61 6d 70 2d 65 2e 74 69 6d 65 73 74 Data Ascii: rn null!=t.statusEvents?t.statusEvents.map((function(e){return{type:t.type,status:e.type,detail:t.detail,timestamp:e.timeStamp}})):[]})).flat()),!1).filter((function(t){return!t.type.startsWith("debug/")}))).sort((function(t,e){return t.timestamp-e.timest
2023-12-12 20:40:04 UTC	1657	IN	Data Raw: 75 6c 74 3a 6e 65 77 20 4d 61 70 7d 2c 45 74 3d 7b 6b 65 79 3a 22 61 64 2f 61 74 74 61 63 68 54 61 72 67 65 74 69 6e 67 22 2c 64 65 66 61 75 6c 74 3a 76 6f 69 64 20 30 7d 2c 43 74 3d 7b 6b 65 79 3a 22 63 78 6d 2f 69 73 43 6f 6e 66 69 67 4c 6f 61 64 49 6e 69 74 69 61 74 65 64 22 2c 64 65 66 61 75 6c 74 3a 21 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 74 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 2c 6e 3d 74 2e 73 65 6c 65 63 74 65 64 53 6c 6f 74 73 2c 6f 3d 74 2e 70 75 62 6c 69 73 68 65 72 50 61 72 61 6d 73 2c 72 3d 74 2e 74 69 6d 65 6f 75 74 2c 61 3d 74 2e 5f 65 6e 64 70 6f 69 6e 74 44 6f 6d 61 69 6e 2c 73 3d 74 2e 69 6e 69 74 43 6f 6e 66 69 67 3b 72 65 74 75 72 6e 20 75 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 Data Ascii: ult:new Map},Et={key:"ad/attachTargeting",default:void 0},Ct={key:"cxm/isConfigLoadInitiated",default:!1};function St(t){var e=t.account,n=t.selectedSlots,o=t.publisherParams,r=t.timeout,a=t._endpointDomain,s=t.initConfig;return u(this,void 0,void 0,(func
2023-12-12 20:40:04 UTC	16384	IN	Data Raw: 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 22 2e 63 6f 6e 63 61 74 28 63 5b 31 5d 2c 22 70 78 22 29 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 72 61 6d 65 62 6f 72 64 65 72 22 2c 22 30 22 29 3b 76 61 72 20 64 3d 6e 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 76 3d 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6c 6f 63 61 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 22 61 66 74 65 72 65 6e 64 22 2c 70 3d 6e 2e 67 6c 6f 62 61 6c 43 6f 6e Data Ascii: ",u.style.height="".concat(c[1],"px"),u.style.width="100%",u.setAttribute("scrolling","no"),u.setAttribute("frameborder","0");var d=n.globalContext.document.createElement("div"),v=null!==(i=null==o?void 0:o.location)&&void 0!==i?i:"afterend",p=n.globalCon
2023-12-12 20:40:04 UTC	16384	IN	Data Raw: 65 74 75 72 6e 5b 32 5d 7d 7d 29 29 7d 29 29 7d 76 61 72 20 5a 74 3d 7b 67 6f 6f 67 6c 65 5f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 5f 73 65 74 3a 22 67 6f 6f 67 6c 65 2f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 2f 73 65 74 22 2c 67 6f 6f 67 6c 65 5f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3a 22 67 6f 6f 67 6c 65 2f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 2f 69 6e 69 74 69 61 6c 69 7a 65 22 7d 2c 24 74 3d 6e 65 77 20 4d 61 70 28 5b 5b 5a 74 2e 67 6f 6f 67 6c 65 5f 73 65 63 75 72 65 53 69 67 6e 61 6c 73 5f 73 65 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 63 63 6f 75 6e 74 3b 72 65 74 75 72 6e 20 74 2e 63 75 73 74 6f 6d 45 76 65 6e 74 2c 75 28 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 Data Ascii: eturn[2]}}))}))}var Zt={google_secureSignals_set:"google/secureSignals/set",google_secureSignals_initialize:"google/secureSignals/initialize"},$t=new Map([[Zt.google_secureSignals_set,function(t){var e=t.account;return t.customEvent,u(void 0,void 0,void 0
2023-12-12 20:40:04 UTC	2804	IN	Data Raw: 49 4d 45 4f 55 54 3a 32 65 33 2c 44 54 42 5f 50 41 54 48 3a 22 2f 65 2f 64 74 62 22 2c 54 45 53 54 5f 50 41 54 48 5f 46 52 45 51 55 45 4e 43 59 3a 30 2c 54 45 53 54 5f 42 49 44 5f 45 4e 44 50 4f 49 4e 54 3a 6e 75 6c 6c 2c 54 45 53 54 5f 50 41 54 48 5f 4c 41 54 45 4e 43 59 5f 53 41 4d 50 4c 45 5f 52 41 54 45 3a 6e 75 6c 6c 2c 50 49 58 45 4c 5f 50 41 54 48 3a 22 2f 78 2f 70 78 2f 22 2c 4c 41 54 45 4e 43 59 5f 53 41 4d 50 4c 49 4e 47 5f 52 41 54 45 3a 31 2c 43 4f 4f 4b 49 45 5f 4d 41 54 43 48 5f 44 45 4c 41 59 3a 30 2c 4d 41 58 5f 53 4c 4f 54 53 5f 50 45 52 5f 52 45 51 55 45 53 54 3a 31 2c 53 4c 4f 54 5f 52 45 4e 44 45 52 5f 53 41 4d 50 4c 49 4e 47 5f 52 41 54 45 3a 31 2c 46 45 41 54 55 52 45 5f 53 41 4d 50 4c 49 4e 47 5f 52 41 54 45 3a 31 2c 43 4f 4e 46 49 Data Ascii: IMEOUT:2e3,DTB_PATH:"/e/dtb",TEST_PATH_FREQUENCY:0,TEST_BID_ENDPOINT:null,TEST_PATH_LATENCY_SAMPLE_RATE:null,PIXEL_PATH:"/x/px/",LATENCY_SAMPLING_RATE:1,COOKIE_MATCH_DELAY:0,MAX_SLOTS_PER_REQUEST:1,SLOT_RENDER_SAMPLING_RATE:1,FEATURE_SAMPLING_RATE:1,CONFI
2023-12-12 20:40:04 UTC	6396	IN	Data Raw: 73 53 65 6c 66 53 65 72 76 65 50 75 62 3a 76 6f 69 64 20 30 21 3d 3d 65 2e 63 6f 6e 66 69 67 2e 70 75 62 49 44 26 26 35 3c 3d 65 2e 63 6f 6e 66 69 67 2e 70 75 62 49 44 2e 6c 65 6e 67 74 68 7d 29 7d 28 74 2e 63 6f 6e 66 69 67 2c 65 29 2c 64 69 73 70 6c 61 79 41 64 53 65 72 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 22 53 4c 4f 54 5f 52 45 4e 44 45 52 5f 45 4e 44 45 44 5f 53 45 54 22 3a 72 65 74 75 72 6e 20 73 28 73 28 7b 7d 2c 74 29 2c 7b 7d 2c 7b 73 6c 6f 74 52 65 6e 64 65 72 45 6e 64 65 64 53 65 74 3a 21 30 7d 29 3b 63 61 73 65 22 4e 4f 5f 42 49 44 5f 4f 4e 5f 41 44 53 45 52 56 45 52 5f 53 4c 4f 54 53 22 3a 72 65 74 75 72 6e 20 73 28 73 28 7b 7d 2c 74 29 2c 7b 7d 2c 7b 6e 6f 42 69 64 53 Data Ascii: sSelfServePub:void 0!==e.config.pubID&&5<=e.config.pubID.length})}(t.config,e),displayAdServer:function(t,e){switch(e.type){case"SLOT_RENDER_ENDED_SET":return s(s({},t),{},{slotRenderEndedSet:!0});case"NO_BID_ON_ADSERVER_SLOTS":return s(s({},t),{},{noBidS
2023-12-12 20:40:04 UTC	12792	IN	Data Raw: 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 63 2e 62 29 28 74 2c 22 6f 62 6a 65 63 74 54 6f 55 72 6c 50 61 74 68 22 29 2c 22 22 7d 7d 28 74 2e 70 61 79 6c 6f 61 64 29 29 29 3a 28 64 2e 70 75 73 68 28 74 29 2c 21 31 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 29 7b 72 65 74 75 72 6e 20 77 28 7b 70 61 79 6c 6f 61 64 3a 74 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 77 28 7b 70 61 79 6c 6f 61 64 3a 65 2c 62 69 64 49 64 3a 74 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 74 72 79 7b 66 7c 7c 28 66 3d 21 30 2c 64 2e 66 6f 72 45 61 63 68 28 77 29 2c 30 3c 67 2e Data Ascii: return encodeURIComponent(s)}catch(t){return Object(c.b)(t,"objectToUrlPath"),""}}(t.payload))):(d.push(t),!1)}catch(t){return!1}}function T(t){return w({payload:t})}function D(t,e){return w({payload:e,bidId:t})}function I(){try{f\|\|(f=!0,d.forEach(w),0<g.
2023-12-12 20:40:04 UTC	6396	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 5f 7d 29 29 2c 6e 2e 64 28 65 2c 22 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 29 29 3b 76 61 72 20 72 3d 6e 28 32 29 2c 6f 3d 6e 28 35 29 2c 69 3d 6e 28 30 29 2c 61 3d 6e 28 34 29 2c 63 3d 6e 28 31 30 29 2c 73 3d 6e 28 33 29 2c 75 3d 6e 28 31 29 2c 6c 3d 5b 22 67 65 74 4c 6f 67 22 2c 22 67 65 74 53 74 61 74 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 65 2c 6e 29 7b 74 72 79 7b 73 77 69 74 63 68 28 4f 62 6a 65 63 74 28 69 2e 68 29 28 6c 2c 74 29 26 26 28 4f 62 6a 65 63 74 28 75 2e 62 29 28 6e 65 77 20 45 72 72 6f 72 28 22 44 65 62 75 67 20 63 61 6c 6c 20 6d 61 64 65 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 2c 22 64 65 62 75 67 50 75 62 6c 69 63 41 70 69 2d 63 61 6c 6c 2d 22 2e 63 6f 6e 63 Data Ascii: (){return _})),n.d(e,"e",(function(){return E}));var r=n(2),o=n(5),i=n(0),a=n(4),c=n(10),s=n(3),u=n(1),l=["getLog","getState"];function d(t,e,n){try{switch(Object(i.h)(l,t)&&(Object(u.b)(new Error("Debug call made: ".concat(t)),"debugPublicApi-call-".conc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.22	49616	18.164.124.32	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:03 UTC	527	OUT	GET /ope-dmplite.js HTTP/1.1 Host: cdn.opecloud.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:04 UTC	573	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 62130 Connection: close Server: nginx/1.24.0 Last-Modified: Tue, 12 Dec 2023 15:52:17 GMT Accept-Ranges: bytes Date: Tue, 12 Dec 2023 20:14:46 GMT Expires: Tue, 19 Dec 2023 20:02:32 GMT Cache-Control: max-age=604800 Cache-Control: public ETag: "657881b1-f2b2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c83a337c091a978f2c8afbddf7f8fe2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: EIr1qg5dFxOm5gVivcScIZuiP5yqrdSAYBTQQP1ut3a_XdU2D3ms2A== Age: 2251
2023-12-12 20:40:04 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 69 6e 69 74 69 61 6c 43 61 6c 6c 50 72 6f 6d 69 73 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6d 61 78 43 61 6c 6c 44 65 6c 61 79 4d 73 3d 32 65 33 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 50 69 78 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d Data Ascii: !function(){"use strict";var t=function(){function t(){this.initialCallPromise=null,this.maxCallDelayMs=2e3}return t.prototype.callPixel=function(t,n){var e=this,r=function(t,n){return new Promise((function(r){Object.entries(n).forEach((function(n){var e=
2023-12-12 20:40:04 UTC	16384	IN	Data Raw: 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 61 3b 29 74 72 79 7b 69 66 28 65 3d 31 2c 72 26 26 28 6f 3d 32 26 69 5b 30 5d 3f 72 2e 72 65 74 75 72 6e 3a 69 5b 30 5d 3f 72 2e 74 68 72 6f 77 7c 7c 28 28 6f 3d 72 2e 72 65 74 75 72 6e 29 26 26 6f 2e 63 61 6c 6c 28 72 29 2c 30 29 3a 72 2e 6e 65 78 74 29 26 26 21 28 6f 3d 6f 2e 63 61 6c 6c 28 72 2c 69 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6f 3b 73 77 69 74 63 68 28 72 3d 30 2c 6f 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 6f 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 6f 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 61 2e 6c Data Ascii: w TypeError("Generator is already executing.");for(;a;)try{if(e=1,r&&(o=2&i[0]?r.return:i[0]?r.throw\|\|((o=r.return)&&o.call(r),0):r.next)&&!(o=o.call(r,i[1])).done)return o;switch(r=0,o&&(i=[2&i[0],o.value]),i[0]){case 0:case 1:o=i;break;case 4:return a.l
2023-12-12 20:40:04 UTC	16384	IN	Data Raw: 6e 6f 2d 74 61 67 67 65 72 22 29 2c 74 68 69 73 2e 74 61 67 67 65 72 55 72 6c 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 69 78 65 6c 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 65 6e 61 6e 74 3f 6e 65 77 20 55 52 4c 28 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 73 65 61 74 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 74 65 6e 61 6e 74 2c 22 2f 76 32 2f 70 69 78 65 6c 2e 67 69 66 22 29 2c 74 68 69 73 2e 74 61 67 67 65 72 55 72 6c 29 3a 6e 65 77 20 55 52 4c 28 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 73 65 61 74 2c 22 2f 76 32 2f 70 69 78 65 6c 2e 67 69 66 22 29 2c 74 68 69 73 2e 74 61 67 67 65 72 55 72 6c 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 69 78 65 6c 43 6f 6f 6b 69 65 4f 6e 6c 79 55 Data Ascii: no-tagger"),this.taggerUrl)},t.prototype.pixelUrl=function(){return this.tenant?new URL("".concat(this.seat,"/").concat(this.tenant,"/v2/pixel.gif"),this.taggerUrl):new URL("".concat(this.seat,"/v2/pixel.gif"),this.taggerUrl)},t.prototype.pixelCookieOnlyU
2023-12-12 20:40:04 UTC	12978	IN	Data Raw: 21 31 7d 28 6e 29 29 7b 76 61 72 20 65 3d 6e 2e 70 69 6e 67 44 61 74 61 2e 67 70 70 53 74 72 69 6e 67 2c 72 3d 6e 65 77 20 54 74 28 6e 2e 70 69 6e 67 44 61 74 61 2e 70 61 72 73 65 64 53 65 63 74 69 6f 6e 73 2e 75 73 6e 61 74 2c 65 29 3b 74 28 72 29 7d 7d 65 6c 73 65 3b 7d 28 72 2e 72 65 74 75 72 6e 56 61 6c 75 65 29 3b 72 26 26 72 2e 73 75 63 63 65 73 73 7d 29 2c 21 31 29 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 66 72 61 6d 65 73 2e 5f 5f 67 70 70 4c 6f 63 61 74 6f 72 7c 7c 6e 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 3f 6e 3a 74 28 6e 2e 70 61 72 65 6e 74 29 7d 28 77 69 6e 64 6f 77 29 3b 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 5f 5f 67 70 70 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 22 61 64 64 45 76 65 6e Data Ascii: !1}(n)){var e=n.pingData.gppString,r=new Tt(n.pingData.parsedSections.usnat,e);t(r)}}else;}(r.returnValue);r&&r.success}),!1);var e=function t(n){return n.frames.__gppLocator\|\|n==window.top?n:t(n.parent)}(window);e.postMessage({__gppCall:{command:"addEven

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.22	49624	67.202.105.21	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	1018	OUT	GET /ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:04 UTC	792	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:40:04 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8340000A server: 33XP008 location: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X content-length: 0 date: Tue, 12 Dec 2023 20:40:04 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.22	49622	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	928	OUT	GET /getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:04 UTC	602	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Length: 0 Connection: close Location: https://exchange.mediavine.com/usersync/redirect?partner=triplelift&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3571062816453612499566 Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:04 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.22	49623	172.240.155.68	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	940	OUT	GET /ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D HTTP/1.1 Host: sync.colossusssp.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gtm_usr=77ed72d2-2d26-4504-96ec-f9c2a46444c1; lmg_r=15
2023-12-12 20:40:04 UTC	736	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:04 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: gtm_usr=77ed72d2-2d26-4504-96ec-f9c2a46444c1; path=/; domain=.colossusssp.com; expires=Wed, 11 Dec 2024 20:40:04 GMT;SameSite=None;Secure Set-Cookie: lmg_r=15; path=/; domain=.colossusssp.com; expires=Wed, 11 Dec 2024 20:40:04 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://exchange.mediavine.com/usersync/redirect?partner=huddled_masses&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=77ed72d2-2d26-4504-96ec-f9c2a46444c1 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
2023-12-12 20:40:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.22	49627	18.173.219.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	551	OUT	GET /internal-cs/27053452/beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:04 UTC	562	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4321 Connection: close Date: Tue, 12 Dec 2023 04:58:49 GMT Last-Modified: Wed, 06 Dec 2023 05:18:34 GMT ETag: "77ff4ede4693897337a38594321529a3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1ecf1db0c771b8f74edd4bd269377c1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: 1nUVUJALnBNOb0eIotWBi_rY9cpH4YEWoUuW2NAAUZgiGSCgiHK1Sg== Age: 56476
2023-12-12 20:40:04 UTC	3198	IN	Data Raw: 76 61 72 20 43 4f 4d 53 43 4f 52 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 2c 72 29 7b 2d 31 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 26 26 28 65 2b 3d 22 3f 22 29 3b 76 61 72 20 74 3d 21 31 3b 28 2d 31 21 3d 65 2e 69 6e 64 65 78 4f 66 28 22 26 22 29 7c 7c 65 2e 6c 65 6e 67 74 68 2d 31 3e 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 26 26 28 74 3d 21 30 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 61 29 7b 76 61 72 20 69 3d 6e 5b 61 5d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 69 29 74 26 26 28 65 2b 3d 22 26 22 29 2c 74 3d 21 30 2c 65 2b 3d 63 2b 22 3d 22 2b 6f 28 69 5b 63 5d 2b 22 22 29 7d 72 65 74 75 72 6e 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 Data Ascii: var COMSCORE=function(e){function n(e,n,r){-1==e.indexOf("?")&&(e+="?");var t=!1;(-1!=e.indexOf("&")\|\|e.length-1>e.indexOf("?"))&&(t=!0);for(var a=0;a<n.length;++a){var i=n[a];for(var c in i)t&&(e+="&"),t=!0,e+=c+"="+o(i[c]+"")}return e=function(e,n){if(e
2023-12-12 20:40:04 UTC	1123	IN	Data Raw: 70 73 3a 22 22 2c 67 64 70 72 5f 70 63 63 3a 22 22 7d 3b 69 66 28 21 65 2e 6d 29 72 65 74 75 72 6e 7b 49 3a 21 30 2c 6d 3a 21 31 2c 50 3a 21 30 2c 6c 61 62 65 6c 73 3a 7b 63 73 5f 63 6d 70 5f 6e 63 3a 31 7d 2c 4d 3a 21 31 2c 4f 3a 21 30 7d 3b 69 66 28 72 5b 22 63 73 5f 63 6d 70 5f 6e 63 22 5d 3d 65 2e 70 3f 31 3a 30 2c 72 5b 22 63 73 5f 63 6d 70 5f 69 64 22 5d 3d 65 2e 75 2c 72 5b 22 63 73 5f 63 6d 70 5f 73 76 22 5d 3d 65 2e 6c 2c 72 5b 22 63 73 5f 63 6d 70 5f 72 74 22 5d 3d 65 2e 76 2c 21 65 2e 43 29 72 65 74 75 72 6e 7b 49 3a 21 30 2c 6d 3a 21 30 2c 50 3a 21 30 2c 6c 61 62 65 6c 73 3a 72 2c 4d 3a 21 30 2c 4f 3a 21 31 7d 3b 69 66 28 72 5b 22 67 64 70 72 22 5d 3d 22 31 22 2c 21 65 2e 5f 29 72 65 74 75 72 6e 7b 49 3a 21 30 2c 6d 3a 21 30 2c 50 3a 21 31 2c Data Ascii: ps:"",gdpr_pcc:""};if(!e.m)return{I:!0,m:!1,P:!0,labels:{cs_cmp_nc:1},M:!1,O:!0};if(r["cs_cmp_nc"]=e.p?1:0,r["cs_cmp_id"]=e.u,r["cs_cmp_sv"]=e.l,r["cs_cmp_rt"]=e.v,!e.C)return{I:!0,m:!0,P:!0,labels:r,M:!0,O:!1};if(r["gdpr"]="1",!e._)return{I:!0,m:!0,P:!1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.22	49625	34.98.64.218	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	1035	OUT	GET /w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId= HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi
2023-12-12 20:40:04 UTC	694	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:04 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq; Version=1; Expires=Wed, 27-Dec-2023 20:40:04 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Type: text/html Content-Length: 1226 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:04 UTC	1226	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 6f 70 65 6e 78 26 75 75 69 64 3d 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 26 73 32 73 56 65 72 73 69 6f 6e 3d 70 72 6f 64 75 63 74 69 6f 6e 26 70 61 72 74 6e 65 72 49 64 3d 31 30 34 66 31 62 35 37 2d 39 37 65 39 2d 30 62 38 64 2d 30 64 35 37 2d 30 32 32 61 63 33 36 38 36 65 66 39 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 70 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9"><img src="https://op

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.22	49629	18.206.143.86	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	837	OUT	GET /server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId={PUB_USER_ID} HTTP/1.1 Host: ice.360yield.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=9bfa3b33-914e-4ccc-b6f8-0f92df65339b; tuuid_lu=1702413501
2023-12-12 20:40:04 UTC	429	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=9bfa3b33-914e-4ccc-b6f8-0f92df65339b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.22	49630	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	1191	OUT	POST /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Content-Length: 8950 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:04 UTC	8950	OUT	Data Raw: 7b 22 63 6f 6e 6e 65 63 74 49 64 22 3a 22 22 2c 22 75 75 69 64 22 3a 22 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 22 2c 22 75 75 69 64 56 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 2c 22 64 65 76 69 63 65 22 3a 7b 22 6f 73 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 76 22 3a 22 4e 54 20 31 30 2e 30 22 2c 22 64 6e 74 22 3a 30 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 75 61 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b Data Ascii: {"connectId":"","uuid":"6120f800-992e-11ee-8a65-3f15d911ca60","uuidVersion":"invalidate-verizon-pushes","device":{"os":"Windows","osv":"NT 10.0","dnt":0,"h":1024,"w":1280,"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck
2023-12-12 20:40:05 UTC	263	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: https://mathblog.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true
2023-12-12 20:40:05 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.22	49628	34.200.65.202	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	781	OUT	GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; IDSYNC="18za~2fkk:19bx~2fkk"
2023-12-12 20:40:04 UTC	796	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18za~2fkk:19bx~2fkk";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 11-Dec-2024 20:40:04 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://exchange.mediavine.com/usersync/redirect?partner=verizon&partnerId=y-lx7NKpZE2uIevh65FgChwsUh2tPcpg85~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; Expires=Thu, 12 Dec 2024 02:40:04 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.22	49626	34.224.153.9	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	873	OUT	GET /api/v1/dsync/mediavine?exid=6120f800-992e-11ee-8a65-3f15d911ca60us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
2023-12-12 20:40:04 UTC	660	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 208 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Location: https://exchange.mediavine.com/usersync/redirect?partner=kargo&partnerId=0c8954a7-ffa8-19a4-1cc4-650bafbcd1f0&s2sVersion=production&uuid=6120f800-992e-11ee-8a65-3f15d911ca60 Pragma: no-cache Set-Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702; Path=/; Domain=kargo.com; Expires=Wed, 11 Dec 2024 20:40:04 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2023-12-12 20:40:04 UTC	208	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 6b 61 72 67 6f 26 61 6d 70 3b 70 61 72 74 6e 65 72 49 64 3d 30 63 38 39 35 34 61 37 2d 66 66 61 38 2d 31 39 61 34 2d 31 63 63 34 2d 36 35 30 62 61 66 62 63 64 31 66 30 26 61 6d 70 3b 73 32 73 56 65 72 73 69 6f 6e 3d 70 72 6f 64 75 63 74 69 6f 6e 26 61 6d 70 3b 75 75 69 64 3d 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://exchange.mediavine.com/usersync/redirect?partner=kargo&partnerId=0c8954a7-ffa8-19a4-1cc4-650bafbcd1f0&s2sVersion=production&uuid=6120f800-992e-11ee-8a65-3f15d911ca60">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.22	49621	3.210.17.75	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	962	OUT	GET /pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=3zzUbmittUiV3rjzJy9H%7C1702339200000%7C0
2023-12-12 20:40:04 UTC	836	IN	HTTP/1.1 302 Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=3zzUbmittUiV3rjzJy9H%7C1702339200000%7C0; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:04 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Location: https://exchange.mediavine.com/usersync/redirect?partner=yieldmo&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3zzUbmittUiV3rjzJy9H&gdpr=&gdpr_consent=&us_privacy=1--- Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.22	49619	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	923	OUT	GET /track/cmf/generic?ttd_pid=1mahn14&ttd_puid=6120f800-992e-11ee-8a65-3f15d911ca60&ttd_tpi=1&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthe_trade_desk%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%25%25TDID%25%25 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=IAEoAg..
2023-12-12 20:40:04 UTC	560	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Length: 289 Connection: close server: Kestrel location: https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwjAnfOHqNe9PBAFOAFaBzFtYWhuMTRgAg..; expires=Thu, 12 Dec 2024 20:40:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:04 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 74 68 65 5f 74 72 61 64 65 5f 64 65 73 6b 26 74 79 70 65 3d 70 69 78 65 6c 26 70 61 72 74 6e 65 72 49 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 3e 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 74 68 65 5f 74 72 61 64 65 5f 64 65 73 6b 26 74 79 70 65 3d 70 69 78 65 6c 26 70 61 72 74 6e 65 72 49 64 3d 33 33 31 31 61 37 Data Ascii: Redirecting to: <a href="https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec">https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=3311a7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.22	49632	172.64.151.101	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	673	OUT	POST /openrtb/pbjs?s=502649 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2721 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:04 UTC	2721	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 63 36 35 30 64 63 65 62 38 34 35 38 63 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 70 6f 6c 79 6e 6f 6d 69 61 6c 2d 72 6f 6f 74 2d 66 69 6e 64 69 6e 67 2d 77 69 74 68 2d 74 68 65 2d 6a 65 6e 6b 69 6e 73 2d 74 72 61 75 62 2d 61 6c 67 6f 72 69 74 68 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 4d 61 74 68 20 42 6c 6f 67 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 70 61 67 65 63 61 74 22 3a 5b 22 49 41 42 35 22 5d Data Ascii: {"id":"5c650dceb8458c","site":{"page":"https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/","domain":"mathblog.com","publisher":{"domain":"mathblog.com"},"name":"Math Blog","cat":["IAB5"],"sectioncat":["IAB5"],"pagecat":["IAB5"]
2023-12-12 20:40:05 UTC	713	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Type: application/json Content-Length: 36 Connection: close CF-Ray: 8348c7c5d867b3b6-MIA CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://mathblog.com Cache-Control: no-cache Expires: 0 Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Faag6CqwyJcpx2TSjBPYhOC44iHwVtVnqHVfZNGlqNjQmiLM0vxpEvTIMc5qPEGT4J7H%2F%2FEfFMKFJXWCK9pwDMHe7uohMkATVl4tVY8z8wNaU0TjdsMw9GZQQb4QAT%2BqRtITOe%2FR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:05 UTC	36	IN	Data Raw: 7b 22 69 64 22 3a 22 35 63 36 35 30 64 63 65 62 38 34 35 38 63 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"5c650dceb8458c","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.22	49620	52.204.15.232	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	919	OUT	GET /usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:04 UTC	216	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 2770 Connection: close Server: nginx ETag: "00136e8549f4df6242a5485fb4b7a2e8e" Timing-Allow-Origin: *
2023-12-12 20:40:04 UTC	2770	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 67 75 6d 67 75 6d 32 26 75 73 65 72 5f 69 64 3d 75 5f 37 65 36 61 33 63 36 65 2d 65 63 36 34 2d 34 32 37 32 2d 62 31 32 62 2d 31 66 64 33 65 64 33 61 32 33 37 62 Data Ascii: <html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/><img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.22	49618	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	936	OUT	GET /check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:04 UTC	365	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://exchange.mediavine.com/usersync/redirect?partner=mediagrid&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.22	49633	172.64.151.101	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	673	OUT	POST /openrtb/pbjs?s=502649 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2779 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:04 UTC	2779	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 63 36 35 30 64 63 65 62 38 34 35 38 63 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 70 6f 6c 79 6e 6f 6d 69 61 6c 2d 72 6f 6f 74 2d 66 69 6e 64 69 6e 67 2d 77 69 74 68 2d 74 68 65 2d 6a 65 6e 6b 69 6e 73 2d 74 72 61 75 62 2d 61 6c 67 6f 72 69 74 68 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 4d 61 74 68 20 42 6c 6f 67 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 70 61 67 65 63 61 74 22 3a 5b 22 49 41 42 35 22 5d Data Ascii: {"id":"5c650dceb8458c","site":{"page":"https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/","domain":"mathblog.com","publisher":{"domain":"mathblog.com"},"name":"Math Blog","cat":["IAB5"],"sectioncat":["IAB5"],"pagecat":["IAB5"]
2023-12-12 20:40:05 UTC	705	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: application/json Content-Length: 36 Connection: close CF-Ray: 8348c7c6aa484c0d-MIA CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://mathblog.com Cache-Control: no-cache Expires: 0 Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pwLBp3iUQgxpuS2nBYHYsEJDsglOn1jlR2Vdh4G4SiJwItw1zo2xyQsL6NHfaAqjnte%2Fvhd9sIN8Cicp7yZOuF8bzuOuTNnqAaUMCYTZhG3tXxjlBotw64mc2T608rnUNfZqJ5aw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:05 UTC	36	IN	Data Raw: 7b 22 69 64 22 3a 22 35 63 36 35 30 64 63 65 62 38 34 35 38 63 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"5c650dceb8458c","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.22	49617	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	762	OUT	GET /sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:05 UTC	418	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:04 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //server.cpmstar.com/usersync.aspx?bsw_custom_parameter=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=0&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D440%26ssp%3Dthemediagrid%26user_id%3D%24UID

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.22	49638	18.164.84.102	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	692	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fmathblog.com&pubid=38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:05 UTC	492	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 471 Connection: close Access-Control-Allow-Origin: https://mathblog.com Access-Control-Allow-Credentials: true Cache-Control: max-age=21550, s-maxage=21600 Date: Tue, 12 Dec 2023 20:40:04 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 3c790b7740916e9710f9e5f1b3e1dd0a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: 6Xvezfe6wSj5vYRcH5UElvIVDMPVz2xhI4c8Olvv6FGXojBw3gC2OQ==
2023-12-12 20:40:05 UTC	471	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 70 75 62 63 6f 6d 6d 6f 6e 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 69 64 35 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 22 2c 22 33 70 6d 65 74 61 64 61 74 61 22 3a 22 5b 7b 5c 22 70 72 6f 70 65 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"prope

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.22	49639	74.119.119.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	688	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&bundle=OkqPrF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkNuQUxZcnhWR1dGU1F2cGJBdVZFc1ZPNVhJdXBmSzRVS29INGJjc083YkxFeEo4cnJrWUJRdkpnRnk0VHJNWTNHYU1vUXN1MzdJclBRd29ibCUyRlJXWVgxRyUyRlI0MHFJODdmUWlBRkZ5cHNFNA&cw=1&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:05 UTC	349	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:40:04 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 878327 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:40:05 UTC	443	IN	Data Raw: 31 41 46 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 61 34 67 45 5a 46 39 6c 52 57 56 59 52 6a 46 4d 55 44 42 5a 61 53 55 79 52 6c 42 6f 56 55 78 53 52 47 31 6a 56 6b 35 33 4d 45 39 6e 61 47 52 49 64 6e 5a 4d 5a 48 49 6c 4d 6b 5a 6f 64 30 52 30 4a 54 4a 47 4f 57 4e 47 56 48 4a 35 4d 30 31 71 51 6b 78 6f 4a 54 4a 43 52 55 39 49 63 57 6b 30 54 32 39 55 53 44 41 77 59 7a 46 6e 56 31 6f 33 4d 48 67 31 59 56 56 49 4e 58 5a 45 61 6c 4e 5a 4e 6b 5a 4d 4e 7a 56 4b 5a 56 63 6c 4d 6b 5a 4c 4a 54 4a 47 53 46 52 56 65 6e 52 4b 54 54 4e 31 52 30 6c 30 57 6a 45 30 64 56 46 73 63 6d 4a 49 64 32 4e 30 52 44 4e 57 4f 54 6c 76 5a 56 45 79 56 6a 4e 54 51 32 4a 53 62 46 46 6b 5a 57 6c 34 4e 33 68 6d 52 32 4e 31 55 46 4d 35 62 33 63 6c 4d 30 51 6c 4d 30 51 22 2c 22 62 69 64 49 64 Data Ascii: 1AF{"bundle":"a4gEZF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVk53ME9naGRIdnZMZHIlMkZod0R0JTJGOWNGVHJ5M01qQkxoJTJCRU9IcWk0T29USDAwYzFnV1o3MHg1YVVINXZEalNZNkZMNzVKZVclMkZLJTJGSFRVenRKTTN1R0l0WjE0dVFscmJId2N0RDNWOTlvZVEyVjNTQ2JSbFFkZWl4N3hmR2N1UFM5b3clM0QlM0Q","bidId

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.22	49640	18.164.84.102	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	571	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:05 UTC	715	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Tue, 12 Dec 2023 20:40:06 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Tue, 29 Aug 2023 08:30:37 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: 9yABOonr2HqHtwbarUcdbIqN0f4A8Qog Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 bfcf96734b4cc9857b114ec0d9419dc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: 4IaVo7_2ou8pUHoLl5Utxqsk7huSTybUcZWSvCG7edWh5_7MkPxjcA==
2023-12-12 20:40:05 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.22	49636	3.231.136.235	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	781	OUT	POST /header/auction?lib=prebid&v=8.20.0&referrer=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&tmax=2801&us_privacy=1--- HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 3100 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:04 UTC	3100	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 76 69 6e 65 5f 72 6f 6e 5f 61 64 68 65 73 69 6f 6e 5f 64 65 73 6b 74 6f 70 5f 37 32 38 78 39 30 5f 50 72 65 62 69 64 22 2c 22 66 6c 6f 6f 72 22 3a 30 2e 31 32 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 34 36 38 2c 22 68 22 3a 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 31 30 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 38 32 34 2f 6d 61 74 68 62 6c 6f 67 2f 61 64 68 65 73 69 6f 6e 22 2c 22 61 64 73 65 72 Data Ascii: {"imp":[{"id":0,"tagid":"Mediavine_ron_adhesion_desktop_728x90_Prebid","floor":0.12,"banner":{"format":[{"w":728,"h":90},{"w":970,"h":90},{"w":468,"h":60},{"w":320,"h":100}]},"fpd":{"context":{"data":{"pbadslot":"/1030006,1037824/mathblog/adhesion","adser
2023-12-12 20:40:05 UTC	641	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: application/json; charset=utf-8 Content-Length: 19 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 15 Oct 1992 20:10:00 GMT Pragma: no-cache X-XSS-Protection: 0 P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Access-Control-Allow-Origin: https://mathblog.com Access-Control-Allow-Credentials: true Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:05 GMT; Secure; SameSite=None
2023-12-12 20:40:05 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.22	49631	68.67.160.186	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	576	OUT	GET /async_usersync?cbfn=queuePixels HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acdn.adnxs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353
2023-12-12 20:40:05 UTC	858	IN	HTTP/1.1 200 OK Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 1def6968-bc2d-42cf-9932-64b0488b2142 Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:05 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.22	49634	104.36.115.111	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:04 UTC	1270	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2953 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; PugT=1702378946
2023-12-12 20:40:04 UTC	2953	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 32 34 31 33 36 30 33 38 30 36 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 33 62 34 37 33 34 65 64 34 39 37 31 66 35 22 2c 22 74 61 67 69 64 22 3a 22 73 74 69 63 6b 79 5f 6f 75 74 73 74 72 65 61 6d 5f 64 65 73 6b 74 6f 70 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 31 2e 32 34 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 38 32 34 2f 6d 61 74 68 62 6c 6f 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 6c 61 79 65 72 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 Data Ascii: {"id":"1702413603806","at":1,"cur":["USD"],"imp":[{"id":"13b4734ed4971f5","tagid":"sticky_outstream_desktop","bidfloor":1.24,"secure":1,"ext":{"data":{"pbadslot":"/1030006,1037824/mathblog/universal_player","adserver":{"name":"gam","adslot":"/1030006,1037
2023-12-12 20:40:05 UTC	226	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://mathblog.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 12 Dec 2023 20:40:04 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.22	49641	3.163.87.30	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	2430	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=jURFnvrSHaGY9&cb=0&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:05 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 104 Connection: close Server: Server Date: Tue, 12 Dec 2023 20:40:05 GMT x-amz-rid: NZVNPJJYVM7ZAZ024F1A Access-Control-Allow-Origin: https://mathblog.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Strict-Transport-Security: max-age=47474747; includeSubDomains; preload Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 9dd92bb62a9e5979e6e29d6b9db96954.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: HzMwKZa7YdXadszCQNT5HgHS4umN6QKW-N1fKrUEVgkv8cKWHP6P5A==
2023-12-12 20:40:05 UTC	104	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 67 67 22 2c 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg","cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.22	49643	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	1379	OUT	GET /usersync/redirect?partner=triplelift&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3571062816453612499566 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:05 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.22	49648	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	1285	OUT	GET /usersync/redirect?partner=kargo&partnerId=0c8954a7-ffa8-19a4-1cc4-650bafbcd1f0&s2sVersion=production&uuid=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:05 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.22	49644	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	1241	OUT	GET /usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:05 UTC	304	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 62 Connection: close Vary: Origin, Accept, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache Location: https://exchange.mediavine.com/pixel.gif
2023-12-12 20:40:05 UTC	62	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 70 69 78 65 6c 2e 67 69 66 Data Ascii: Found. Redirecting to https://exchange.mediavine.com/pixel.gif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.22	49645	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	1294	OUT	GET /usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=9bfa3b33-914e-4ccc-b6f8-0f92df65339b HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:05 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.22	49646	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	1397	OUT	GET /usersync/redirect?partner=huddled_masses&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=77ed72d2-2d26-4504-96ec-f9c2a46444c1 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:05 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.22	49647	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	1262	OUT	GET /usersync/redirect?partner=verizon&partnerId=y-lx7NKpZE2uIevh65FgChwsUh2tPcpg85~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:05 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.22	49651	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	1289	OUT	GET /usersync/redirect?partner=mediagrid&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:05 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.22	49650	67.202.105.31	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	1424	OUT	GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=OTTukGV4xLvEI2PjCmMC3Q==; pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%227daaa56bb0%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%5D
2023-12-12 20:40:05 UTC	1489	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%223bfd58deb3%22%2C%22f%22%3A1%2C%22ts%22%3A1702413605897%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%22029cc11ae7%22%2C%22f%22%3A1%2C%22ts%22%3A1702413605897%7D%2C%7B%22p%22%3A%221fbac30d28%22%2C%22f%22%3A1%2C%22ts%22%3A1702413605897%7D%2C%7B%22p%22%3A%227daaa56bb0%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%227912d88d74%22%2C%22f%22%3A1%2C%22ts%22%3A1702413605897%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%2222833ea406%22%2C%22f%22%3A1%2C%22ts%22%3A1702413605897%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1702413499838%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1702413605897%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure referrer-policy: unsafe-url content-type: text/html content-length: 2240 date: Tue, 12 Dec 2023 20:40:04 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2023-12-12 20:40:05 UTC	2240	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 5f 3d 31 37 30 32 34 31 33 36 30 35 38 39 37 2e 26 72 69 3d 30 30 31 34 30 30 30 30 30 30 78 76 45 66 77 41 41 45 26 67 64 70 72 5f 35 38 3d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 Data Ascii: <!doctype html><html><head></head><body><script>(function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://ssc-cms.33across.com/ps/?_=1702413605897.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.22	49652	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	1410	OUT	GET /usersync/redirect?partner=yieldmo&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3zzUbmittUiV3rjzJy9H&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:06 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.22	49653	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	1284	OUT	GET /usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:06 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.22	49658	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	898	OUT	GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
2023-12-12 20:40:06 UTC	556	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:05 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://usersync.gumgum.com/usersync?b=opx&i=293b2f42-092f-04b7-0a33-f4e4b96c0202 Date: Tue, 12 Dec 2023 20:40:05 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.22	49659	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	981	OUT	GET /w/1.0/cm?id=b9f5c7de-85f6-48cc-ba86-351b90373b6b&r=https%3A%2F%2Fa.tribalfusion.com%2Fi.match%3Fp%3Db12%26redirect%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537141727%2526val%253D%2524TF_USER_ID_ENC%2524%26u%3D%7BOPENX_ID%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
2023-12-12 20:40:06 UTC	653	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:06 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://a.tribalfusion.com/i.match?p=b12&redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537141727%26val%3D%24TF_USER_ID_ENC%24&u=d73dfa8f-b445-057f-1a13-5aee83e2fb78 Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.22	49663	169.197.150.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	793	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_1296d48b0e654caba2d72; CDIPARTNERS=%7B%221%22%3A%2220231212%22%2C%22142%22%3A%2220231212%22%7D
2023-12-12 20:40:06 UTC	645	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://usersync.gumgum.com/usersync?b=dit&i=di_1296d48b0e654caba2d72 set-cookie: CDIUSER=di_1296d48b0e654caba2d72; Max-Age=47260800; SameSite=None; Expires=Wed, 11 Jun 2025 20:40:05 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220231212%22%2C%22142%22%3A%2220231212%22%7D; Max-Age=47260800; SameSite=None; Expires=Wed, 11 Jun 2025 20:40:05 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Tue, 12 Dec 2023 20:40:05 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.22	49661	44.207.23.148	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	716	OUT	GET /sync/gumgum?gdpr=&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
2023-12-12 20:40:06 UTC	852	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Length: 0 Connection: close Location: https://usersync.gumgum.com/usersync?b=oth&i=y-i5Vemz9E2pcAB3qsj5sq4a92wTUal4GhEbBQ~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; Expires=Thu, 12 Dec 2024 02:40:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.22	49657	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	760	OUT	GET /sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:06 UTC	318	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //sync-dmp.mobtrakk.com/match/bidswitch?id=${user_id}&gdpr=&consent=&usp=1---&ssp=gumgum2&bsw=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.22	49654	203.210.102.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	603	OUT	GET /favicon.ico HTTP/1.1 Host: interactiveds.com.au Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactiveds.com.au/IDSau/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:06 UTC	163	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 Connection: close
2023-12-12 20:40:06 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.22	49662	54.162.157.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	830	OUT	GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=8a323469-881a-408a-9858-5975924b765a\|1702413502774
2023-12-12 20:40:06 UTC	460	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:40:06 GMT Location: https://usersync.gumgum.com/usersync?b=vnt&i=8a323469-881a-408a-9858-5975924b765a Set-Cookie: cu=8a323469-881a-408a-9858-5975924b765a\|1702413502774; Path=/; Domain=ipredictive.com; Expires=Wed, 11 Dec 2024 20:40:06 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 398cd0ba-a159-4282-a3cf-1357211dc6f7 Content-Length: 108 Connection: Close
2023-12-12 20:40:06 UTC	108	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 76 6e 74 26 61 6d 70 3b 69 3d 38 61 33 32 33 34 36 39 2d 38 38 31 61 2d 34 30 38 61 2d 39 38 35 38 2d 35 39 37 35 39 32 34 62 37 36 35 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=vnt&i=8a323469-881a-408a-9858-5975924b765a">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.22	49655	203.210.102.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	686	OUT	GET /IDSau/wp-content/themes/twentyeleven/images/search.png HTTP/1.1 Host: interactiveds.com.au Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactiveds.com.au/IDSau/wp-content/themes/twentyeleven/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:06 UTC	204	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Type: image/png Content-Length: 440 Connection: close Last-Modified: Fri, 26 Oct 2012 23:24:23 GMT Accept-Ranges: bytes
2023-12-12 20:40:06 UTC	440	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 a2 50 4c 54 45 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 06 06 00 00 00 00 00 00 00 00 00 05 05 05 05 05 05 04 04 04 04 04 04 04 04 04 08 08 04 04 04 04 04 07 04 07 07 07 07 07 07 07 07 07 07 07 03 07 0a 03 06 06 06 0a 0a 0a 06 06 06 09 09 06 09 09 09 09 09 09 08 0b 08 08 08 08 08 0b 08 08 0b 08 08 0b 08 08 0b 08 08 0b 08 0b 0d 0b 46 9c 6d 25 00 00 00 36 74 52 4e 53 00 01 02 03 04 05 06 0d 0e 0f 10 11 14 15 1a 1b 1c 1e 20 22 23 24 26 28 2c 2e 30 32 33 39 3a 3c 41 42 45 46 48 49 4b 4c Data Ascii: PNGIHDRW?PLTEFm%6tRNS "#$&(,.0239:<ABEFHIKL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.22	49656	68.67.160.184	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	666	OUT	GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353
2023-12-12 20:40:06 UTC	1009	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://usersync.gumgum.com/usersync?b=apn&i=2638779048715878353 AN-X-Request-Uuid: 7d111cf9-35a0-4c39-9ac3-5649d47056f2 Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:06 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 669.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.22	49666	3.228.157.65	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	587	OUT	GET /CookieSyncOpenX HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:06 UTC	128	IN	HTTP/1.1 204 No Content Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.22	49667	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	738	OUT	GET /usersync/openx/4d309b50-5a8f-0e8a-3da5-bde1d7844f38 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22zdxidn%22%3A%222069.80%22%7D
2023-12-12 20:40:06 UTC	691	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:06 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:06 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D97%263pid%3DRX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 connection: close
2023-12-12 20:40:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.22	49664	54.152.252.123	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	1300	OUT	GET /sync?nid=1&gdpr=&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU
2023-12-12 20:40:06 UTC	253	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:40:06 GMT Location: https://usersync.gumgum.com/usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212 Content-Length: 129 Connection: Close
2023-12-12 20:40:06 UTC	129	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 73 74 61 26 61 6d 70 3b 69 3d 30 2d 31 38 37 66 63 39 62 63 2d 33 38 66 63 2d 35 36 33 37 2d 36 66 61 63 2d 31 39 34 65 36 61 66 31 65 36 61 37 24 69 70 24 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 31 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.22	49670	131.153.170.220	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	784	OUT	GET /usersync.aspx?bsw_custom_parameter=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=0&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D440%26ssp%3Dthemediagrid%26user_id%3D%24UID HTTP/1.1 Host: server.cpmstar.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:06 UTC	635	IN	HTTP/1.1 302 Found Cache-Control: private,no-store, no-cache, must-revalidate Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://x.bidswitch.net/sync?dsp_id=440&ssp=themediagrid&user_id=jzw3XABN4jyXhRljypiQ0 Server: Microsoft-IIS/10.0 Set-Cookie: USER_ID=%8f%3c7%5c%00M%e2%3c%97%85%19c%ca%98%90; domain=.server.cpmstar.com; expires=Sun, 05-Jan-2025 20:40:06 GMT; path=/; secure; SameSite=None P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADM DEVa PSAa PSDa OUR OTR IND UNI NAV STA" Date: Tue, 12 Dec 2023 20:40:05 GMT Connection: close Content-Length: 211
2023-12-12 20:40:06 UTC	211	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 64 73 70 5f 69 64 3d 34 34 30 26 61 6d 70 3b 73 73 70 3d 74 68 65 6d 65 64 69 61 67 72 69 64 26 61 6d 70 3b 75 73 65 72 5f 69 64 3d 6a 7a 77 33 58 41 42 4e 34 6a 79 58 68 52 6c 6a 79 70 69 51 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://x.bidswitch.net/sync?dsp_id=440&ssp=themediagrid&user_id=jzw3XABN4jyXhRljypiQ0">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.22	49668	54.159.220.191	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:05 UTC	642	OUT	GET /cookie-sync/ox HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAB3wk7K8YkAABTAD88gJQ; bitoIsSecure=ok
2023-12-12 20:40:06 UTC	627	IN	HTTP/1.1 303 See Other Date: Tue, 12 Dec 2023 20:40:06 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAB3wk7K8YkAABTAD88gJQ&r=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fbee_sync_partners%3Dsas%252Cpp%252Csyn%252Cox%26bee_sync_current_partner%3Dpm%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D1 Server: gunicorn set-cookie: bito=AAB3wk7K8YkAABTAD88gJQ; Domain=bidr.io; expires=Fri, 10 Jan 2025 15:40:06 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.22	49672	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	425	OUT	GET /openrtb/pbjs?s=502649 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:06 UTC	608	IN	HTTP/1.1 204 No Content Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Type: application/json Connection: close CF-Ray: 8348c7cf1bfb748d-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dniGhczeohICMH7JZuL9UPhNvWm8n%2F5jkPz%2F%2BH8dFmtWufpodDLTyOQYEc8Y9UTcldvX6QwDO6iACxpI0LYVqjBnynVQvFq3t%2BSsT2kIdIT6zQ9IJRuFDUhTti4VNnLSF11QiBk4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.22	49677	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	1006	OUT	GET /pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyYi0xZmQzZWQzYTIzN2I=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:06 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:06 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.22	49674	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	731	OUT	GET /cksync.php?type=opx&ovsid=162ae2ad-8a3a-0601-0e07-9a67c3d39198 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3454150986930039084V10; data-mv=6120f800-992e-11ee-8a65-3f15d911ca60~~19
2023-12-12 20:40:06 UTC	614	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-o=162ae2ad-8a3a-0601-0e07-9a67c3d39198~~3;Expires=Tue, 10 Dec 2024 20:40:06 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 x-mnet-hl2: E Expires: Tue, 12 Dec 2023 20:40:06 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 12 Dec 2023 20:40:06 GMT Connection: close
2023-12-12 20:40:06 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-12 20:40:06 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.22	49679	18.164.84.102	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	493	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fmathblog.com&pubid=38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:06 UTC	401	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 471 Connection: close Cache-Control: max-age=21550, s-maxage=21600 Date: Tue, 12 Dec 2023 20:40:06 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 5584a67adae1a4ad6dd53bc55e0a9b30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: oVkB_h9ZT57M6wSHmXkNOv9Rg4pTRL-3AriWNEGzuLzyj_hv7IfPYQ==
2023-12-12 20:40:06 UTC	471	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 70 75 62 63 6f 6d 6d 6f 6e 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 69 64 35 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 22 2c 22 33 70 6d 65 74 61 64 61 74 61 22 3a 22 5b 7b 5c 22 70 72 6f 70 65 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"prope

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.22	49678	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	425	OUT	GET /openrtb/pbjs?s=502649 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:06 UTC	608	IN	HTTP/1.1 204 No Content Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Type: application/json Connection: close CF-Ray: 8348c7d03e228db8-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dy%2BzsQCOjoOjyOLFWczolIHqk0EP%2BoVn4jMEnNu1xm8AyDo0rUHUw4njoai4eUzq9YoSYVXkDVWSubL%2FVIrT25gvZls%2FC28fTcWPamzwVJ6rODLIzJSihpsVY8EyIykZcZu0p322"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.22	49686	64.74.236.255	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	781	OUT	GET /usersync/gumgum/?puid=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=1DASsxNWMH7qY1-EP1FQ
2023-12-12 20:40:06 UTC	530	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 112 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://usersync.gumgum.com/usersync?b=zem&i=1DASsxNWMH7qY1-EP1FQ&us_privacy=1--- P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=1DASsxNWMH7qY1-EP1FQ; Path=/; Domain=zemanta.com; Expires=Wed, 11 Dec 2024 20:40:06 GMT; Max-Age=31536000; Secure; SameSite=None Date: Tue, 12 Dec 2023 20:40:06 GMT
2023-12-12 20:40:06 UTC	112	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 7a 65 6d 26 61 6d 70 3b 69 3d 31 44 41 53 73 78 4e 57 4d 48 37 71 59 31 2d 45 50 31 46 51 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=zem&i=1DASsxNWMH7qY1-EP1FQ&us_privacy=1---">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.22	49692	34.120.135.53	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	809	OUT	GET /esp?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
2023-12-12 20:40:06 UTC	386	IN	HTTP/1.1 200 OK X-Powered-By: Express Access-Control-Allow-Origin: https://mathblog.com Vary: Origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 85 ETag: W/"55-muGH0vcZs6k0igZH/WpVPIvDE88" Date: Tue, 12 Dec 2023 20:40:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:06 UTC	85	IN	Data Raw: 7b 22 65 73 70 22 3a 22 65 79 4a 70 49 6a 6f 69 52 47 46 78 4d 47 45 30 61 54 6c 42 65 46 6b 7a 62 6d 6c 36 61 45 5a 53 63 33 64 31 55 54 30 39 49 6e 30 3d 22 2c 22 69 22 3a 22 44 61 71 30 61 34 69 39 41 78 59 33 6e 69 7a 68 46 52 73 77 75 51 3d 3d 22 7d Data Ascii: {"esp":"eyJpIjoiRGFxMGE0aTlBeFkzbml6aEZSc3d1UT09In0=","i":"Daq0a4i9AxY3nizhFRswuQ=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.22	49685	185.184.8.90	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	781	OUT	GET /cm-notify?pi=gumgum HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
2023-12-12 20:40:06 UTC	397	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:06 GMT vary: Accept-Encoding location: https://usersync.gumgum.com/usersync?b=rth&i=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=gumgum cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Tue, 12 Dec 2023 20:40:06 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.22	49684	64.74.236.255	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	637	OUT	GET /usersync/rubicon/ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=1DASsxNWMH7qY1-EP1FQ
2023-12-12 20:40:06 UTC	543	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 129 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://pixel.rubiconproject.com/tap.php?v=144598&nid=3992&expires=30&put=1DASsxNWMH7qY1-EP1FQ P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=1DASsxNWMH7qY1-EP1FQ; Path=/; Domain=zemanta.com; Expires=Wed, 11 Dec 2024 20:40:06 GMT; Max-Age=31536000; Secure; SameSite=None Date: Tue, 12 Dec 2023 20:40:06 GMT
2023-12-12 20:40:06 UTC	129	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 31 34 34 35 39 38 26 61 6d 70 3b 6e 69 64 3d 33 39 39 32 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 70 75 74 3d 31 44 41 53 73 78 4e 57 4d 48 37 71 59 31 2d 45 50 31 46 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pixel.rubiconproject.com/tap.php?v=144598&nid=3992&expires=30&put=1DASsxNWMH7qY1-EP1FQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.22	49688	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	1152	OUT	GET /pixel.gif HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:06 UTC	305	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Type: image/gif Content-Length: 1561 Connection: close Vary: Origin Access-Control-Allow-Credentials: true Cache-Control: no-cache, private Accept-Ranges: bytes Last-Modified: Wed, 06 Dec 2023 17:58:38 GMT ETag: W/"619-18c404820b0"
2023-12-12 20:40:06 UTC	1561	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 ff 00 00 00 00 00 00 00 33 00 00 66 00 00 99 00 00 cc 00 00 ff 00 33 00 00 33 33 00 33 66 00 33 99 00 33 cc 00 33 ff 00 66 00 00 66 33 00 66 66 00 66 99 00 66 cc 00 66 ff 00 99 00 00 99 33 00 99 66 00 99 99 00 99 cc 00 99 ff 00 cc 00 00 cc 33 00 cc 66 00 cc 99 00 cc cc 00 cc ff 00 ff 00 00 ff 33 00 ff 66 00 ff 99 00 ff cc 00 ff ff 33 00 00 33 00 33 33 00 66 33 00 99 33 00 cc 33 00 ff 33 33 00 33 33 33 33 33 66 33 33 99 33 33 cc 33 33 ff 33 66 00 33 66 33 33 66 66 33 66 99 33 66 cc 33 66 ff 33 99 00 33 99 33 33 99 66 33 99 99 33 99 cc 33 99 ff 33 cc 00 33 cc 33 33 cc 66 33 cc 99 33 cc cc 33 cc ff 33 ff 00 33 ff 33 33 ff 66 33 ff 99 33 ff cc 33 ff ff 66 00 00 66 00 33 66 00 66 66 00 99 66 00 cc 66 00 ff 66 33 00 66 33 33 66 33 Data Ascii: GIF89a3f3333f333ff3fffff3f3f3f3333f3333333333f3333333f3f33ff3f3f3f3333f3333333f3333333f333ff3ffffff3f33f3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.22	49694	192.178.50.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	825	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:06 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Tue, 12 Dec 2023 20:40:06 GMT Expires: Wed, 11 Dec 2024 20:40:06 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:06 UTC	545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2023-12-12 20:40:06 UTC	1252	IN	Data Raw: 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 Data Ascii: .createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=functi
2023-12-12 20:40:06 UTC	1252	IN	Data Raw: 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 Data Ascii: this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"st
2023-12-12 20:40:06 UTC	1252	IN	Data Raw: 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c Data Ascii: ();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),
2023-12-12 20:40:06 UTC	1252	IN	Data Raw: 5b 32 5d 2c 45 3d 43 5b 33 5d 3b 69 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c Data Ascii: [2],E=C[3];if(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hl
2023-12-12 20:40:06 UTC	609	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b Data Ascii: .location.href,!1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.22	49681	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	847	OUT	GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASABKAIyCwjAnfOHqNe9PBAFOAFaBzFtYWhuMTRgAg..
2023-12-12 20:40:06 UTC	508	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Length: 193 Connection: close server: Kestrel location: https://usersync.gumgum.com/usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC; expires=Thu, 12 Dec 2024 20:40:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:06 UTC	193	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 3e 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://usersync.gumgum.com/usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec">https://usersync.gumgum.com/usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.22	49691	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	721	OUT	GET /sync?dsp_id=440&ssp=themediagrid&user_id=jzw3XABN4jyXhRljypiQ0 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:07 UTC	187	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2023-12-12 20:40:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.22	49690	18.173.132.10	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:06 UTC	624	OUT	GET /configs/38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:07 UTC	390	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 785 Connection: close Server: CloudFront Date: Tue, 12 Dec 2023 20:04:09 GMT Cache-Control: max-age=3600 X-Cache: Hit from cloudfront Via: 1.1 be85287d15abd3cfecdfa319493ba256.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P2 X-Amz-Cf-Id: txET-6nXdeaPTl-iFvvq9USQ-4sel2yVWMTn-Q_PtDMP0gj4hEAnNg== Age: 2158
2023-12-12 20:40:07 UTC	785	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 33 38 39 31 38 30 39 35 2d 38 65 34 35 2d 34 33 33 32 2d 38 38 62 66 2d 32 32 36 62 33 35 31 34 63 62 36 34 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 Data Ascii: (function () {try {const accountId = "38918095-8e45-4332-88bf-226b3514cb64";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.22	49700	172.64.151.101	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	673	OUT	POST /openrtb/pbjs?s=179872 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 3362 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:07 UTC	3362	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 31 63 31 66 64 35 33 32 30 61 34 34 61 32 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 70 6f 6c 79 6e 6f 6d 69 61 6c 2d 72 6f 6f 74 2d 66 69 6e 64 69 6e 67 2d 77 69 74 68 2d 74 68 65 2d 6a 65 6e 6b 69 6e 73 2d 74 72 61 75 62 2d 61 6c 67 6f 72 69 74 68 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 4d 61 74 68 20 42 6c 6f 67 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 70 61 67 65 63 61 74 22 3a 5b 22 49 41 42 35 22 Data Ascii: {"id":"31c1fd5320a44a2","site":{"page":"https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/","domain":"mathblog.com","publisher":{"domain":"mathblog.com"},"name":"Math Blog","cat":["IAB5"],"sectioncat":["IAB5"],"pagecat":["IAB5"
2023-12-12 20:40:07 UTC	715	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: application/json Content-Length: 37 Connection: close CF-Ray: 8348c7d42e007416-MIA CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://mathblog.com Cache-Control: no-cache Expires: 0 Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uK%2FMI86AGdj7UwKpTkO6c5uxC4UYCTU04cvUNpmbKxvwYKOK5Vn9LVj1NA8bDj8Gr4hmKRx%2BBKZEc4LV9a1y%2FCAElfMaFSDdGhbNqdFCCUn8ePvI5Y4jXCLSnqH22oFD%2FK%2F%2FoBBj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:07 UTC	37	IN	Data Raw: 7b 22 69 64 22 3a 22 33 31 63 31 66 64 35 33 32 30 61 34 34 61 32 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"31c1fd5320a44a2","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.22	49682	203.210.102.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	399	OUT	GET /IDSau/wp-content/uploads/2013/01/cropped-DSC06269-c.jpg HTTP/1.1 Host: interactiveds.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:08 UTC	207	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: image/jpeg Content-Length: 63462 Connection: close Last-Modified: Sat, 26 Jan 2013 10:17:42 GMT Accept-Ranges: bytes
2023-12-12 20:40:08 UTC	15153	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 01 20 03 e8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC "
2023-12-12 20:40:08 UTC	8831	IN	Data Raw: 65 03 86 5e 7f bc 2a 45 cc 55 32 34 3f eb 79 5f ef 01 9a 71 09 20 cc 6e 0e 7b 1a 7b 23 2e 4a f2 2a 07 85 5f e6 4f dc c9 fd ec 50 3d c0 c6 c3 39 e2 a2 91 d9 07 15 32 49 32 8c 4a 04 83 fb c3 bd 21 1b d4 10 30 3d 28 02 34 97 77 06 9c f1 a9 1c 10 29 86 31 9f ee d4 6d 13 93 80 e0 8a 00 9c 33 81 9e be f5 2a 4c 02 90 c3 ad 56 dc e9 80 4e 3d e9 7c c3 ce 46 47 a8 a2 e0 5c 8c 00 02 ee 07 dc d3 25 b5 47 27 77 27 d6 a9 ee 25 89 42 7e 99 a9 61 b9 62 d8 73 f8 55 27 70 23 96 cd 08 38 eb ef 50 32 48 a3 05 03 28 f5 e6 ad 5d d9 c9 28 0f 04 8a 48 3c ab 9f e5 49 24 52 43 b7 3b 81 c7 3e 94 01 5b ed 85 71 fb bc e3 ae 38 a2 68 2d ef 54 19 63 04 81 c1 c7 22 91 61 72 49 93 04 76 20 53 79 56 21 4f 1e 99 aa 4f 97 54 4b 49 e8 65 5d 69 91 3a ed 4f be a7 21 48 c6 6b 2a e6 d1 22 97 32 Data Ascii: e^EU24?y_q n{{#.J_OP=92I2J!0=(4w)1m3LVN=\|FG\%G'w'%B~absU'p#8P2H(](H<I$RC;>[q8h-Tc"arIv SyV!OOTKIe]i:O!Hk"2
2023-12-12 20:40:08 UTC	8000	IN	Data Raw: 36 d6 91 a4 8c 1c 9c 0e 6a b9 04 e7 63 47 50 96 7d 47 73 59 ea 73 da c4 c7 01 50 01 9a cb 6d 0e 69 8e d9 35 5d 4d c0 fb c1 66 c7 f2 ad 79 6d e5 f2 d4 db c5 24 8c 83 39 54 3c 7d 6a dd b6 85 a9 cf 11 93 ec d3 94 6c 1c 24 4d 92 6b 44 a4 96 88 ce e9 99 91 f8 06 ce 04 32 cb 7f a8 ce 08 e8 f7 4d 91 f9 54 da 3d 9d be 91 7d 2a db 29 8d 5a 14 66 df 21 76 73 b9 b9 24 d7 41 ff 00 08 de b5 77 22 32 69 f7 2a 00 c1 66 8c e0 d4 0d e1 2d 5c eb 73 da 45 63 21 b8 6b 55 97 61 5e 55 03 37 cd 83 ea 7f 95 67 28 c9 bd 4d 69 b5 cc 41 ac 6a 30 e9 f6 cf 98 c3 3f 0c 11 70 79 24 75 f4 1c 9a f2 bd 7b e2 7d c5 ee 88 97 77 5a 35 b4 90 da b0 13 5b b0 39 c1 24 02 a7 d7 35 ea b2 f8 0b c4 ca 91 19 74 f9 0b f1 bd d8 80 5b df af 6e 2b 1b c5 1f b3 ef 89 f5 7b 49 a3 b0 b4 b7 4b 89 25 5d c2 49 Data Ascii: 6jcGP}GsYsPmi5]Mfym$9T<}jl$MkD2MT=})Zf!vs$Aw"2if-\sEc!kUa^U7g(MiAj0?py$u{}wZ5[9$5t[n+{IK%]I
2023-12-12 20:40:08 UTC	8000	IN	Data Raw: 54 d7 72 2c b0 06 1b d9 d4 e3 6b 2e 7f 2a f0 68 fe 31 6b e4 32 ac 91 26 7b 05 03 8a 8a 3f 8a ba b4 32 33 9b 9b 82 ec b8 2a 1d 30 3f 4a af aa 54 ee 4f b6 47 bd c3 0c 70 46 d3 5c 3b 7c a3 21 77 05 51 fd 73 4c 96 e6 27 8d 49 9d 3e 6e 47 35 f3 55 c7 8e 35 16 98 48 9a 85 f0 6c 93 83 70 31 f9 62 a2 87 c5 77 53 ee 49 27 bb 2e 4e 77 9b 96 c8 ab fa 9f 72 7e b2 7d 25 05 dd ac 0c a5 8a cc ec e2 3d 87 e5 3c 9f 7a 65 fd dd b5 b3 0f 3a f1 2d d5 81 0a 04 e0 01 cd 78 16 9f 74 6e 66 86 e5 e6 b9 99 e2 3b b2 f7 05 b9 fc 6a ed 85 dd 9e 97 15 e1 be d3 13 54 49 41 c7 da 66 6f dd fb 8c 11 57 f5 56 83 eb 08 f5 af 15 dd 69 d0 c6 16 57 82 e6 42 99 8b 7b ee c1 c8 c1 fa 57 90 b2 b0 0e 37 1d a7 b1 18 fd 29 f7 be 23 d3 66 d3 4d bc 5e 1d 8a d2 42 3e 5b 88 ae 25 dc 07 d0 92 2b 07 4f f0 Data Ascii: Tr,k.h1k2&{?230?JTOGpF\;\|!wQsL'I>nG5U5Hlp1bwSI'.Nwr~}%=<ze:-xtnf;jTIAfoWViWB{W7)#fM^B>[%+O
2023-12-12 20:40:08 UTC	8000	IN	Data Raw: e5 70 73 82 3e 95 a7 61 a7 a8 89 b6 64 0c e4 16 35 af 35 c8 71 0b 60 14 65 80 38 3d 49 23 34 b7 71 28 b9 dc c0 f9 64 16 00 7d 2a 85 d4 b2 45 73 14 7d 46 08 c3 1e f8 e0 d6 85 b3 09 b7 fc d9 54 1b 4a e7 d6 b4 4e fa 8a c3 a6 f3 97 60 c0 db 9e a3 ae 31 ff 00 d7 ab 06 66 b4 f2 95 94 b1 98 7c 87 1d 28 fb 38 8e 44 2c 7e 75 7d f9 cf b6 31 52 97 56 7f 32 53 85 50 40 5f c2 94 98 28 8c 69 9b 70 51 b7 cc 63 f3 e0 f3 55 92 2d 97 49 b5 43 16 39 0a 73 c5 3a 38 9a 5d ac 53 04 8e 18 d5 f4 c5 bc 52 4e e0 9c 0c 2a fa 9a c5 3d 4b 48 8a 59 f6 1f 21 7e 59 3b 90 38 15 56 de cc 45 28 f2 d1 64 de 72 4b 73 83 4d 48 ff 00 d2 59 5d 4b 99 17 73 1c 9e 0e 78 ab a6 dd ed e3 57 88 7c e0 72 09 eb 56 26 4c ee ad 0f 91 80 77 b6 0f b5 0d 6c 91 11 1a 05 fd df 24 81 d6 a0 8e d0 c4 19 83 11 20 Data Ascii: ps>ad55q`e8=I#4q(d}Es}FTJN`1f\|(8D,~u}1RV2SP@_(ipQcU-IC9s:8]SRN=KHY!~Y;8VE(drKsMHY]KsxW\|rV&Lwl$
2023-12-12 20:40:08 UTC	8384	IN	Data Raw: b6 7a cd d4 f2 5c 96 62 4a 17 66 ce 31 db 9a f2 49 be 16 78 83 c1 ef e2 1b 5b 9d 2e 42 b7 3a 7b 24 5e 50 2c b2 48 0a b1 40 3e a8 48 f6 af b0 2e 84 96 fb a4 12 e5 09 dc 41 38 27 9c d6 73 dd 0d 5b 5e d2 6c a3 90 99 e0 79 2e 26 5c 72 23 58 9e 3d d9 f7 32 28 1f ef 7b 54 d3 a9 2b 72 9a 4e 11 4f 98 f8 d3 c1 9f b3 cf 8b 7c 7f 77 72 ba 5d 8e c8 2d b6 ac 97 17 64 c6 33 b4 64 0c 8c 9e 7a d7 a2 69 9f b1 27 88 27 2d f6 ed 72 d2 db cb 6c 30 8d 4b f5 fc ab ed a1 6d 0d 86 9c e6 25 d8 0f cc 00 18 c1 3c 9e 95 9f 69 17 da 24 77 2a 70 4e 4a 8e e6 bb 94 b4 3c f9 3d 74 3e 70 bc fd 97 6c 7c 0b f0 bb c4 b7 2b a9 4d aa dc 8d 97 4b 11 01 14 94 38 03 d7 f8 da bc 9b 41 f0 d8 d5 27 8a dd f4 87 57 9a 30 15 56 4c 14 93 d3 fa d7 da be 30 8d a3 f0 56 b3 1b c2 5a 23 09 04 9e 46 33 51 5d Data Ascii: z\bJf1Ix[.B:{$^P,H@>H.A8's[^ly.&\r#X=2({T+rNO\|wr]-d3dzi''-rl0Km%<i$w*pNJ<=t>pl\|+MK8A'W0VL0VZ#F3Q]
2023-12-12 20:40:08 UTC	7094	IN	Data Raw: 81 9f 4a e6 85 c2 48 dc e0 fe 1c 54 ab 20 8c 64 3e 49 f4 34 29 58 87 16 8d f2 cd 17 cb c9 07 b9 15 14 b6 d1 4c 99 0a 01 a8 e0 70 b6 ea 64 6e 4f bd 48 cb e6 01 b5 b0 6a ef 0e a4 35 2e 86 6d e6 99 13 ab 0f 28 36 41 1d 39 ae 67 55 f0 8e 9f 7a 59 da df 63 73 d0 74 cf 5a ed 0b b2 c6 4b 63 f2 aa 37 96 8b 2a 33 60 ee f6 35 3c d1 5f 09 51 4f a9 e5 ba bf 82 2d c4 66 6b 66 58 a6 04 8c 03 8f 5f f1 ae 1e 65 b9 b4 53 1c b7 0b 3b 2b 1c 21 ed 5e ad af e8 1a 94 ec c1 42 35 b3 1c fc 87 e6 15 e7 1a 97 87 ee 2c 6e 19 e6 c9 8c 3e 5b 72 e7 8e e2 aa 32 bb 2d c4 e7 26 17 0d 77 13 35 c4 88 fb 8b 2a 2b 61 58 0e bd bd c5 6b ff 00 68 44 27 58 e3 06 e2 e6 32 7c c0 a7 81 58 7a c6 8d 75 73 af c1 35 a5 d0 5b 48 e3 c3 23 1d a5 54 f3 f9 d4 ea d1 69 ce f1 42 43 34 a4 ef 98 f5 39 f7 ae a4 Data Ascii: JHT d>I4)XLpdnOHj5.m(6A9gUzYcstZKc73`5<_QO-fkfX_eS;+!^B5,n>[r2-&w5+aXkhD'X2\|Xzus5[H#TiBC49

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.22	49716	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	803	OUT	GET /usersync?b=rth&i=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=gumgum HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:07 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.22	49699	3.163.87.30	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	2391	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=jURFnvrSHaGY9&cb=1&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22sd%22%3A%22sidebar_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%2C%7B%22sd%22%3A%22content_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:07 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 104 Connection: close Server: Server Date: Tue, 12 Dec 2023 20:40:07 GMT x-amz-rid: TRNR4JHQRB7G2GF5CA7W Access-Control-Allow-Origin: https://mathblog.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Strict-Transport-Security: max-age=47474747; includeSubDomains; preload Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 dd50d82eb44c5dac221e5595321dc69e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: Lz4dlFBR78uuPRjDa6tAHsugkP3AUImZx74HEdg_Ruqh1P3G4brn3A==
2023-12-12 20:40:07 UTC	104	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 67 67 22 2c 22 63 62 22 3a 22 31 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg","cb":"1"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.22	49701	104.36.115.111	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	1270	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2800 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; PugT=1702378946
2023-12-12 20:40:07 UTC	2800	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 32 34 31 33 36 30 35 39 30 32 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 33 39 39 39 62 65 37 63 38 62 35 33 35 35 63 22 2c 22 74 61 67 69 64 22 3a 22 73 69 64 65 62 61 72 5f 62 74 66 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 31 32 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 38 32 34 2f 6d 61 74 68 62 6c 6f 67 2f 73 74 69 63 6b 79 5f 73 69 64 65 62 61 72 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 38 32 34 2f 6d 61 74 68 62 6c 6f 67 2f 73 74 Data Ascii: {"id":"1702413605902","at":1,"cur":["USD"],"imp":[{"id":"3999be7c8b5355c","tagid":"sidebar_btf","bidfloor":0.12,"secure":1,"ext":{"data":{"pbadslot":"/1030006,1037824/mathblog/sticky_sidebar","adserver":{"name":"gam","adslot":"/1030006,1037824/mathblog/st
2023-12-12 20:40:07 UTC	226	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://mathblog.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 12 Dec 2023 20:40:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.22	49719	35.172.99.217	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	786	OUT	GET /usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:07 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.22	49710	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	1498	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AAB3wk7K8YkAABTAD88gJQ&r=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fbee_sync_partners%3Dsas%252Cpp%252Csyn%252Cox%26bee_sync_current_partner%3Dpm%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; PugT=1702378946
2023-12-12 20:40:07 UTC	729	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:07 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:07 GMT; path=/ Set-Cookie: PugT=1702413607; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:07 GMT; path=/ Location: https://match.prod.bidr.io/cookie-sync?bee_sync_partners=sas%2Cpp%2Csyn%2Cox&bee_sync_current_partner=pm&bee_sync_initiator=ox&bee_sync_hop_count=1 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.22	49712	5.161.124.197	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	686	OUT	GET /match/bidswitch?id=${user_id}&gdpr=&consent=&usp=1---&ssp=gumgum2&bsw=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: sync-dmp.mobtrakk.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:07 UTC	395	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Length: 0 Connection: close Location: https://sync-dmp.mobtrakk.com/match/bidswitch?id=%24%7Buser_id%7D&gdpr=&consent=&usp=1---&ssp=gumgum2&bsw=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&chk=1 Set-Cookie: chk=1; path=/; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.22	49704	3.231.136.235	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	781	OUT	POST /header/auction?lib=prebid&v=8.20.0&referrer=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&tmax=2801&us_privacy=1--- HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 3588 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:07 UTC	3588	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 76 69 6e 65 5f 72 6f 6e 5f 73 69 64 65 62 61 72 5f 62 74 66 5f 33 30 30 78 36 30 30 5f 50 72 65 62 69 64 22 2c 22 66 6c 6f 6f 72 22 3a 30 2e 31 32 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 31 36 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 31 32 30 2c 22 68 22 3a 36 30 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 38 32 34 2f 6d 61 74 68 62 6c 6f 67 2f 73 74 69 63 6b 79 5f 73 69 64 65 62 61 72 22 2c 22 Data Ascii: {"imp":[{"id":0,"tagid":"Mediavine_ron_sidebar_btf_300x600_Prebid","floor":0.12,"banner":{"format":[{"w":300,"h":250},{"w":300,"h":600},{"w":160,"h":600},{"w":120,"h":600}]},"fpd":{"context":{"data":{"pbadslot":"/1030006,1037824/mathblog/sticky_sidebar","
2023-12-12 20:40:07 UTC	685	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: application/json; charset=utf-8 Content-Length: 19 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 15 Oct 1992 20:10:00 GMT Pragma: no-cache X-XSS-Protection: 0 P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Access-Control-Allow-Origin: https://mathblog.com Access-Control-Allow-Credentials: true x-auction-status: 29 x-auction-status: 29 Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:07 GMT; Secure; SameSite=None
2023-12-12 20:40:07 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.22	49711	104.18.24.173	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	725	OUT	GET /i.match?p=b12&redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537141727%26val%3D%24TF_USER_ID_ENC%24&u=d73dfa8f-b445-057f-1a13-5aee83e2fb78 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:07 UTC	907	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 547 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aNnoeUyg6ArrA7uaPUhZcQ4dqm3SS2GAUsmyC66r3; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:07 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aNnoeUyg6ArrA7uaPUhZcQ4dqm3SS2GAUsmyC66r3; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:07 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b12&redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537141727%26val%3D%24TF_USER_ID_ENC%24&u=d73dfa8f-b445-057f-1a13-5aee83e2fb78 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8348c7d52a0f25ad-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:07 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2023-12-12 20:40:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.22	49703	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	931	OUT	GET /beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxdkDsOxEAIQ%2B8ydQpgGMC52mrvHiWiweUzHxt%2BC7luTdlhW4BrRUy2iSokpHLDnoITZxuIlr0MdARzoFqpOVNCJhTSQf3kWU58iGlf0VOM9p3qxCfiqwdx0o30NIw8%2Fwd0uUyv
2023-12-12 20:40:07 UTC	812	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:07 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:07 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: text/html Vary: Accept-Encoding, User-Agent Content-Length: 4516 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:07 UTC	4516	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 0a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 73 6f 76 72 6e 20 42 65 61 63 6f 6e 20 28 32 33 20 53 65 6e 74 20 2f 20 2d 31 20 4d 61 78 29 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 27 73 6f 76 72 6e 2d 62 65 61 63 6f 6e 2d 70 69 78 65 6c 27 20 73 74 79 6c 65 3d 27 77 69 64 74 68 3a 30 70 78 3b 20 68 65 69 67 68 74 3a 30 70 78 3b 27 20 77 69 64 74 68 3d 27 30 27 20 68 65 69 67 68 74 3d 27 30 27 20 73 72 63 3d 27 68 74 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""https://www.w3.org/TR/html4/strict.dtd"><html><head><title>sovrn Beacon (23 Sent / -1 Max)</title></head><body><img class='sovrn-beacon-pixel' style='width:0px; height:0px;' width='0' height='0' src='htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.22	49718	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	666	OUT	GET /usersync?b=apn&i=2638779048715878353 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:07 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.22	49698	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	1191	OUT	POST /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Content-Length: 9646 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:07 UTC	9646	OUT	Data Raw: 7b 22 63 6f 6e 6e 65 63 74 49 64 22 3a 22 22 2c 22 75 75 69 64 22 3a 22 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 22 2c 22 75 75 69 64 56 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 2c 22 64 65 76 69 63 65 22 3a 7b 22 6f 73 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 76 22 3a 22 4e 54 20 31 30 2e 30 22 2c 22 64 6e 74 22 3a 30 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 75 61 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b Data Ascii: {"connectId":"","uuid":"6120f800-992e-11ee-8a65-3f15d911ca60","uuidVersion":"invalidate-verizon-pushes","device":{"os":"Windows","osv":"NT 10.0","dnt":0,"h":1024,"w":1280,"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck
2023-12-12 20:40:08 UTC	267	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: application/json; charset=utf-8 Content-Length: 80027 Connection: close Access-Control-Allow-Origin: https://mathblog.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true
2023-12-12 20:40:08 UTC	16117	IN	Data Raw: 5b 7b 22 69 64 22 3a 22 32 36 35 61 32 33 32 32 39 37 32 35 61 62 34 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 62 37 61 66 30 39 34 37 2d 66 61 63 61 2d 34 66 63 61 2d 62 37 35 33 2d 34 35 66 35 38 61 65 65 64 31 32 33 22 2c 22 69 6d 70 69 64 22 3a 22 32 36 35 61 32 33 32 32 39 37 32 35 61 62 34 22 2c 22 70 72 69 63 65 22 3a 30 2e 31 34 39 37 2c 22 61 64 69 64 22 3a 22 32 34 36 36 34 37 39 31 22 2c 22 61 64 6d 22 3a 22 3c 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 61 31 35 30 32 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 69 6d 70 72 65 73 73 69 6f 6e 2f 76 32 2f 36 33 30 39 39 31 2f 38 35 2f 63 6c 73 63 61 39 72 38 34 75 61 65 6c 30 71 6e 35 6f 76 30 2f 62 37 61 66 30 39 34 37 2d 66 61 63 61 2d Data Ascii: [{"id":"265a23229725ab4","seatbid":[{"bid":[{"id":"b7af0947-faca-4fca-b753-45f58aeed123","impid":"265a23229725ab4","price":0.1497,"adid":"24664791","adm":"<img src=\"https://a1502.casalemedia.com/impression/v2/630991/85/clsca9r84uael0qn5ov0/b7af0947-faca-
2023-12-12 20:40:08 UTC	16355	IN	Data Raw: 72 46 62 59 37 7a 65 5f 6f 75 7a 49 51 67 47 4c 37 4e 35 41 2d 78 4e 31 64 76 44 48 7a 79 33 44 79 43 54 43 50 73 6e 76 70 76 51 31 52 2d 6f 65 74 55 38 30 57 78 47 72 6b 45 7a 4c 30 77 36 78 47 65 58 4b 41 48 66 62 59 7a 4c 56 42 43 57 4c 36 77 42 7a 33 33 43 77 68 6a 59 4d 32 59 6b 77 69 4c 72 4a 4e 72 54 33 56 64 48 30 5a 58 76 38 4c 67 75 55 56 64 36 66 6d 43 58 67 75 48 35 74 73 6d 6a 46 6e 56 34 30 49 2d 4c 5a 72 70 66 55 63 68 7a 6c 6d 72 46 68 42 34 48 46 70 65 4e 50 34 41 66 4a 49 62 68 6f 4e 64 4e 66 35 4b 34 5a 51 32 48 4d 65 62 58 41 30 33 38 69 53 58 71 37 4f 67 42 52 69 43 51 76 35 45 4b 74 31 57 32 74 46 70 36 76 73 35 64 59 35 4e 6e 36 68 62 78 66 50 6a 5f 79 4b 66 47 55 68 59 30 37 62 6f 6e 71 70 6f 5f 34 4b 35 6f 54 6d 44 38 76 67 65 67 Data Ascii: rFbY7ze_ouzIQgGL7N5A-xN1dvDHzy3DyCTCPsnvpvQ1R-oetU80WxGrkEzL0w6xGeXKAHfbYzLVBCWL6wBz33CwhjYM2YkwiLrJNrT3VdH0ZXv8LguUVd6fmCXguH5tsmjFnV40I-LZrpfUchzlmrFhB4HFpeNP4AfJIbhoNdNf5K4ZQ2HMebXA038iSXq7OgBRiCQv5EKt1W2tFp6vs5dY5Nn6hbxfPj_yKfGUhY07bonqpo_4K5oTmD8vgeg
2023-12-12 20:40:08 UTC	16384	IN	Data Raw: 4e 4a 66 43 35 75 59 72 6a 2d 54 5f 72 48 46 63 56 71 67 69 77 4b 79 47 4e 57 38 63 4c 66 78 30 35 79 63 68 58 4f 58 78 36 4f 77 5a 43 6d 73 61 46 39 6c 50 41 26 70 72 3d 36 3a 30 2e 31 36 38 35 33 37 26 63 69 64 3d 43 41 51 53 56 77 44 49 43 61 61 4e 36 78 62 46 6a 38 77 58 52 54 68 76 63 4d 78 66 36 6f 44 54 61 56 77 58 44 35 33 5f 42 44 4c 5a 46 4d 6e 51 46 5a 6f 30 6b 55 61 48 59 6b 43 39 45 34 47 50 78 51 34 71 33 36 48 46 4f 46 35 65 6e 5a 38 69 45 2d 66 65 54 73 77 63 59 64 34 6f 35 57 48 55 31 6d 49 32 63 4e 70 6a 47 68 6e 4e 6b 44 78 68 43 66 72 4e 6d 67 56 47 79 42 67 42 26 78 66 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6c 69 63 6b 74 72 61 63 6b 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 25 32 46 41 64 53 65 72 76 65 72 25 32 46 41 64 44 Data Ascii: NJfC5uYrj-T_rHFcVqgiwKyGNW8cLfx05ychXOXx6OwZCmsaF9lPA&pr=6:0.168537&cid=CAQSVwDICaaN6xbFj8wXRThvcMxf6oDTaVwXD53_BDLZFMnQFZo0kUaHYkC9E4GPxQ4q36HFOF5enZ8iE-feTswcYd4o5WHU1mI2cNpjGhnNkDxhCfrNmgVGyBgB&xfc=https%3A%2F%2Fclicktrack.pubmatic.com%2FAdServer%2FAdD
2023-12-12 20:40:08 UTC	16384	IN	Data Raw: 29 2c 72 2e 70 75 73 68 28 69 29 2c 75 7c 7c 28 75 3d 69 29 29 3a 73 3f 28 69 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 29 2c 72 2e 70 75 73 68 28 69 29 2c 75 7c 7c 28 75 3d 69 29 29 3a 72 2e 70 75 73 68 28 6f 29 7d 65 6c 73 65 20 72 2e 70 75 73 68 28 6f 29 7d 72 65 74 75 72 6e 7b 73 74 61 63 6b 3a 72 2c 64 65 74 65 63 74 55 72 6c 3a 75 7d 7d 2c 67 65 74 4c 65 76 65 6c 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 61 6c 6b 55 70 57 69 6e 64 6f 77 73 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 72 79 7b 6e 2e 70 75 73 68 28 7b 72 65 66 65 72 72 65 72 3a 65 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 6e 75 6c 6c 2c 6c 6f 63 61 74 69 6f 6e 3a 65 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7c Data Ascii: ),r.push(i),u\|\|(u=i)):s?(i=encodeURIComponent(s),r.push(i),u\|\|(u=i)):r.push(o)}else r.push(o)}return{stack:r,detectUrl:u}},getLevels:function(){var e=this.walkUpWindows(function(e,n){try{n.push({referrer:e.document.referrer\|\|null,location:e.location.href\|
2023-12-12 20:40:08 UTC	14787	IN	Data Raw: 74 79 38 56 2d 4b 4a 64 68 4b 59 38 66 55 5a 33 79 35 74 61 56 37 57 44 34 55 38 54 49 44 65 67 42 2d 53 6d 4d 46 6c 34 44 77 56 71 55 55 69 4b 38 76 66 62 46 4c 42 47 66 59 30 68 68 5a 37 68 57 65 45 78 56 69 48 44 48 37 65 6a 56 76 31 45 6a 2d 2d 44 65 71 6c 43 5f 4d 47 6a 63 50 35 6d 46 68 6a 6a 4a 74 6c 6c 6a 52 4a 4c 65 76 37 52 6f 33 44 77 56 65 54 5a 35 73 77 69 42 53 77 5a 65 50 6a 71 72 48 37 63 53 30 39 4f 70 76 79 67 37 34 37 73 31 55 5f 4e 38 43 59 37 69 41 45 37 6e 58 37 77 48 31 75 4e 54 57 46 59 34 39 6e 6d 6a 5f 5a 65 46 33 4d 56 33 2d 73 42 6d 32 39 5a 74 7a 78 38 67 69 68 4e 7a 65 31 6d 72 4a 34 73 63 35 51 47 34 2d 65 64 7a 4a 50 36 6d 4e 36 47 56 51 33 61 78 45 74 38 37 35 59 34 33 4f 6e 49 6f 49 43 66 76 2d 4e 31 64 34 58 6e 4d 5a 39 Data Ascii: ty8V-KJdhKY8fUZ3y5taV7WD4U8TIDegB-SmMFl4DwVqUUiK8vfbFLBGfY0hhZ7hWeExViHDH7ejVv1Ej--DeqlC_MGjcP5mFhjjJtlljRJLev7Ro3DwVeTZ5swiBSwZePjqrH7cS09Opvyg747s1U_N8CY7iAE7nX7wH1uNTWFY49nmj_ZeF3MV3-sBm29Ztzx8gihNze1mrJ4sc5QG4-edzJP6mN6GVQ3axEt875Y43OnIoICfv-N1d4XnMZ9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.22	49709	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	740	OUT	GET /csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D97%263pid%3DRX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:07 UTC	562	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:07 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:07 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ce.lijit.com/merge?pid=97&3pid=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:40:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.22	49706	38.68.201.140	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	581	OUT	GET /OpenX.ashx HTTP/1.1 Host: oxp.mxptint.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:07 UTC	641	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://us-u.openx.net/w/1.0/sd?id=537116306&val=R35CA9_10D97F8E3_7A5609BE P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000000000000000000000000000006578C527; domain=mxptint.net; expires=Fri, 12-Dec-2025 20:40:07 GMT; path=/; secure; SameSite=None Date: Tue, 12 Dec 2023 20:40:06 GMT Connection: close Content-Length: 195 Strict-Transport-Security: max-age=-385418407; includeSubDomains
2023-12-12 20:40:07 UTC	195	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 31 31 36 33 30 36 26 61 6d 70 3b 76 61 6c 3d 52 33 35 43 41 39 5f 31 30 44 39 37 46 38 45 33 5f 37 41 35 36 30 39 42 45 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://us-u.openx.net/w/1.0/sd?id=537116306&val=R35CA9_10D97F8E3_7A5609BE">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.22	49683	203.210.102.39	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	694	OUT	GET /IDSau/wp-content/themes/twentyeleven/images/comment-bubble.png HTTP/1.1 Host: interactiveds.com.au Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://interactiveds.com.au/IDSau/wp-content/themes/twentyeleven/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:07 UTC	204	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: image/png Content-Length: 791 Connection: close Last-Modified: Wed, 07 Nov 2012 18:49:10 GMT Accept-Ranges: bytes
2023-12-12 20:40:07 UTC	791	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2b 00 00 00 24 08 03 00 00 00 27 d5 33 27 00 00 01 17 50 4c 54 45 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 13 13 24 24 24 32 32 32 40 40 40 4b 4b 4b 57 57 57 6a 6a 6a 71 71 71 78 78 78 80 80 80 85 85 85 91 91 91 a1 a1 a1 a4 a4 a4 a7 a7 a7 ac ac ac af af af b3 b3 b3 b5 b5 b5 bc bc bc c8 c8 c8 cb cb cb d0 d0 d0 d4 d4 d4 d6 d6 d6 d7 d7 d7 d8 d8 d8 db db db db db db e4 e4 e4 e4 e4 e4 e6 e6 e6 e6 e6 e6 e8 e8 e8 e9 e9 e9 ea ea ea ec Data Ascii: PNGIHDR+$'3'PLTE$$$222@@@KKKWWWjjjqqqxxx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.22	49689	50.19.110.114	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	830	OUT	GET /pdmp/b4/v2/pixel.gif?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&ref=&tref=&tz=-1&screen=1280x1024x24&dcRegion=us-east-1&cmpstatus=notrequired&e=%5B%5D&fpid=223e362f-211b-485a-8f8e-b769f2bcebb9 HTTP/1.1 Host: pdmp.tagger.opecloud.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:07 UTC	202	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate
2023-12-12 20:40:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.22	49714	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	683	OUT	GET /usersync?b=opx&i=293b2f42-092f-04b7-0a33-f4e4b96c0202 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:07 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.22	49739	18.160.65.3	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	2231	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=jURFnvrSHaGY9&cb=0&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:07 UTC	494	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 104 Connection: close Server: Server Date: Tue, 12 Dec 2023 20:40:07 GMT x-amz-rid: EKDXRJ73XYNXNHGEN7QG Strict-Transport-Security: max-age=47474747; includeSubDomains; preload Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 f47495a264710eda031284d475b7c21e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P1 X-Amz-Cf-Id: hFUMovU_8LS4TrfW5NaEBOX8DAHYbrMwANoTi-JtIGc8gsdRLAURJA==
2023-12-12 20:40:07 UTC	104	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 67 67 22 2c 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg","cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.22	49717	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	671	OUT	GET /usersync?b=dit&i=di_1296d48b0e654caba2d72 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:07 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.22	49695	52.46.151.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	776	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:07 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 274 Connection: close x-amz-rid: ZAT2Z15XMTFYPWX4NA1R Set-Cookie: ad-id=A1rhKsjaRkteiTTzE0HaIE4; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 20:40:07 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2029 20:40:07 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-12 20:40:07 UTC	274	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 67 67 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 22 3e 3c 2f 69 66 72 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=gg&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0" sandbox="allow-same-origin allow-scripts"></ifr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.22	49754	67.202.105.21	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	1392	OUT	GET /ps/?us_privacy=1---&ts=1702413605897.5&ri=70&ru=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fcm%3Fid%3Dc6a5ba0d-ce02-41bd-a1ea-842c68bd5108%26ph%3D8f5ed5d4-642c-4222-968a-d709c87ac3c8%26us_privacy%3D%24%7BUS_PRIVACY%7D%26r%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D70%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:07 UTC	777	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:40:07 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP010 location: https://us-u.openx.net/w/1.0/cm?id=c6a5ba0d-ce02-41bd-a1ea-842c68bd5108&ph=8f5ed5d4-642c-4222-968a-d709c87ac3c8&us_privacy=1---&r=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D70%26external_user_id%3D content-length: 0 date: Tue, 12 Dec 2023 20:40:07 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.22	49713	18.164.84.102	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	425	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:07 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Tue, 12 Dec 2023 13:40:49 GMT Last-Modified: Tue, 29 Aug 2023 08:30:37 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: 9yABOonr2HqHtwbarUcdbIqN0f4A8Qog Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d8ad943d740b6238b25a2f7e6eea878e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: tBviKcwrgDd06vkuGwHb_6aBrHkfTGTkQkHbikEdQetMp6JJdfqZgQ== Age: 25159
2023-12-12 20:40:07 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.22	49715	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	683	OUT	GET /usersync?b=vnt&i=8a323469-881a-408a-9858-5975924b765a HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:07 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.22	49721	44.206.51.132	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	533	OUT	GET /header/auction?lib=prebid&v=8.20.0&referrer=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&tmax=2801&us_privacy=1--- HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:07 UTC	940	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: application/json; charset=utf-8 Content-Length: 19 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 15 Oct 1992 20:10:00 GMT Pragma: no-cache X-XSS-Protection: 0 Accept-CH: sec-ch-ua-full-version-list,sec-ch-prefers-color-scheme,sec-ch-ua-platform,sec-ch-dpr,user-agent,sec-ch-width,sec-ch-viewport-height,sec-ch-save-data,sec-ch-ect,sec-ch-ua-model,sec-ch-ua-platform-version,sec-ch-device-memory,sec-ch-ua-bitness,sec-ch-ua,sec-ch-ua-full-version,sec-ch-ua-arch,sec-ch-rtt,sec-ch-ua-mobile,sec-ch-viewport-width,sec-ch-downlink P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" x-auction-status: 5 Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:07 GMT; Secure; SameSite=None
2023-12-12 20:40:07 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.22	49708	54.92.250.61	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	777	OUT	GET /v1/targeting?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&fpid=223e362f-211b-485a-8f8e-b769f2bcebb9&tenant=b4 HTTP/1.1 Host: pdmp.profiles.tagger.opecloud.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:07 UTC	244	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: application/json Content-Length: 130 Connection: close Access-Control-Allow-Origin: https://mathblog.com Access-Control-Allow-Credentials: true Cache-Control: no-cache
2023-12-12 20:40:07 UTC	130	IN	Data Raw: 7b 22 73 22 3a 22 71 73 75 68 75 2b 62 52 66 34 6f 59 2b 6b 5a 4e 37 38 49 47 31 41 4e 2f 78 77 47 61 46 6c 41 71 50 5a 41 6f 6e 2b 31 45 57 54 62 47 6a 67 3d 3d 22 2c 22 74 22 3a 22 6c 4e 72 4c 55 36 39 30 45 45 53 43 50 5a 6a 56 76 4d 36 46 38 4a 73 61 56 56 44 48 6d 61 34 4a 39 72 2b 36 66 36 53 75 38 6d 2f 43 51 67 3d 3d 22 2c 22 6b 69 64 22 3a 32 2c 22 74 74 6c 5f 73 22 3a 37 34 7d Data Ascii: {"s":"qsuhu+bRf4oY+kZN78IG1AN/xwGaFlAqPZAon+1EWTbGjg==","t":"lNrLU690EESCPZjVvM6F8JsaVVDHma4J9r+6f6Su8m/CQg==","kid":2,"ttl_s":74}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.22	49705	54.163.159.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	676	OUT	GET /ping_match.gif?ei=OPENX&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537072979%26val%3D_wfivefivec_ HTTP/1.1 Host: i.w55c.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:07 UTC	647	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Tue, 12 Dec 2023 20:40:07 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=OPENX&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537072979%26val%3D_wfivefivec_ Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0d63ef07f1db9a08b@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; Domain=.w55c.net; Expires=Sat, 11-Jan-2025 06:40:07 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.22	49734	207.198.113.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	610	OUT	GET /dmp/pixelSync?nid=1 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:07 UTC	338	IN	HTTP/1.1 302 set-cookie: ssi=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc#1702413607708; Domain=.sitescout.com; Expires=Wed, 11-Dec-2024 20:40:07 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=1 content-length: 0 date: Tue, 12 Dec 2023 20:40:07 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.22	49763	54.159.220.191	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	748	OUT	GET /cookie-sync?bee_sync_partners=sas%2Cpp%2Csyn%2Cox&bee_sync_current_partner=pm&bee_sync_initiator=ox&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAB3wk7K8YkAABTAD88gJQ; bitoIsSecure=ok
2023-12-12 20:40:08 UTC	618	IN	HTTP/1.1 303 See Other Date: Tue, 12 Dec 2023 20:40:07 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AAB3wk7K8YkAABTAD88gJQ&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fbee_sync_partners%3Dpp%252Csyn%252Cox%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID Server: gunicorn set-cookie: bito=AAB3wk7K8YkAABTAD88gJQ; Domain=bidr.io; expires=Fri, 10 Jan 2025 15:40:07 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.22	49722	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	943	OUT	GET /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:07 UTC	292	IN	HTTP/1.1 404 Not Found Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 150 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2023-12-12 20:40:07 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 62 69 64 52 65 71 75 65 73 74 2f 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /bidRequest/</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.22	49727	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	1052	OUT	GET /usersync/redirect?partner=kargo&partnerId=0c8954a7-ffa8-19a4-1cc4-650bafbcd1f0&s2sVersion=production&uuid=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:07 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.22	49750	52.223.40.198	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	983	OUT	GET /track/cmf/generic?ttd_pid=f0v35ew&ttd_tpi=1&us_privacy=1--- HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASABKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC
2023-12-12 20:40:08 UTC	619	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Length: 407 Connection: close server: Kestrel location: https://ssc-cms.33across.com/ps/?ri=102&ru=https%3A%2F%2Fcms-xch-chicago.33across.com%2Fmatch%3Fbidder_id%3D102%26ttl%3D1705005607%26external_user_id%3D3311a7f3-c44c-4d38-8196-dca4c2b0f8ec set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwjOn7OnqNe9PBAFOAFaB2YwdjM1ZXdgAg..; expires=Thu, 12 Dec 2024 20:40:07 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:08 UTC	407	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 72 69 3d 31 30 32 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 73 2d 78 63 68 2d 63 68 69 63 61 67 6f 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 25 32 46 6d 61 74 63 68 25 33 46 62 69 64 64 65 72 5f 69 64 25 33 44 31 30 32 25 32 36 74 74 6c 25 33 44 31 37 30 35 30 30 35 36 30 37 25 32 36 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 25 33 44 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 3e 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 72 69 3d 31 30 32 26 Data Ascii: Redirecting to: <a href="https://ssc-cms.33across.com/ps/?ri=102&ru=https%3A%2F%2Fcms-xch-chicago.33across.com%2Fmatch%3Fbidder_id%3D102%26ttl%3D1705005607%26external_user_id%3D3311a7f3-c44c-4d38-8196-dca4c2b0f8ec">https://ssc-cms.33across.com/ps/?ri=102&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.22	49725	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	1029	OUT	GET /usersync/redirect?partner=verizon&partnerId=y-lx7NKpZE2uIevh65FgChwsUh2tPcpg85~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:07 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.22	49753	54.152.252.123	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	1549	OUT	GET /sync?nid=33across&us_privacy=1--- HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU
2023-12-12 20:40:08 UTC	237	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:40:08 GMT Location: https://ssc-cms.33across.com/ps/?xi=120&xu=GH_JvDj8VjdvrBlOavHmp2aBmNQ&us_privacy=1--- Content-Length: 117 Connection: Close
2023-12-12 20:40:08 UTC	117	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 78 69 3d 31 32 30 26 61 6d 70 3b 78 75 3d 47 48 5f 4a 76 44 6a 38 56 6a 64 76 72 42 6c 4f 61 76 48 6d 70 32 61 42 6d 4e 51 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ssc-cms.33across.com/ps/?xi=120&xu=GH_JvDj8VjdvrBlOavHmp2aBmNQ&us_privacy=1---">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.22	49723	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	1056	OUT	GET /usersync/redirect?partner=mediagrid&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:08 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.22	49748	34.98.64.218	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	860	OUT	GET /w/1.0/pd?plm=5 HTTP/1.1 Host: google-bidout-d.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
2023-12-12 20:40:08 UTC	706	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:07 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1702413498.3.1.102.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE; Version=1; Expires=Wed, 27-Dec-2023 20:40:07 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: text/html Content-Length: 622 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:08 UTC	622	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 37 36 26 33 70 69 64 3d 62 32 65 38 35 35 66 32 2d 63 62 38 65 2d 30 36 65 63 2d 32 61 66 34 2d 35 32 61 66 30 39 38 64 33 63 31 36 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 72 65 61 74 69 76 65 63 64 6e 2e 63 6f 6d 2f 63 6d 2d 6e 6f 74 69 66 79 3f 70 69 3d 6f 70 65 6e 78 26 67 64 70 72 3d 30 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 70 65 6e 78 2d 75 6d 73 2e 61 63 75 69 74 79 70 6c 61 74 66 6f 72 6d 2e 63 6f 6d 2f 74 75 6d 3f 74 70 69 64 3d 32 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://ce.lijit.com/merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16"><img src="https://creativecdn.com/cm-notify?pi=openx&gdpr=0"><img src="https://openx-ums.acuityplatform.com/tum?tpid=2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.22	49744	67.202.105.21	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	1196	OUT	GET /ps/?_=1702413605897.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:08 UTC	700	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:40:07 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 100000000008200000A server: 33XP010 location: https://exchange.mediavine.com/usersync/redirect?partner=thirty_three_across&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=212377533762873 content-length: 0 date: Tue, 12 Dec 2023 20:40:07 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.22	49724	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	1061	OUT	GET /usersync/redirect?partner=improvedigital&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=9bfa3b33-914e-4ccc-b6f8-0f92df65339b HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:08 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.22	49740	34.120.135.53	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:07 UTC	860	OUT	GET /esp?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq If-None-Match: W/"55-muGH0vcZs6k0igZH/WpVPIvDE88"
2023-12-12 20:40:08 UTC	329	IN	HTTP/1.1 304 Not Modified X-Powered-By: Express Access-Control-Allow-Origin: https://mathblog.com Vary: Origin Access-Control-Allow-Credentials: true ETag: W/"55-muGH0vcZs6k0igZH/WpVPIvDE88" Date: Tue, 12 Dec 2023 20:40:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.22	49726	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	1052	OUT	GET /usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:08 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.22	49767	207.198.113.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	965	OUT	GET /dmp/pixelSync?nid=104&us_privacy=1---&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D1---%26xi%3D45%26xu%3D%7BuserId%7D HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:08 UTC	455	IN	HTTP/1.1 302 set-cookie: ssi=c2de9d03-71b9-4aab-a691-2cd3acac0faf#1702413608300; Domain=.sitescout.com; Expires=Wed, 11-Dec-2024 20:40:08 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=104&us_privacy=1---&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D1---%26xi%3D45%26xu%3D%7BuserId%7D content-length: 0 date: Tue, 12 Dec 2023 20:40:08 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.22	49760	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	704	OUT	GET /usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:08 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:08 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.22	49759	34.102.243.38	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	1616	OUT	GET /tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%220.1.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Education%22%2C%22subcategory%22%3A%22Education%22%7D HTTP/1.1 Host: feed.pghub.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:08 UTC	1244	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:08 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Location: https://pandg.tapad.com/tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%220.1.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Education%22%2C%22subcategory%22%3A%22Education%22%7D Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.22	49751	67.202.105.21	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	1225	OUT	GET /ps/?us_privacy=1---&ts=1702413605897.3&ri=2&ru=https%3A%2F%2Fssum-sec.casalemedia.com%2Fusermatchredir%3Fs%3D191740%26us_privacy%3D%24%7BUS_PRIVACY%7D%26cb%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D2%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:08 UTC	722	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:40:08 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP004 location: https://ssum-sec.casalemedia.com/usermatchredir?s=191740&us_privacy=1---&cb=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D2%26external_user_id%3D content-length: 0 date: Tue, 12 Dec 2023 20:40:07 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.22	49764	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	687	OUT	GET /usersync?b=oth&i=y-i5Vemz9E2pcAB3qsj5sq4a92wTUal4GhEbBQ~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:08 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:08 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.22	49687	185.184.8.90	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	695	OUT	GET /cm-notify?pi=openx&gdpr=0 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
2023-12-12 20:40:08 UTC	407	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:08 GMT vary: Accept-Encoding location: https://us-u.openx.net/w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Tue, 12 Dec 2023 20:40:08 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.22	49749	67.202.105.21	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	1162	OUT	GET /ps/?us_privacy=1---&ts=1702413605897.7&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:08 UTC	681	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:40:08 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP020 location: https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D90%26external_user_id%3D%24UID content-length: 0 date: Tue, 12 Dec 2023 20:40:07 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.22	49755	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	1016	OUT	GET /w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
2023-12-12 20:40:08 UTC	708	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:08 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDtpvE; Version=1; Expires=Wed, 27-Dec-2023 20:40:08 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: text/html Content-Length: 803 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:08 UTC	544	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 37 36 26 33 70 69 64 3d 62 32 65 38 35 35 66 32 2d 63 62 38 65 2d 30 36 65 63 2d 32 61 66 34 2d 35 32 61 66 30 39 38 64 33 63 31 36 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 73 62 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 61 70 69 2f 73 79 6e 63 3f 63 61 6c 6c 65 72 49 64 3d 38 31 26 67 64 70 72 3d 30 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://ce.lijit.com/merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16&gdpr=0&gdpr_consent="><img src="https://ssbsync.smartadserver.com/api/sync?callerId=81&gdpr=0"><img src="https://ce.lij
2023-12-12 20:40:08 UTC	259	IN	Data Raw: 25 32 36 76 61 6c 25 33 44 5f 5f 5f 41 55 49 44 5f 5f 5f 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6f 70 65 6e 78 2e 61 64 68 61 76 65 6e 2e 63 6f 6d 2f 62 69 64 2d 65 6e 67 69 6e 65 2f 63 73 2f 33 37 37 63 37 39 39 38 62 62 39 66 34 32 65 35 61 65 61 30 34 31 36 63 39 64 61 63 30 39 31 66 2f 76 31 3f 72 64 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 25 32 46 77 25 32 46 31 2e 30 25 32 46 73 64 25 33 46 69 64 25 33 44 35 33 37 31 34 36 39 33 31 25 32 36 76 61 6c 25 33 44 25 32 34 55 49 44 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 72 2e 62 6c 69 73 6d 65 64 69 61 2e 63 6f 6d 2f 76 31 2f 61 70 69 2f 73 79 6e 63 2f 6f 70 65 6e 78 22 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 Data Ascii: %26val%3D___AUID___"><img src="https://openx.adhaven.com/bid-engine/cs/377c7998bb9f42e5aea0416c9dac091f/v1?rd=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537146931%26val%3D%24UID"><img src="https://tr.blismedia.com/v1/api/sync/openx"></body></ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.22	49777	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	736	OUT	GET /track/cmf/generic?ttd_pid=federatedmedia&gdpr=0&gdpr_consent= HTTP/1.1 Host: data.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASABKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC
2023-12-12 20:40:08 UTC	523	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Length: 223 Connection: close server: Kestrel location: https://ce.lijit.com/merge?pid=27&3pid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent= set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:08 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASACKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC; expires=Thu, 12 Dec 2024 20:40:08 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:08 UTC	223	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 32 37 26 33 70 69 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 32 37 26 33 70 69 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://ce.lijit.com/merge?pid=27&3pid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent=">https://ce.lijit.com/merge?pid=27&3pid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.22	49756	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	547	OUT	GET /cksync.php?type=opx&ovsid=162ae2ad-8a3a-0601-0e07-9a67c3d39198 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3454150986930039084V10; data-mv=6120f800-992e-11ee-8a65-3f15d911ca60~~19; data-o=162ae2ad-8a3a-0601-0e07-9a67c3d39198~~3
2023-12-12 20:40:08 UTC	614	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-o=162ae2ad-8a3a-0601-0e07-9a67c3d39198~~3;Expires=Tue, 10 Dec 2024 20:40:08 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 x-mnet-hl2: E Expires: Tue, 12 Dec 2023 20:40:08 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 12 Dec 2023 20:40:08 GMT Connection: close
2023-12-12 20:40:08 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-12 20:40:08 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.22	49765	5.161.124.197	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	713	OUT	GET /match/bidswitch?id=%24%7Buser_id%7D&gdpr=&consent=&usp=1---&ssp=gumgum2&bsw=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&chk=1 HTTP/1.1 Host: sync-dmp.mobtrakk.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chk=1
2023-12-12 20:40:08 UTC	472	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Length: 0 Connection: close Location: https://x.bidswitch.net/sync?dsp_id=457&user_id=MzFlNmI4MzI0ZWQzZmEyNw&gdpr=&gdpr_consent=&us_privacy=1---&ssp=gumgum2&bsw_param=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d Set-Cookie: pid=MzFlNmI4MzI0ZWQzZmEyNw; expires=Thu, 12 Jun 2025 20:40:08 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.22	49771	104.18.24.173	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	786	OUT	GET /z/i.match?p=b12&redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537141727%26val%3D%24TF_USER_ID_ENC%24&u=d73dfa8f-b445-057f-1a13-5aee83e2fb78 HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aNnoeUyg6ArrA7uaPUhZcQ4dqm3SS2GAUsmyC66r3
2023-12-12 20:40:08 UTC	875	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 209 X-Reuse-Index: 94 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aCnsPCO5nP87PRo7TGr724PPWXk4aGSjVaiSAdW8yDlTXIWD1lZahNKhwgeMpS4uTTHXis6VHrUHyg7Bs; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:08 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aCnsPCO5nP87PRo7TGr724PPWXk4aGSjVaiSAdW8yDlTXIWD1lZahNKhwgeMpS4uTTHXis6VHrUHyg7Bs; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:08 GMT; Location: https://us-u.openx.net/w/1.0/sd?id=537141727&val=18072662090765666652 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8348c7db8e5c74c2-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:08 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2023-12-12 20:40:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.22	49769	68.67.160.186	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	693	OUT	GET /getuid?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D92%263pid%3D%24UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353
2023-12-12 20:40:08 UTC	1024	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ce.lijit.com/merge?pid=92&3pid=2638779048715878353&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 66fdaac4-adab-4f9d-bde7-c23b4f882dcd Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:08 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.22	49752	207.198.113.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	622	OUT	GET /dmp/pixelSync?nid=23&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:08 UTC	360	IN	HTTP/1.1 302 set-cookie: ssi=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25#1702413608270; Domain=.sitescout.com; Expires=Wed, 11-Dec-2024 20:40:08 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=23&gdpr=0&gdpr_consent= content-length: 0 date: Tue, 12 Dec 2023 20:40:08 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.22	49757	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	1304	OUT	GET /w/1.0/cm?id=c6a5ba0d-ce02-41bd-a1ea-842c68bd5108&ph=8f5ed5d4-642c-4222-968a-d709c87ac3c8&us_privacy=1---&r=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D70%26external_user_id%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
2023-12-12 20:40:08 UTC	717	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:08 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.t1s7rZvswwvDtpsvv5vE; Version=1; Expires=Wed, 27-Dec-2023 20:40:08 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: text/html Content-Length: 1259 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:08 UTC	535	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 76 65 6e 74 73 2d 73 73 63 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 6d 61 74 63 68 3f 6c 69 76 3d 68 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 62 69 64 64 65 72 5f 69 64 3d 37 30 26 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 61 38 36 64 38 37 35 63 2d 66 66 62 31 2d 30 63 30 65 2d 30 31 37 66 2d 65 62 64 39 37 62 36 38 39 31 31 62 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 76 6f 70 2e 73 75 6e 64 61 79 73 6b 79 2e 63 6f 6d 2f 73 79 6e 63 2f 64 6d 70 3f 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://events-ssc.33across.com/match?liv=h&us_privacy=1---&bidder_id=70&external_user_id=a86d875c-ffb1-0c0e-017f-ebd97b68911b"><img src="https://vop.sundaysky.com/sync/dmp?redirect=https%3A%2F%2
2023-12-12 20:40:08 UTC	724	IN	Data Raw: 3a 2f 2f 6d 61 74 63 68 2e 6a 75 73 74 70 72 65 6d 69 75 6d 2e 63 6f 6d 2f 6d 61 74 63 68 2f 6f 78 3f 65 78 5f 75 69 64 3d 39 34 38 37 34 35 63 32 2d 37 36 38 62 2d 30 36 38 62 2d 33 66 35 36 2d 36 32 33 66 37 30 34 39 34 30 37 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 73 62 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 61 70 69 2f 73 79 6e 63 3f 63 61 6c 6c 65 72 49 64 3d 38 31 26 67 64 70 72 3d 30 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 70 69 64 3d 37 36 26 33 70 69 64 3d 62 32 65 38 35 35 66 32 2d 63 62 38 65 2d 30 36 65 63 2d 32 61 66 34 2d 35 32 61 66 30 39 38 64 33 63 31 36 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a Data Ascii: ://match.justpremium.com/match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e"><img src="https://ssbsync.smartadserver.com/api/sync?callerId=81&gdpr=0"><img src="https://ce.lijit.com/merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16"><img src="https:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.22	49772	198.148.27.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	801	OUT	GET /bh/rtset?pid=558355&ev=1&rurl=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=4trFhcvjylTg; pb_rtb_ev=3-1oif\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60; INGRESSCOOKIE=185d6ef7c41ed78f
2023-12-12 20:40:08 UTC	924	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-5c6449b65-gvtwm Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=4trFhcvjylTg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 06-Dec-2024 20:40:08 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1oif\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60\|7bq.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Wed, 11-Dec-2024 20:40:08 GMT;Max-Age=31536000;SameSite=None Location: https://usersync.gumgum.com/usersync?b=pln&i=4trFhcvjylTg&ev=1&pid=558355 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.22	49742	69.90.254.78	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	860	OUT	GET /tum?umid=2 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: auid=863968679737; aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+/uGdmVyc2lvbsL7
2023-12-12 20:40:08 UTC	725	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=863968679737; Domain=.acuityplatform.com; Expires=Wed, 11-Dec-2024 20:40:08 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7+4Z2ZXJzaW9uwvs="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Wed, 11-Dec-2024 20:40:08 GMT; Path=/; SameSite=None; Secure Location: https://pixel.rubiconproject.com/tap.php?v=5672&nid=2082&put=863968679737&expires=30&us_privacy=1---

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.22	49766	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	683	OUT	GET /usersync?b=zem&i=1DASsxNWMH7qY1-EP1FQ&us_privacy=1--- HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:08 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:08 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.22	49774	8.2.110.134	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	654	OUT	GET /77781087eb9a0621642f9ebec6beb8d1.gif?puid=[UID]&redir=[RED]&gdpr=0&gdpr_consent= HTTP/1.1 Host: cs.krushmedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:08 UTC	621	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Length: 0 Connection: close Set-Cookie: krm_usr=f28f7f6d-95ac-5c99-92f5-3542310bf6f5; path=/; domain=.krushmedia.com; expires=Tue, 26 Dec 2023 20:40:08 GMT;SameSite=None;Secure Set-Cookie: krm_r=572; path=/; domain=.krushmedia.com; expires=Tue, 26 Dec 2023 20:40:08 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://ad-cdn.technoratimedia.com/html/usersync.html?cb=https%3A%2F%2Fcs.krushmedia.com%2F462e2b5850cd99fa168d581296d0f392.gif%3Fpuid%3D%5BUSER_ID%5D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.22	49768	52.46.151.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	835	OUT	GET /v3/pr?exlist=gg&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:08 UTC	451	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 438 Connection: close x-amz-rid: 8F6QHZ3Q4R0X1NMP2VZ7 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-12 20:40:08 UTC	438	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 37 30 34 34 36 31 61 62 2d 38 62 34 38 2d 34 37 64 66 2d 39 64 38 63 2d 31 38 31 36 32 63 35 33 31 35 38 66 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="704461ab-8b48-47df-9d8c-18162c53158f"> body { background-color:transparent } </style></head><body><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.22	49778	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	1290	OUT	GET /usersync/redirect?partner=gumgum&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:08 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.22	49741	85.114.159.93	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	603	OUT	GET /cookie/?ssp=7 HTTP/1.1 Host: dsp.adfarm1.adition.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:08 UTC	466	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:08 GMT Transfer-Encoding: chunked Connection: close p3p: policyref="http://imagesrv.adition.com/w3c/p3p.xml",CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" Set-Cookie: UserID1=7311810770644957337; Max-Age=7776000; domain=.adfarm1.adition.com; Path=/; SameSite=None; Secure Location: https://pixel.rubiconproject.com/tap.php?v=101732&nid=3822&put=7311810770644957337&expires=730
2023-12-12 20:40:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.22	49770	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	839	OUT	GET /w/1.0/sd?id=537072954&val=AAAFpUUg-oxSbgNMk9I8AAAAAAA&expiration=1702500006&nuid={OX_USER_ID}&is_secure=true HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
2023-12-12 20:40:08 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.22	49775	192.184.69.167	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	689	OUT	GET /pixel/p-CXt61zNBpKUt1.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EBcBDQHSKoir0QA; mc=6578c4bd-6486d-f7b32-08b36
2023-12-12 20:40:08 UTC	585	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://ce.lijit.com/merge?pid=43&gdpr=0&gdpr_consent=&us_privacy=&3pid=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EGkBEwHSKt-owQqPoQA; expires=Mon, 11-Mar-2024 20:40:08 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.22	49779	44.214.186.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	718	OUT	GET /pixel.gif?ch=185&cm=Hz32hLZHBFKxs3xrQUqrw0Qb&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent= HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:08 UTC	930	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: text/plain Content-Length: 0 Connection: close server: Aorta/20231212.88a94bacf X-Aorta-Host: 90f2391a1178 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://ce.lijit.com/merge?pid=84&3pid=ZXjFKB8auyNdakE1Q8hBrAGq set-cookie: cb=ZXjFKB8auyNdakE1Q8hBrAGq; Max-Age=63027504; Expires=Thu, 11 Dec 2025 08:18:32 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"185","t":"2023-12-12 20:40:08"}]; Max-Age=63027504; Expires=Thu, 11 Dec 2025 08:18:32 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.22	49784	34.107.140.113	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	619	OUT	GET /setuid?bidder=rubicon&uid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: s2s.t13.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:08 UTC	522	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: uids=eyJ1aWRzIjp7fSwidGVtcFVJRHMiOnsicnViaWNvbiI6eyJ1aWQiOiJMUTJUMUtEVS0xNy1JQkc2IiwiZXhwaXJlcyI6IjIwMjMtMTItMjZUMjA6NDA6MDguNzE5NjkwNDEyWiJ9fX0=; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:08 GMT; Path=/; Secure; SameSite=None content-type: image/png Content-Length: 86 Date: Tue, 12 Dec 2023 20:40:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:08 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.22	49780	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	777	OUT	GET /w/1.0/sd?id=537073059&val=Q7557000061611676171 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
2023-12-12 20:40:08 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.22	49794	18.160.65.3	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	2192	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=jURFnvrSHaGY9&cb=1&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22sd%22%3A%22sidebar_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%2C%7B%22sd%22%3A%22content_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:09 UTC	494	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 104 Connection: close Server: Server Date: Tue, 12 Dec 2023 20:40:09 GMT x-amz-rid: A8GDZYN9P1F54STRQ63C Strict-Transport-Security: max-age=47474747; includeSubDomains; preload Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 991cd5258e37cadb4872c02ccf777324.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P1 X-Amz-Cf-Id: 8E3RiLMfQj1HDwzB2gACC6YIPCrn_9ceg3YbnLSwkfV1_WiLFrvpcQ==
2023-12-12 20:40:09 UTC	104	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 67 67 22 2c 22 63 62 22 3a 22 31 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg","cb":"1"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.22	49782	147.135.94.213	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	749	OUT	GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282
2023-12-12 20:40:08 UTC	173	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:08 GMT location: https://usersync.gumgum.com/usersync?b=sad&i=2527372694113908282 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.22	49798	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	776	OUT	GET /w/1.0/sd?id=537113484&val=8152669554817989381 HTTP/1.1 Host: eu-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
2023-12-12 20:40:08 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.22	49783	52.46.151.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	674	OUT	GET /x/ae12848777b41970a5f2?gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:09 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 291 Connection: close x-amz-rid: 163VN7CVSJ67H7RJ1274 Set-Cookie: ad-id=A1rhKsjaRkteiTTzE0HaIE4; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 20:40:08 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2029 20:40:08 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-12 20:40:09 UTC	291	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 73 6f 76 72 6e 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=sovrn&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr_consent=&gdpr=0" sandbox="allow-same-origin all

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.22	49791	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	1213	OUT	GET /usersync/redirect?partner=rubicon&partnerId=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:09 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.22	49809	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	1526	OUT	GET /usersync/redirect?partner=thirty_three_across&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=212377533762873 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:09 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.22	49781	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	1363	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=4884872&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607
2023-12-12 20:40:09 UTC	978	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157108:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1702944000%3A265%7C1703548800%3A262_261_260_259_201_263%7C1702425600%3A248; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1703548800%3A3_104_13_54_250_22_48_5_176_231_220_21_178_8_165_240_166_71_55_233%7C1703203200%3A63%7C1702944000%3A223_15_2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:40:08 GMT Transfer-Encoding: chunked Connection: close
2023-12-12 20:40:09 UTC	2320	IN	Data Raw: 39 30 34 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 Data Ascii: 904PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=AE4A8C3D-1096-459A-B091-2BADD5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.22	49773	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	838	OUT	GET /merge?pid=97&3pid=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
2023-12-12 20:40:09 UTC	948	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:09 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:09 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:09 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:09 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.22	49811	67.202.105.21	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:08 UTC	705	OUT	GET /ps/?xi=1&xu=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:09 UTC	672	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:40:09 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP020 location: https://events-ssc.33across.com/match?bidder_id=30&external_user_id=LQ2T1KDU-17-IBG6&ts=1702413609&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Tue, 12 Dec 2023 20:40:08 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.22	49807	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	431	OUT	GET /usersync?b=apn&i=2638779048715878353 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:09 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:09 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:09 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.22	49793	67.202.105.21	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	1074	OUT	GET /ps/?ri=102&ru=https%3A%2F%2Fcms-xch-chicago.33across.com%2Fmatch%3Fbidder_id%3D102%26ttl%3D1705005607%26external_user_id%3D3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:09 UTC	658	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:40:09 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP007 location: https://cms-xch-chicago.33across.com/match?bidder_id=102&ttl=1705005607&external_user_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec content-length: 0 date: Tue, 12 Dec 2023 20:40:08 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.22	49747	203.210.102.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	398	OUT	GET /IDSau/wp-content/themes/twentyeleven/images/search.png HTTP/1.1 Host: interactiveds.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:09 UTC	204	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:09 GMT Content-Type: image/png Content-Length: 440 Connection: close Last-Modified: Fri, 26 Oct 2012 23:24:23 GMT Accept-Ranges: bytes
2023-12-12 20:40:09 UTC	440	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 a2 50 4c 54 45 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 06 06 00 00 00 00 00 00 00 00 00 05 05 05 05 05 05 04 04 04 04 04 04 04 04 04 08 08 04 04 04 04 04 07 04 07 07 07 07 07 07 07 07 07 07 07 03 07 0a 03 06 06 06 0a 0a 0a 06 06 06 09 09 06 09 09 09 09 09 09 08 0b 08 08 08 08 08 0b 08 08 0b 08 08 0b 08 08 0b 08 08 0b 08 0b 0d 0b 46 9c 6d 25 00 00 00 36 74 52 4e 53 00 01 02 03 04 05 06 0d 0e 0f 10 11 14 15 1a 1b 1c 1e 20 22 23 24 26 28 2c 2e 30 32 33 39 3a 3c 41 42 45 46 48 49 4b 4c Data Ascii: PNGIHDRW?PLTEFm%6tRNS "#$&(,.0239:<ABEFHIKL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.22	49789	44.206.51.132	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	533	OUT	GET /header/auction?lib=prebid&v=8.20.0&referrer=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&tmax=2801&us_privacy=1--- HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:09 UTC	940	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:09 GMT Content-Type: application/json; charset=utf-8 Content-Length: 19 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 15 Oct 1992 20:10:00 GMT Pragma: no-cache X-XSS-Protection: 0 Accept-CH: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ect,sec-ch-save-data,sec-ch-viewport-height,sec-ch-width,user-agent,sec-ch-dpr,sec-ch-ua-platform,sec-ch-prefers-color-scheme,sec-ch-ua-full-version-list,sec-ch-downlink,sec-ch-viewport-width,sec-ch-ua-mobile,sec-ch-rtt,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua,sec-ch-ua-bitness,sec-ch-device-memory P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" x-auction-status: 5 Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:09 GMT; Secure; SameSite=None
2023-12-12 20:40:09 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.22	49803	34.235.7.99	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	597	OUT	GET /pdmp/b4/v2/pixel.gif?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&ref=&tref=&tz=-1&screen=1280x1024x24&dcRegion=us-east-1&cmpstatus=notrequired&e=%5B%5D&fpid=223e362f-211b-485a-8f8e-b769f2bcebb9 HTTP/1.1 Host: pdmp.tagger.opecloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:09 UTC	202	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:09 GMT Content-Type: image/gif Content-Length: 35 Connection: close Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate
2023-12-12 20:40:09 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.22	49790	52.5.77.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	719	OUT	GET /ping_match.gif?scc=1&ei=OPENX&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537072979%26val%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=ViN9mkBO1Rd9xZ5
2023-12-12 20:40:09 UTC	689	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Tue, 12 Dec 2023 20:40:08 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://us-u.openx.net/w/1.0/sd?id=537072979&val=ViN9mkBO1Rd9xZ5 Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0f1e963e5cb8c9589@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; Domain=.w55c.net; Expires=Sun, 12-Jan-2025 20:40:09 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchopenx=5; Domain=.w55c.net; Expires=Thu, 11-Jan-2024 20:40:09 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.22	49804	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	700	OUT	GET /usersync/rubicon/LQ2T1KDU-17-IBG6 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
2023-12-12 20:40:09 UTC	313	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:09 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache location: https://sync.targeting.unrulymedia.com/csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 connection: close
2023-12-12 20:40:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.22	49816	34.98.64.218	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	873	OUT	GET /w/1.0/pd?plm=5 HTTP/1.1 Host: google-bidout-d.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE
2023-12-12 20:40:09 UTC	719	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:09 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5; Version=1; Expires=Wed, 27-Dec-2023 20:40:09 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Tue, 12 Dec 2023 20:40:09 GMT Content-Type: text/html Content-Length: 567 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:09 UTC	567	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 76 6f 70 2e 73 75 6e 64 61 79 73 6b 79 2e 63 6f 6d 2f 73 79 6e 63 2f 64 6d 70 3f 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 25 32 46 77 25 32 46 31 2e 30 25 32 46 73 64 25 33 46 69 64 25 33 44 35 34 30 32 39 30 38 34 33 25 32 36 76 61 6c 25 33 44 25 32 34 25 37 42 73 73 6b 79 5f 75 75 69 64 25 37 44 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://vop.sundaysky.com/sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D"><img src="https://ads.stickyadstv.com/user-registering?dataPro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.22	49815	23.83.76.73	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	877	OUT	GET /redir?partneruserid=AAB3wk7K8YkAABTAD88gJQ&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fbee_sync_partners%3Dpp%252Csyn%252Cox%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282
2023-12-12 20:40:09 UTC	527	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:08 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?bee_sync_partners=pp%2Csyn%2Cox&bee_sync_current_partner=sas&bee_sync_initiator=ox&bee_sync_hop_count=2&userid=2527372694113908282 pragma: no-cache set-cookie: csync=127:AAB3wk7K8YkAABTAD88gJQ; expires=Thu, 12 Dec 2024 20:40:09 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.22	49802	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	488	OUT	GET /sync?dsp_id=440&ssp=themediagrid&user_id=jzw3XABN4jyXhRljypiQ0 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:09 UTC	187	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2023-12-12 20:40:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.22	49800	34.120.107.143	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	610	OUT	GET /esp?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
2023-12-12 20:40:09 UTC	335	IN	HTTP/1.1 200 OK X-Powered-By: Express Vary: Origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 85 ETag: W/"55-muGH0vcZs6k0igZH/WpVPIvDE88" Date: Tue, 12 Dec 2023 20:40:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:09 UTC	85	IN	Data Raw: 7b 22 65 73 70 22 3a 22 65 79 4a 70 49 6a 6f 69 52 47 46 78 4d 47 45 30 61 54 6c 42 65 46 6b 7a 62 6d 6c 36 61 45 5a 53 63 33 64 31 55 54 30 39 49 6e 30 3d 22 2c 22 69 22 3a 22 44 61 71 30 61 34 69 39 41 78 59 33 6e 69 7a 68 46 52 73 77 75 51 3d 3d 22 7d Data Ascii: {"esp":"eyJpIjoiRGFxMGE0aTlBeFkzbml6aEZSc3d1UT09In0=","i":"Daq0a4i9AxY3nizhFRswuQ=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.22	49832	207.198.113.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	684	OUT	GET /dmp/pixelSync?cookieQ=1&nid=1 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc#1702413607708
2023-12-12 20:40:09 UTC	730	IN	HTTP/1.1 302 cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc#1702413607708; Domain=.sitescout.com; Expires=Wed, 11-Dec-2024 20:40:09 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIxNSI6MTcwMjQxMzYwOTUwMH0; Domain=.sitescout.com; Expires=Thu, 11-Jan-2024 20:40:09 GMT; Path=/; Secure; SameSite=None location: https://pixel.rubiconproject.com/tap.php?v=7430&nid=2238&put=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&expires=360&gdpr=0&gdpr_consent= content-length: 0 date: Tue, 12 Dec 2023 20:40:09 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.22	49806	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	448	OUT	GET /usersync?b=opx&i=293b2f42-092f-04b7-0a33-f4e4b96c0202 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:09 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:09 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:09 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.22	49785	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	782	OUT	GET /w/1.0/sd?id=537116306&val=R35CA9_10D97F8E3_7A5609BE HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq
2023-12-12 20:40:09 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:09 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.22	49828	34.107.148.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	770	OUT	GET /setuid?bidder=rubicon&uid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: prebid-s2s.media.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3454150986930039084V10; data-mv=6120f800-992e-11ee-8a65-3f15d911ca60~~19; data-o=162ae2ad-8a3a-0601-0e07-9a67c3d39198~~3
2023-12-12 20:40:09 UTC	733	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 set-cookie: uids=eyJ1aWRzIjp7fSwidGVtcFVJRHMiOnsicnViaWNvbiI6eyJ1aWQiOiJMUTJUMUtEVS0xNy1JQkc2IiwiZXhwaXJlcyI6IjIwMjMtMTItMjZUMjA6NDA6MDkuNTQ0MDYxNzI2WiJ9fSwiYmRheSI6IjIwMjMtMTItMTJUMjA6NDA6MDkuNTQzMjg4NTE2WiIsImhvc3RfdWlkcyI6eyJtZWRpYW5ldCI6eyJ1aWQiOiIzNDU0MTUwOTg2OTMwMDM5MDg0VjEwIn19fQ==; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:09 GMT; Path=/; Secure; SameSite=None content-type: image/png Content-Length: 86 x-envoy-upstream-service-time: 2 date: Tue, 12 Dec 2023 20:40:09 GMT server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: clear Connection: close
2023-12-12 20:40:09 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.22	49787	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	425	OUT	GET /openrtb/pbjs?s=179872 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:10 UTC	614	IN	HTTP/1.1 204 No Content Date: Tue, 12 Dec 2023 20:40:09 GMT Content-Type: application/json Connection: close CF-Ray: 8348c7e389705c69-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5U9Uqyd9mjJ%2FWdri7ijCMBSSds2R5u9ixdyoEyVv%2FOzHutJ%2FL7foONtQgO2x%2Fb2JqrYYT73WUl%2FQQGrsM5AkglEHMnxS9IX110pecbHp%2B2dxYe5u%2BpDrXi32jn6DaAKvKZwW5Ex2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.22	49805	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	436	OUT	GET /usersync?b=dit&i=di_1296d48b0e654caba2d72 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:09 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:09 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:09 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.22	49813	23.83.76.73	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	678	OUT	GET /redir/?partnerid=104&partneruserid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282
2023-12-12 20:40:10 UTC	371	IN	HTTP/1.1 200 OK content-type: image/gif date: Tue, 12 Dec 2023 20:40:09 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=104:LQ2T1KDU-17-IBG6; expires=Thu, 12 Dec 2024 20:40:10 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2023-12-12 20:40:10 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.22	49810	67.202.105.21	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:09 UTC	972	OUT	GET /ps/?xi=120&xu=GH_JvDj8VjdvrBlOavHmp2aBmNQ&us_privacy=1--- HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:10 UTC	688	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:40:10 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP007 location: https://events-ssc.33across.com/match?bidder_id=120&external_user_id=GH_JvDj8VjdvrBlOavHmp2aBmNQ&ts=1702413610&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- content-length: 0 date: Tue, 12 Dec 2023 20:40:09 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.22	49792	207.198.113.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	696	OUT	GET /dmp/pixelSync?cookieQ=1&nid=23&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25#1702413608270
2023-12-12 20:40:11 UTC	1079	IN	HTTP/1.1 302 cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25#1702413608270; Domain=.sitescout.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0OCI6MTcwMjQxMzYxMTUyNSwiMzkiOjE3MDI0MTM2MTE1MjUsIjciOjE3MDI0MTM2MTE1MjV9; Domain=.sitescout.com; Expires=Thu, 11-Jan-2024 20:40:11 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%26partner_url%3Dhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D16%25263pid%253D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%2526gdpr%253D0%2526gdpr_consent%253D content-length: 0 date: Tue, 12 Dec 2023 20:40:11 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.22	49799	203.210.102.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	406	OUT	GET /IDSau/wp-content/themes/twentyeleven/images/comment-bubble.png HTTP/1.1 Host: interactiveds.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:11 UTC	204	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/png Content-Length: 791 Connection: close Last-Modified: Wed, 07 Nov 2012 18:49:10 GMT Accept-Ranges: bytes
2023-12-12 20:40:11 UTC	791	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2b 00 00 00 24 08 03 00 00 00 27 d5 33 27 00 00 01 17 50 4c 54 45 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 13 13 24 24 24 32 32 32 40 40 40 4b 4b 4b 57 57 57 6a 6a 6a 71 71 71 78 78 78 80 80 80 85 85 85 91 91 91 a1 a1 a1 a4 a4 a4 a7 a7 a7 ac ac ac af af af b3 b3 b3 b5 b5 b5 bc bc bc c8 c8 c8 cb cb cb d0 d0 d0 d4 d4 d4 d6 d6 d6 d7 d7 d7 d8 d8 d8 db db db db db db e4 e4 e4 e4 e4 e4 e6 e6 e6 e6 e6 e6 e8 e8 e8 e9 e9 e9 ea ea ea ec Data Ascii: PNGIHDR+$'3'PLTE$$$222@@@KKKWWWjjjqqqxxx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.22	49841	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	845	OUT	GET /merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
2023-12-12 20:40:11 UTC	941	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:11 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.22	49808	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	448	OUT	GET /usersync?b=vnt&i=8a323469-881a-408a-9858-5975924b765a HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:11 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.22	49844	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	675	OUT	GET /usersync?b=pln&i=4trFhcvjylTg&ev=1&pid=558355 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:11 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.22	49837	207.198.113.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	1039	OUT	GET /dmp/pixelSync?cookieQ=1&nid=104&us_privacy=1---&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D1---%26xi%3D45%26xu%3D%7BuserId%7D HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=c2de9d03-71b9-4aab-a691-2cd3acac0faf#1702413608300
2023-12-12 20:40:11 UTC	1048	IN	HTTP/1.1 302 cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=c2de9d03-71b9-4aab-a691-2cd3acac0faf#1702413608300; Domain=.sitescout.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIzOSI6MTcwMjQxMzYxMTcyOCwiNyI6MTcwMjQxMzYxMTcyOH0; Domain=.sitescout.com; Expires=Thu, 11-Jan-2024 20:40:11 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=c2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3Dc2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553%26partner_url%3Dhttps%253A%252F%252Fssc-cms.33across.com%252Fps%252F%253Fus_privacy%253D1---%2526xi%253D45%2526xu%253Dc2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553 content-length: 0 date: Tue, 12 Dec 2023 20:40:11 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.22	49817	69.90.254.78	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	996	OUT	GET /tum?tpid=22&uid=a0e6c68f-8dbd-0afb-3786-0e94c1983b43&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537123500%26val%3D___AUID___ HTTP/1.1 Host: openx-ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: auid=863968679737; aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+/uGdmVyc2lvbsL7
2023-12-12 20:40:11 UTC	738	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=863968679737; Domain=.acuityplatform.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4EyMvpCJKxDJQFGF3gjFrBEJQFGF3gjFrBFY2EwZTZjNjhmLThkYmQtMGFmYi0zNzg2LTBlOTRjMTk4M2I0M/v7hnZlcnNpb27C+w=="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Path=/; SameSite=None; Secure Location: https://us-u.openx.net/w/1.0/sd?id=537123500&val=863968679737
2023-12-12 20:40:12 UTC	985	OUT	GET /tum?tpid=22&uid=a0e6c68f-8dbd-0afb-3786-0e94c1983b43&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537123500%26val%3D___AUID___ HTTP/1.1 Host: openx-ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: auid=863968679737; aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+/uGdmVyc2lvbsL7
2023-12-12 20:40:12 UTC	738	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=863968679737; Domain=.acuityplatform.com; Expires=Wed, 11-Dec-2024 20:40:12 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4EyMvpCJKxDJQFGF3gjK6ZEJQFGF3gjK6ZFY2EwZTZjNjhmLThkYmQtMGFmYi0zNzg2LTBlOTRjMTk4M2I0M/v7hnZlcnNpb27C+w=="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Wed, 11-Dec-2024 20:40:12 GMT; Path=/; SameSite=None; Secure Location: https://us-u.openx.net/w/1.0/sd?id=537123500&val=863968679737
2023-12-12 20:40:13 UTC	1023	OUT	GET /tum?tpid=22&uid=a0e6c68f-8dbd-0afb-3786-0e94c1983b43&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537123500%26val%3D___AUID___ HTTP/1.1 Host: openx-ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: auid=863968679737; aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7+4Z2ZXJzaW9uwvs="
2023-12-12 20:40:13 UTC	739	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=863968679737; Domain=.acuityplatform.com; Expires=Wed, 11-Dec-2024 20:40:13 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7gTIy+kIkrEMlAUYXeCNPnEQlAUYXeCNPnEVjYTBlNmM2OGYtOGRiZC0wYWZiLTM3ODYtMGU5NGMxOTgzYjQz+/uGdmVyc2lvbsL7; Domain=.acuityplatform.com; Expires=Wed, 11-Dec-2024 20:40:13 GMT; Path=/; SameSite=None; Secure Location: https://us-u.openx.net/w/1.0/sd?id=537123500&val=863968679737

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.22	49842	147.135.94.213	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	644	OUT	GET /api/sync?callerId=81&gdpr=0 HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282
2023-12-12 20:40:11 UTC	195	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:10 GMT location: https://u.openx.net/w/1.0/sd?id=540394477&val=2527372694113908282&gdpr=0&gdpr_consent= connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.22	49825	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	843	OUT	GET /w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE
2023-12-12 20:40:11 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.22	49843	185.184.8.90	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	684	OUT	GET /cm-notify?pi=openx&gdpr=0 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
2023-12-12 20:40:11 UTC	407	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:11 GMT vary: Accept-Encoding location: https://us-u.openx.net/w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Tue, 12 Dec 2023 20:40:11 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.22	49839	34.102.243.38	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	1717	OUT	GET /tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%220.1.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Education%22%2C%22subcategory%22%3A%22Education%22%7D HTTP/1.1 Host: pandg.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:11 UTC	1154	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Content-Security-Policy: default-src 'none';img-src https://.tapad.com https://match.adsrvr.org Access-Control-Max-Age: 300 Access-Control-Allow-Origin: Content-Type: text/html;charset=utf-8 Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:11 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2023-12-12 20:40:11 UTC	98	IN	Data Raw: 35 36 33 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 74 61 70 61 64 26 74 74 64 5f 74 70 69 3d 31 26 74 74 64 Data Ascii: 563<html><body><img src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd
2023-12-12 20:40:11 UTC	1252	IN	Data Raw: 5f 70 75 69 64 3d 65 33 31 62 38 65 30 65 2d 62 65 61 32 2d 34 39 35 66 2d 38 64 32 37 2d 63 32 32 37 65 65 38 32 65 30 35 34 25 32 35 32 43 25 32 35 32 43 25 32 35 32 35 37 42 25 32 35 32 35 32 32 61 72 63 68 69 74 65 63 74 75 72 65 25 32 35 32 35 32 32 25 32 35 32 35 33 41 25 32 35 32 35 32 32 78 38 36 25 32 35 32 35 32 32 25 32 35 32 35 32 43 25 32 35 32 35 32 32 62 69 74 6e 65 73 73 25 32 35 32 35 32 32 25 32 35 32 35 33 41 25 32 35 32 35 32 32 36 34 25 32 35 32 35 32 32 25 32 35 32 35 32 43 25 32 35 32 35 32 32 62 72 61 6e 64 73 25 32 35 32 35 32 32 25 32 35 32 35 33 41 25 32 35 32 35 35 42 25 32 35 32 35 37 42 25 32 35 32 35 32 32 62 72 61 6e 64 25 32 35 32 35 32 32 25 32 35 32 35 33 41 25 32 35 32 35 32 32 4e 6f 74 5f 41 25 32 35 32 42 42 72 61 6e Data Ascii: _puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%252C%252C%25257B%252522architecture%252522%25253A%252522x86%252522%25252C%252522bitness%252522%25253A%25252264%252522%25252C%252522brands%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Not_A%252BBran
2023-12-12 20:40:11 UTC	41	IN	Data Raw: 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2f 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: =0&gdpr_consent="/></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.22	49856	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	622	OUT	GET /w/1.0/sd?id=537072954&val=AAAFpUUg-oxSbgNMk9I8AAAAAAA&expiration=1702500006&nuid={OX_USER_ID}&is_secure=true HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDtpvE
2023-12-12 20:40:11 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.22	49860	34.107.140.113	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	531	OUT	GET /setuid?bidder=rubicon&uid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: s2s.t13.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uids=eyJ1aWRzIjp7fSwidGVtcFVJRHMiOnsicnViaWNvbiI6eyJ1aWQiOiJMUTJUMUtEVS0xNy1JQkc2IiwiZXhwaXJlcyI6IjIwMjMtMTItMjZUMjA6NDA6MDguNzE5NjkwNDEyWiJ9fX0=
2023-12-12 20:40:11 UTC	522	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Set-Cookie: uids=eyJ1aWRzIjp7fSwidGVtcFVJRHMiOnsicnViaWNvbiI6eyJ1aWQiOiJMUTJUMUtEVS0xNy1JQkc2IiwiZXhwaXJlcyI6IjIwMjMtMTItMjZUMjA6NDA6MTEuNTk2MDIwNzNaIn19fQ==; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:11 GMT; Path=/; Secure; SameSite=None content-type: image/png Content-Length: 86 Date: Tue, 12 Dec 2023 20:40:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:11 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.22	49831	96.46.186.182	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	641	OUT	GET /cookiesyncendpoint?biddername=5&auid=&key=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: sync.aniview.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:11 UTC	326	IN	HTTP/1.1 200 OK set-cookie: 1_C_5=LQ2T1KDU-17-IBG6; Path=/; Domain=aniview.com; Expires=Fri, 22 Dec 2023 20:40:11 GMT; Secure; SameSite=None set-cookie: 1_C_5=LQ2T1KDU-17-IBG6; Path=/; Expires=Fri, 22 Dec 2023 20:40:11 GMT; Secure; SameSite=None date: Tue, 12 Dec 2023 20:40:11 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.22	49882	52.46.151.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	441	OUT	GET /x/ae12848777b41970a5f2?gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:11 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 291 Connection: close x-amz-rid: 3Z1T2AC16Q3R0JQZFV1Z Set-Cookie: ad-id=A1rhKsjaRkteiTTzE0HaIE4; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 20:40:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2029 20:40:11 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-12 20:40:11 UTC	291	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 73 6f 76 72 6e 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=sovrn&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr_consent=&gdpr=0" sandbox="allow-same-origin all

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.22	49846	159.127.42.242	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	676	OUT	GET /w/user.sync?ptrid=14&userid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: match.sync.ad.cpe.dotomi.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: DotomiTest=4e0e82958e5611ea
2023-12-12 20:40:11 UTC	581	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: 0 Accept-CH: Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness Set-Cookie: DotomiUser=711907349493661519$3$582080014$$1; Expires=Wed, 08 Jan 2025 20:40:11 GMT; Path=/; Domain=.dotomi.com; SameSite=None; Secure Set-Cookie: receive-cookie-deprecation=1; Expires=Wed, 11 Dec 2024 20:40:11 GMT; Path=/; Domain=.dotomi.com; Secure; HTTPOnly; SameSite=None; Partitioned
2023-12-12 20:40:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.22	49879	38.98.69.175	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	681	OUT	GET /sn.ashx HTTP/1.1 Host: rbp.mxptint.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000000000000000000000000000006578C527
2023-12-12 20:40:11 UTC	643	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://pixel.rubiconproject.com/tap.php?v=14321&nid=2313&put=R35CA9_10D97F8E3_7A5609BE&expires=60 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000000000000000000000000000006578C52700000000000000000000000000000000000000006578C52B; domain=mxptint.net; expires=Fri, 12-Dec-2025 20:40:11 GMT; path=/; secure; SameSite=None Date: Tue, 12 Dec 2023 20:40:10 GMT Connection: close Content-Length: 227 Strict-Transport-Security: max-age=-385418411; includeSubDomains
2023-12-12 20:40:11 UTC	227	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 31 34 33 32 31 26 61 6d 70 3b 6e 69 64 3d 32 33 31 33 26 61 6d 70 3b 70 75 74 3d 52 33 35 43 41 39 5f 31 30 44 39 37 46 38 45 33 5f 37 41 35 36 30 39 42 45 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 36 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://pixel.rubiconproject.com/tap.php?v=14321&nid=2313&put=R35CA9_10D97F8E3_7A5609BE&expires=60">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.22	49821	52.205.97.185	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	521	OUT	GET /v1/targeting?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&fpid=223e362f-211b-485a-8f8e-b769f2bcebb9&tenant=b4 HTTP/1.1 Host: pdmp.profiles.tagger.opecloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:11 UTC	153	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: application/json Content-Length: 129 Connection: close Cache-Control: no-cache
2023-12-12 20:40:11 UTC	129	IN	Data Raw: 7b 22 73 22 3a 22 36 2b 76 51 73 68 38 78 62 62 4e 67 35 56 75 6a 74 78 35 51 63 4a 71 70 47 2f 41 32 6d 57 59 4c 36 4c 6d 57 4a 6e 6f 65 68 6c 36 63 4a 41 3d 3d 22 2c 22 74 22 3a 22 49 31 65 48 44 6e 65 6c 33 36 51 6b 72 50 61 51 31 73 77 32 63 46 58 69 53 55 39 44 6d 6f 53 78 45 71 51 54 70 7a 46 30 6c 2f 4b 6c 49 77 3d 3d 22 2c 22 6b 69 64 22 3a 32 2c 22 74 74 6c 5f 73 22 3a 36 7d Data Ascii: {"s":"6+vQsh8xbbNg5Vujtx5QcJqpG/A2mWYL6LmWJnoehl6cJA==","t":"I1eHDnel36QkrPaQ1sw2cFXiSU9DmoSxEqQTpzF0l/KlIw==","kid":2,"ttl_s":6}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.22	49812	3.214.250.236	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	624	OUT	GET /cs?aid=21479&id=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: cs.minutemedia-prebid.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:11 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: application/javascript Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: https://eus.rubiconproject.com/ x-envoy-upstream-service-time: 0 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.22	49866	34.96.105.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	603	OUT	GET /v1/api/sync/openx HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:11 UTC	277	IN	HTTP/1.1 204 No Content Set-Cookie: b=6578C52B9F4C51008E91BFF4BLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Date: Tue, 12 Dec 2023 20:40:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.22	49819	34.96.105.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	602	OUT	GET /v1/api/sync/rubicon HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:11 UTC	277	IN	HTTP/1.1 204 No Content Set-Cookie: b=6578C52BA3E5B7861049C694BLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Date: Tue, 12 Dec 2023 20:40:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.22	49814	52.206.176.4	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	615	OUT	GET /cs?aid=11590&id=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: cs.yellowblue.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:11 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: application/javascript Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: https://eus.rubiconproject.com/ x-envoy-upstream-service-time: 0 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.22	49857	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	560	OUT	GET /w/1.0/sd?id=537073059&val=Q7557000061611676171 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDtpvE
2023-12-12 20:40:11 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.22	49796	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	853	OUT	GET /merge?pid=27&3pid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
2023-12-12 20:40:11 UTC	941	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:11 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.22	49826	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	836	OUT	GET /merge?pid=92&3pid=2638779048715878353&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
2023-12-12 20:40:11 UTC	924	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:11 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_92=2638779048715878353; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.22	49845	52.204.15.232	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	781	OUT	GET /usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:11 UTC	216	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 2674 Connection: close Server: nginx ETag: "00fb32a497a82a201cb0809a95029184d" Timing-Allow-Origin: *
2023-12-12 20:40:11 UTC	2674	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 67 75 6d 67 75 6d 32 26 75 73 65 72 5f 69 64 3d 75 5f 37 65 36 61 33 63 36 65 2d 65 63 36 34 2d 34 32 37 32 2d 62 31 32 62 2d 31 66 64 33 65 64 33 61 32 33 37 62 Data Ascii: <html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/><img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.22	49876	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	766	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=70&external_user_id=a86d875c-ffb1-0c0e-017f-ebd97b68911b HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:11 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:11 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.22	49786	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	919	OUT	GET /pixel.gif HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:11 UTC	305	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 1561 Connection: close Vary: Origin Access-Control-Allow-Credentials: true Cache-Control: no-cache, private Accept-Ranges: bytes Last-Modified: Wed, 06 Dec 2023 17:58:38 GMT ETag: W/"619-18c404820b0"
2023-12-12 20:40:11 UTC	1561	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 ff 00 00 00 00 00 00 00 33 00 00 66 00 00 99 00 00 cc 00 00 ff 00 33 00 00 33 33 00 33 66 00 33 99 00 33 cc 00 33 ff 00 66 00 00 66 33 00 66 66 00 66 99 00 66 cc 00 66 ff 00 99 00 00 99 33 00 99 66 00 99 99 00 99 cc 00 99 ff 00 cc 00 00 cc 33 00 cc 66 00 cc 99 00 cc cc 00 cc ff 00 ff 00 00 ff 33 00 ff 66 00 ff 99 00 ff cc 00 ff ff 33 00 00 33 00 33 33 00 66 33 00 99 33 00 cc 33 00 ff 33 33 00 33 33 33 33 33 66 33 33 99 33 33 cc 33 33 ff 33 66 00 33 66 33 33 66 66 33 66 99 33 66 cc 33 66 ff 33 99 00 33 99 33 33 99 66 33 99 99 33 99 cc 33 99 ff 33 cc 00 33 cc 33 33 cc 66 33 cc 99 33 cc cc 33 cc ff 33 ff 00 33 ff 33 33 ff 66 33 ff 99 33 ff cc 33 ff ff 66 00 00 66 00 33 66 00 66 66 00 99 66 00 cc 66 00 ff 66 33 00 66 33 33 66 33 Data Ascii: GIF89a3f3333f333ff3fffff3f3f3f3333f3333333333f3333333f3f33ff3f3f3f3333f3333333f3333333f333ff3ffffff3f33f3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.22	49824	68.67.160.186	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	979	OUT	GET /getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D90%26external_user_id%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353
2023-12-12 20:40:11 UTC	1054	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://events-ssc.33across.com/match?liv=h&us_privacy=1---&bidder_id=90&external_user_id=2638779048715878353 AN-X-Request-Uuid: 1a996b16-266b-4ab8-bb48-2b7bd263fd76 Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:11 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.22	49848	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	943	OUT	GET /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:11 UTC	292	IN	HTTP/1.1 404 Not Found Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 150 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2023-12-12 20:40:11 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 62 69 64 52 65 71 75 65 73 74 2f 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /bidRequest/</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.22	49838	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	855	OUT	GET /merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
2023-12-12 20:40:11 UTC	941	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:11 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.22	49822	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	469	OUT	GET /usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:11 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.22	49881	44.214.247.189	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	1055	OUT	GET /usersync/redirect?partner=gumgum&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:11 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.22	49795	192.178.50.65	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	549	OUT	GET /rtv/012310301456000/amp4ads-v0.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:11 UTC	1580	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 200642 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Dec 2023 15:24:35 GMT Expires: Sat, 07 Dec 2024 15:24:35 GMT Cache-Control: public, max-age=31536000 ETag: "6a17d296884b026a" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 364536 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:11 UTC	1580	IN	Data Raw: 73 65 6c 66 2e 41 4d 50 5f 43 4f 4e 46 49 47 3d 7b 22 76 22 3a 22 30 31 32 33 31 30 33 30 31 34 35 36 30 30 30 22 2c 22 74 79 70 65 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 61 6c 6c 6f 77 2d 64 6f 63 2d 6f 70 74 2d 69 6e 22 3a 5b 22 61 6d 70 2d 6e 65 78 74 2d 70 61 67 65 22 5d 2c 22 61 6c 6c 6f 77 2d 75 72 6c 2d 6f 70 74 2d 69 6e 22 3a 5b 5d 2c 22 63 61 6e 61 72 79 22 3a 30 2c 22 61 34 61 50 72 6f 66 69 6c 69 6e 67 52 61 74 65 22 3a 30 2e 30 31 2c 22 64 6f 75 62 6c 65 63 6c 69 63 6b 53 72 61 45 78 70 22 3a 30 2e 30 31 2c 22 64 6f 75 62 6c 65 63 6c 69 63 6b 53 72 61 52 65 70 6f 72 74 45 78 63 6c 75 64 65 64 42 6c 6f 63 6b 22 3a 30 2e 31 2c 22 66 6c 65 78 41 64 53 6c 6f 74 73 22 3a 30 2e 30 35 2c 22 66 6c 65 78 69 62 6c 65 2d 62 69 74 72 61 74 65 22 Data Ascii: self.AMP_CONFIG={"v":"012310301456000","type":"production","allow-doc-opt-in":["amp-next-page"],"allow-url-opt-in":[],"canary":0,"a4aProfilingRate":0.01,"doubleclickSraExp":0.01,"doubleclickSraReportExcludedBlock":0.1,"flexAdSlots":0.05,"flexible-bitrate"
2023-12-12 20:40:11 UTC	1580	IN	Data Raw: 6e 20 75 28 74 29 7b 63 6f 6e 73 74 20 69 3d 68 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 69 2e 65 78 70 65 63 74 65 64 3d 21 30 2c 69 7d 76 61 72 7b 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3a 63 2c 74 6f 53 74 72 69 6e 67 3a 64 7d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 64 2e 63 61 6c 6c 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 63 6f 6e 73 74 20 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 26 26 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 69 2c 74 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 69 29 7b 72 65 74 75 Data Ascii: n u(t){const i=h.apply(null,arguments);return i.expected=!0,i}var{hasOwnProperty:c,toString:d}=Object.prototype;function f(t){return"[object Object]"===d.call(t)}function p(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function m(t,i){retu
2023-12-12 20:40:11 UTC	1580	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 53 28 74 2c 69 2c 65 3d 22 41 73 73 65 72 74 69 6f 6e 20 66 61 69 6c 65 64 22 2c 73 29 7b 76 61 72 20 6e 2c 72 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 3b 74 26 26 2d 31 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 74 29 26 26 28 65 2b 3d 74 29 3b 6c 65 74 20 6f 3d 33 3b 63 6f 6e 73 74 20 68 3d 65 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 6c 65 74 20 6c 3d 68 2e 73 68 69 66 74 28 29 3b 63 6f 6e 73 74 20 61 3d 5b 6c 5d 3b 66 6f 72 28 3b 68 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 2b 2b 5d 2c 69 3d 68 2e 73 68 69 66 74 28 29 3b 6c 2b 3d 78 28 74 29 2b 69 2c 61 2e 70 75 73 68 28 74 2c 69 2e 74 72 69 6d 28 29 29 7d 63 6f 6e 73 74 20 75 3d 6e 65 77 20 45 72 72 6f 72 28 6c 29 3b 74 68 72 6f 77 20 75 Data Ascii: function S(t,i,e="Assertion failed",s){var n,r;if(i)return i;t&&-1==e.indexOf(t)&&(e+=t);let o=3;const h=e.split("%s");let l=h.shift();const a=[l];for(;h.length;){const t=arguments[o++],i=h.shift();l+=x(t)+i,a.push(t,i.trim())}const u=new Error(l);throw u
2023-12-12 20:40:11 UTC	1580	IN	Data Raw: 20 69 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 29 7b 63 6f 6e 73 74 7b 6c 6f 63 61 74 69 6f 6e 3a 69 7d 3d 74 7c 7c 73 65 6c 66 3b 72 65 74 75 72 6e 20 57 28 69 2e 6f 72 69 67 69 6e 61 6c 48 61 73 68 7c 7c 69 2e 68 61 73 68 29 7d 76 61 72 20 59 3d 74 3d 3e 73 65 6c 66 2e 41 4d 50 5f 43 4f 4e 46 49 47 3f 73 65 6c 66 2e 41 4d 50 5f 43 4f 4e 46 49 47 5b 74 5d 3a 6e 75 6c 6c 2c 51 3d 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 59 28 22 63 64 6e 50 72 6f 78 79 52 65 67 65 78 22 29 3f 6e 65 77 20 52 65 67 45 78 70 28 59 28 22 63 64 6e 50 72 6f 78 79 52 65 67 65 78 22 29 29 3a 59 28 22 63 64 6e 50 72 6f 78 79 52 65 67 65 78 22 29 29 7c 7c 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2d 5d 2b 5c 2e 29 3f 63 64 6e 5c 2e 61 6d 70 Data Ascii: i}function K(t){const{location:i}=t\|\|self;return W(i.originalHash\|\|i.hash)}var Y=t=>self.AMP_CONFIG?self.AMP_CONFIG[t]:null,Q=("string"==typeof Y("cdnProxyRegex")?new RegExp(Y("cdnProxyRegex")):Y("cdnProxyRegex"))\|\|/^https:\/\/([a-zA-Z0-9_-]+\.)?cdn\.amp
2023-12-12 20:40:11 UTC	1580	IN	Data Raw: 4f 44 45 7d 76 61 72 20 64 74 3d 28 29 3d 3e 7b 7d 2c 66 74 3d 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 74 29 7b 66 74 3d 74 7d 76 61 72 20 6d 74 3d 28 74 2c 69 29 3d 3e 69 2e 72 65 64 75 63 65 28 28 28 74 2c 69 29 3d 3e 60 24 7b 74 7d 26 73 5b 5d 3d 24 7b 67 74 28 69 29 7d 60 29 2c 60 68 74 74 70 73 3a 2f 2f 6c 6f 67 2e 61 6d 70 2e 64 65 76 2f 3f 76 3d 30 31 32 33 31 30 33 30 31 34 35 36 30 30 30 26 69 64 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 60 29 2c 67 74 3d 74 3d 3e 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 78 28 74 29 29 29 2c 5f 74 3d 74 3d 3e 70 61 72 73 65 49 6e 74 28 4b 28 74 29 2e 6c 6f 67 2c 31 30 29 3b 73 65 6c 66 2e 5f 5f 41 4d 50 5f 4c 4f 47 3d 73 65 6c Data Ascii: ODE}var dt=()=>{},ft=void 0;function pt(t){ft=t}var mt=(t,i)=>i.reduce(((t,i)=>`${t}&s[]=${gt(i)}`),`https://log.amp.dev/?v=012310301456000&id=${encodeURIComponent(t)}`),gt=t=>encodeURIComponent(String(x(t))),_t=t=>parseInt(K(t).log,10);self.__AMP_LOG=sel
2023-12-12 20:40:11 UTC	1580	IN	Data Raw: 74 20 73 3d 6e 65 77 28 4d 74 28 74 29 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 29 28 28 28 29 3d 3e 7b 69 28 74 29 26 26 28 73 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 28 29 29 7d 29 29 3b 73 2e 6f 62 73 65 72 76 65 28 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 74 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 69 3d 3e 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 4e 74 28 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 28 28 29 3d 3e 21 21 74 2e 62 6f 64 79 29 2c 69 29 7d 28 74 2c 69 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 55 74 28 74 29 7b 76 61 72 20 69 3b 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 Data Ascii: t s=new(Mt(t).MutationObserver)((()=>{i(t)&&(s.disconnect(),e())}));s.observe(t,{childList:!0})}}function Dt(t){return new Promise((i=>function(t,i){Nt(t.documentElement,(()=>!!t.body),i)}(t,i)))}function Ut(t){var i;null===(i=t.parentElement)\|\|void 0===i
2023-12-12 20:40:11 UTC	1580	IN	Data Raw: 64 74 68 26 26 30 3d 3d 74 2e 68 65 69 67 68 74 3f 74 3a 59 74 28 74 2e 6c 65 66 74 2b 69 2c 74 2e 74 6f 70 2b 65 2c 74 2e 77 69 64 74 68 2c 74 2e 68 65 69 67 68 74 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 7c 7c 21 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 5f 73 74 75 62 7c 7c 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 28 29 3d 3e 7b 7d 29 2c 7b 72 6f 6f 74 3a 74 2e 64 6f 63 75 6d 65 6e 74 7d 29 2c 21 30 7d 63 61 74 63 68 28 74 29 Data Ascii: dth&&0==t.height?t:Yt(t.left+i,t.top+e,t.width,t.height)}function Jt(t){return!t.IntersectionObserver\|\|!t.IntersectionObserverEntry\|\|!!t.IntersectionObserver._stub\|\|!function(t){try{return new t.IntersectionObserver((()=>{}),{root:t.document}),!0}catch(t)
2023-12-12 20:40:11 UTC	1580	IN	Data Raw: 20 74 28 74 68 69 73 2e 74 74 29 3b 74 68 69 73 2e 6f 74 3d 69 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 74 68 69 73 2e 6e 74 29 69 2e 6f 62 73 65 72 76 65 28 74 29 3b 74 68 69 73 2e 6e 74 2e 6c 65 6e 67 74 68 3d 30 7d 7d 3b 73 69 2e 5f 75 70 67 72 61 64 65 72 73 3d 5b 5d 2c 73 65 6c 66 2e 64 6f 63 75 6d 65 6e 74 26 26 28 4a 74 28 65 69 3d 73 65 6c 66 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 29 72 65 74 75 72 6e 20 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 3d 5a 74 2c 76 6f 69 64 28 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 2e 5f 73 74 75 62 3d 5a 74 29 3b 63 6f 6e 73 74 20 69 3d 74 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e Data Ascii: t(this.tt);this.ot=i;for(const t of this.nt)i.observe(t);this.nt.length=0}};si._upgraders=[],self.document&&(Jt(ei=self)&&function(t){if(!t.IntersectionObserver)return t.IntersectionObserver=Zt,void(t.IntersectionObserver._stub=Zt);const i=t.Intersection
2023-12-12 20:40:11 UTC	1580	IN	Data Raw: 70 6c 61 74 65 22 3a 22 63 75 73 74 6f 6d 2d 65 6c 65 6d 65 6e 74 22 2c 69 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 63 72 69 70 74 22 2c 69 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 2d 61 6d 70 68 74 6d 6c 2d 69 6e 73 65 72 74 65 64 22 2c 22 22 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 6d 6f 64 75 6c 65 22 29 2c 4b 74 28 74 2e 64 6f 63 75 6d 65 6e 74 2c 73 29 2c 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 22 29 3b 63 6f 6e 73 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 73 29 7b 72 65 74 75 72 6e 60 24 7b 69 74 7d 2f 72 74 76 2f 24 7b 61 74 28 29 2e 72 74 76 56 65 72 73 69 6f 6e 7d 2f 76 30 2f Data Ascii: plate":"custom-element",i),s.setAttribute("data-script",i),s.setAttribute("i-amphtml-inserted",""),s.setAttribute("type","module"),Kt(t.document,s),s.setAttribute("crossorigin","anonymous");const n=function(t,i,e,s){return`${it}/rtv/${at().rtvVersion}/v0/
2023-12-12 20:40:11 UTC	1580	IN	Data Raw: 22 29 7d 28 4d 74 28 74 29 29 2e 67 65 74 41 6d 70 44 6f 63 28 74 29 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 4d 69 28 74 29 7b 63 6f 6e 73 74 20 69 3d 52 69 28 74 29 3b 72 65 74 75 72 6e 20 69 2e 69 73 53 69 6e 67 6c 65 44 6f 63 28 29 3f 69 2e 77 69 6e 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 77 69 28 74 2c 69 29 7b 54 74 28 43 69 28 74 2c 69 29 29 3b 63 6f 6e 73 74 20 65 3d 53 69 28 74 29 5b 69 5d 3b 72 65 74 75 72 6e 20 65 2e 6f 62 6a 7c 7c 28 54 74 28 65 2e 63 74 6f 72 29 2c 54 74 28 65 2e 63 6f 6e 74 65 78 74 29 2c 65 2e 6f 62 6a 3d 6e 65 77 20 65 2e 63 74 6f 72 28 65 2e 63 6f 6e 74 65 78 74 29 2c 54 74 28 65 2e 6f 62 6a 29 2c 65 2e 63 6f 6e 74 65 78 74 3d 6e 75 6c 6c 2c 65 2e 72 65 73 6f 6c 76 65 26 26 65 2e 72 65 73 6f 6c 76 65 28 65 2e 6f 62 6a 29 29 2c 65 Data Ascii: ")}(Mt(t)).getAmpDoc(t):t}function Mi(t){const i=Ri(t);return i.isSingleDoc()?i.win:i}function wi(t,i){Tt(Ci(t,i));const e=Si(t)[i];return e.obj\|\|(Tt(e.ctor),Tt(e.context),e.obj=new e.ctor(e.context),Tt(e.obj),e.context=null,e.resolve&&e.resolve(e.obj)),e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.22	49834	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	1045	OUT	GET /usermatchredir?s=191740&us_privacy=1---&cb=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D2%26external_user_id%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:11 UTC	1085	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Length: 0 Connection: close Location: https://events-ssc.33across.com/match?liv=h&us_privacy=1---&bidder_id=2&external_user_id=ZXjEurXK3YbtORulaCkY0QAA%26633 CF-Ray: 8348c7f06a628da9-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; Path=/; Domain=casalemedia.com; Expires=Wed, 11 Dec 2024 20:40:11 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=633; Path=/; Domain=casalemedia.com; Expires=Mon, 11 Mar 2024 20:40:11 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pmin44JU3xbCWShyvQwSYJGuITSRXlwtCnONTHdquIWiJCnfPvJZWydZ6Byhjv3byHya5bzxXYIY0HFVtpHcDvBlp8XSRFn78ZcjfqmAlqNOooXXCFDIDa6v2vEP18don0CoKn7N7RUung%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.22	49854	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	792	OUT	GET /w/1.0/sd?id=537141727&val=18072662090765666652 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDtpvE
2023-12-12 20:40:11 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.22	49853	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	820	OUT	GET /merge?pid=84&3pid=ZXjFKB8auyNdakE1Q8hBrAGq HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
2023-12-12 20:40:12 UTC	929	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:11 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.22	49867	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	788	OUT	GET /match?bidder_id=30&external_user_id=LQ2T1KDU-17-IBG6&ts=1702413609&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:12 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:12 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.22	49827	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	816	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:12 UTC	369	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //sonata-notifications.taptapnetworks.com/web/cookie/bidswitch/sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=0&gdpr_consent=&gdpr_pd=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.22	49835	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	970	OUT	GET /usersync/redirect?partner=rubicon&partnerId=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:12 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.22	49836	34.224.153.9	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	674	OUT	GET /api/v1/dsync/Rubicon?exid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
2023-12-12 20:40:12 UTC	456	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702; Path=/; Domain=kargo.com; Expires=Wed, 11 Dec 2024 20:40:11 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.22	49858	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	666	OUT	GET /usersync?b=sad&i=2527372694113908282 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:12 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:12 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.22	49861	35.194.66.159	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	634	OUT	GET /rb_match HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=EAF92472013E4E6D9A751C1DA567BFFF
2023-12-12 20:40:12 UTC	658	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://pixel.rubiconproject.com/tap.php?v=6286&nid=2132&put=EAF92472013E4E6D9A751C1DA567BFFF&expires=365 Expires: Mon, 11 Dec 2023 20:40:11 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2023-12-12 20:40:12 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.22	49875	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	869	OUT	GET /merge?pid=43&gdpr=0&gdpr_consent=&us_privacy=&3pid=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
2023-12-12 20:40:12 UTC	945	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:11 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.22	49884	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	795	OUT	GET /w/1.0/sd?id=537072979&val=ViN9mkBO1Rd9xZ5 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.t1s7rZvswwvDtpsvv5vE
2023-12-12 20:40:12 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.22	49873	34.98.64.218	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	567	OUT	GET /w/1.0/sd?id=537113484&val=8152669554817989381 HTTP/1.1 Host: eu-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.t1s7rZvswwvDtpsvv5vE
2023-12-12 20:40:12 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.22	49818	35.244.216.234	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	715	OUT	GET /bid-engine/cs/377c7998bb9f42e5aea0416c9dac091f/v1?rd=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537146931%26val%3D%24UID HTTP/1.1 Host: openx.adhaven.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:12 UTC	393	IN	HTTP/1.1 302 Found Set-Cookie: uid=4c_0f2fd50c-4ce9-46bf-8fbf-4c75ac6b55dc;path=/;Max-Age=315360000;Domain=adhaven.com;SameSite=None;Secure Location: https://us-u.openx.net/w/1.0/sd?id=537146931&val=4c_0f2fd50c-4ce9-46bf-8fbf-4c75ac6b55dc Content-Length: 0 Date: Tue, 12 Dec 2023 20:40:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.22	49880	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	452	OUT	GET /usersync?b=oth&i=y-i5Vemz9E2pcAB3qsj5sq4a92wTUal4GhEbBQ~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:12 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:12 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.22	49874	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	1045	OUT	GET /usersync/redirect?partner=thirty_three_across&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=212377533762873 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:12 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.22	49883	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	662	OUT	GET /merge?pid=97&3pid=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005
2023-12-12 20:40:12 UTC	1295	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:11 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVrI0V7JSCorQTUm2SDRJNTPTNTayMNI1MUgz1020MDXXTTY0NzNJSQFKGifpGhiYKtUCAFmVDRE%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.22	49862	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	760	OUT	GET /sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA& HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:12 UTC	751	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1347 Connection: close P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: sync=CgoIoQEQw-eI_sUxCgoIkQIQw-eI_sUxCgoItAIQw-eI_sUxCgoI5gEQw-eI_sUxCgoIhwIQw-eI_sUxCgoItwIQw-eI_sUxCgkIOhDD54j-xTEKCgiMAhDD54j-xTEKCQhfEMPniP7FMQoJCB8Qw-eI_sUx; Path=/sync; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:11 GMT; Secure; SameSite=None Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:11 GMT; Secure; SameSite=None
2023-12-12 20:40:12 UTC	1347	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 69 64 3d 35 38 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 76 78 39 74 35 30 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 31 36 31 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 73 79 6e 63 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 32 33 30 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 Data Ascii: <!DOCTYPE html><html><body><img id=58 src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent="><img id=161 src="https://eb2.3lift.com/ebda?sync=1&gdpr=0&gdpr_consent="><img id=230 src="https://cm.g.doubleclick.ne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.22	49863	104.21.64.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	2254	OUT	GET /polynomial-root-finding-with-the-jenkins-traub-algorithm/ HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413595.0.0.0; _ga=GA1.1.1980800170.1702413486; mediavine_session={%22depth%22:3%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; cto_bundle=onR1gl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkxFZWp5Sjh0THdhV3h6Z09Lalc5T1V3cSUyRkRvanhXekdLTGJCS1F4THRWcTdHZTBUQnlEZUlqeDhaZEdGJTJCcm1NRnVjUWM5Vko2elZzRzI0dGlnalduWVpUYUVlelR5JTJGRGVPZWhGNm5uMmFsVmpBZ2JFWEtWNXRudE9BJTJCemxDOHl3JTNEJTNE; cto_bidid=p16MSF8lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNSDBWeTgwSCUyQkdMZDExa2N4RXliT245VXpHQzJnbUxpcUJWaVl6UWZlNm5NJTNE; TAPAD=%7B%22id%22%3A%226bba3ea6-2fb6-4f4c-a1fa-4873c1b3a0ff%22%7D
2023-12-12 20:40:12 UTC	983	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close content-security-policy: block-all-mixed-content vary: Accept-Encoding, Cookie last-modified: Mon, 11 Dec 2023 09:28:31 GMT x-presslabs-stats: HIT; 0.099s; 16 queries; desktop; ttl 172800s; refresh in 46099s x-request-id: adb4dc6d02f958b3316b73814370392b strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hJ1SOf3K%2Btq%2Ftfd2%2FeBlwskS1TanDb3b0jJzr%2BzrqpIlK73SufM7AziLi%2FmO5aUtAk9fdygEHupP2SsSRTJxIvUbyiG0mLwMAmtJScV5y9bgRkw9eRR9vLWghhDq2gE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c7f2bd810321-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:12 UTC	386	IN	Data Raw: 37 34 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 53 69 74 65 22 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 20 41 6c 77 61 79 73 20 66 6f 72 63 65 20 6c 61 74 65 73 74 20 49 45 20 72 65 6e 64 65 72 69 6e 67 20 65 6e 67 69 6e 65 20 28 65 76 65 6e 20 69 6e 20 69 6e 74 72 61 6e 65 74 29 20 26 20 43 68 72 6f 6d 65 20 46 72 61 6d 65 20 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 5d 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 Data Ascii: 74c4<!DOCTYPE html><html class="no-js" lang="en-US"><head itemscope itemtype="http://schema.org/WebSite"><meta charset="UTF-8">... Always force latest IE rendering engine (even in intranet) & Chrome Frame -->...[if IE ]><meta http-equiv="X-U
2023-12-12 20:40:12 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black">
2023-12-12 20:40:12 UTC	1369	IN	Data Raw: 65 6e 74 3d 22 61 72 74 69 63 6c 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 50 6f 6c 79 6e 6f 6d 69 61 6c 20 52 6f 6f 74 2d 66 69 6e 64 69 6e 67 20 77 69 74 68 20 74 68 65 20 4a 65 6e 6b 69 6e 73 2d 54 72 61 75 62 20 41 6c 67 6f 72 69 74 68 6d 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 4a 65 6e 6b 69 6e 73 2d 54 72 61 75 62 20 41 6c 67 6f 72 69 74 68 6d 20 69 73 20 61 20 73 74 61 6e 64 61 72 64 20 69 6e 20 74 68 65 20 66 69 65 6c 64 20 6f 66 20 6e 75 6d 65 72 69 63 61 6c 20 63 6f 6d 70 75 74 61 74 69 6f 6e 20 6f 66 20 70 6f 6c 79 6e 6f 6d 69 61 6c 20 72 6f 6f 74 73 Data Ascii: ent="article" /><meta property="og:title" content="Polynomial Root-finding with the Jenkins-Traub Algorithm" /><meta property="og:description" content="The Jenkins-Traub Algorithm is a standard in the field of numerical computation of polynomial roots
2023-12-12 20:40:12 UTC	1369	IN	Data Raw: 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 44 61 76 69 64 20 42 69 6e 6e 65 72 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 20 63 6c 61 73 73 3d 22 79 6f 61 73 74 2d 73 63 68 65 6d 61 2d 67 72 61 70 68 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 57 65 62 50 61 67 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 Data Ascii: " /><meta name="author" content="David Binner" /><meta name="twitter:card" content="summary_large_image" /><script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://mat
2023-12-12 20:40:12 UTC	1369	IN	Data Raw: 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 70 6f 6c 79 6e 6f 6d 69 61 6c 2d 72 6f 6f 74 2d 66 69 6e 64 69 6e 67 2d 77 69 74 68 2d 74 68 65 2d 6a 65 6e 6b 69 6e 73 2d 74 72 61 75 62 2d 61 6c 67 6f 72 69 74 68 6d 2f 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 73 6f 63 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 65 2f 69 72 3f 74 3d 61 6e 74 6f 6e 69 6f 63 61 6e 67 69 61 2d 32 30 26 61 6d 70 3b 6c 3d 61 73 32 26 61 6d 70 3b 6f 3d 31 26 61 6d 70 3b 61 3d 30 34 38 36 34 31 34 35 34 58 22 2c 22 63 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 73 73 6f 63 2d 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 65 2f 69 72 3f 74 3d 61 6e 74 6f 6e 69 6f 63 61 6e 67 69 61 2d 32 30 26 61 6d 70 3b 6c Data Ascii: //mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/#primaryimage","url":"https://www.assoc-amazon.com/e/ir?t=antoniocangia-20&l=as2&o=1&a=048641454X","contentUrl":"https://www.assoc-amazon.com/e/ir?t=antoniocangia-20&l
2023-12-12 20:40:12 UTC	1369	IN	Data Raw: 3d 39 36 26 64 3d 69 64 65 6e 74 69 63 6f 6e 26 72 3d 67 22 2c 22 63 61 70 74 69 6f 6e 22 3a 22 44 61 76 69 64 20 42 69 6e 6e 65 72 22 7d 2c 22 73 61 6d 65 41 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 6b 69 74 69 2e 63 61 22 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 61 75 74 68 6f 72 2f 62 69 6e 6e 65 72 2f 22 7d 5d 7d 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 21 2d 2d 20 2f 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 2e 20 2d 2d 3e 0a 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 73 63 72 69 70 74 73 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 Data Ascii: =96&d=identicon&r=g","caption":"David Binner"},"sameAs":["https://akiti.ca"],"url":"https://mathblog.com/author/binner/"}]}</script>... / Yoast SEO plugin. --><link rel='dns-prefetch' href='//scripts.mediavine.com' /><style id='classic-theme-styles
2023-12-12 20:40:12 UTC	1369	IN	Data Raw: 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 30 38 2c 31 33 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 32 2c 31 38 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c Data Ascii: adient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: l
2023-12-12 20:40:12 UTC	1369	IN	Data Raw: 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 3a 20 33 36 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 3a 20 34 32 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 32 30 3a 20 30 2e 34 34 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 33 30 3a 20 30 2e 36 37 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 34 30 3a 20 31 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 35 30 3a 20 31 2e 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 Data Ascii: nt-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing
2023-12-12 20:40:12 UTC	1369	IN	Data Raw: 3e 20 3a 77 68 65 72 65 28 3a 6e 6f 74 28 2e 61 6c 69 67 6e 6c 65 66 74 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 72 69 67 68 74 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 66 75 6c 6c 29 29 7b 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 67 6c 6f 62 61 6c 2d 2d 63 6f 6e 74 65 6e 74 2d 73 69 7a 65 29 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 77 69 64 65 7b 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 67 6c 6f 62 61 6c 2d 2d 77 69 64 65 2d 73 69 7a Data Ascii: > :where(:not(.alignleft):not(.alignright):not(.alignfull)){max-width: var(--wp--style--global--content-size);margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignwide{max-width: var(--wp--style--global--wide-siz
2023-12-12 20:40:12 UTC	1369	IN	Data Raw: 6e 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d Data Ascii: n-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.22	49823	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	448	OUT	GET /usersync?b=zem&i=1DASsxNWMH7qY1-EP1FQ&us_privacy=1--- HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:12 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:12 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.22	49852	192.184.69.167	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	800	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=6578c4bd-6486d-f7b32-08b36; d=EGkBEwHSKt-owQqPoQA
2023-12-12 20:40:12 UTC	699	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EMcBGAHSKvijDejbEKj6EA; expires=Mon, 11-Mar-2024 20:40:11 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.22	49869	34.160.19.107	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	592	OUT	GET /cm/api/openx HTTP/1.1 Host: dmp.brand-display.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:12 UTC	579	IN	HTTP/1.1 302 Found Server: nginx/1.24.0 Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 103 Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Location: https://us-u.openx.net/w/1.0/sd?id=539237773&val=985ce834-0b5c-1dd8-f7d7179d P3p: CP='This is not a P3P policy!' Set-Cookie: _knxq_=985ce834-0b5c-1dd8-f7d7179d.1702413611.0.1702413611.1702413611; Path=/; Domain=brand-display.com; Max-Age=63072000; Secure; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:12 UTC	103	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 39 32 33 37 37 37 33 26 61 6d 70 3b 76 61 6c 3d 39 38 35 63 65 38 33 34 2d 30 62 35 63 2d 31 64 64 38 2d 66 37 64 37 31 37 39 64 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://us-u.openx.net/w/1.0/sd?id=539237773&val=985ce834-0b5c-1dd8-f7d7179d">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.22	49885	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	735	OUT	GET /csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
2023-12-12 20:40:12 UTC	387	IN	HTTP/1.1 200 OK date: Tue, 12 Dec 2023 20:40:11 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:11 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.22	49851	152.199.5.184	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	698	OUT	GET /html/usersync.html?cb=https%3A%2F%2Fcs.krushmedia.com%2F462e2b5850cd99fa168d581296d0f392.gif%3Fpuid%3D%5BUSER_ID%5D HTTP/1.1 Host: ad-cdn.technoratimedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:12 UTC	887	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: * access-control-expose-headers: access-control-allow-credentials,access-control-allow-methods,access-control-allow-origin,date,etag,opc-client-info,opc-request-id,x-api-id Age: 0 cache-control: max-age=900 content-md5: jpm9v92eYnJZrYEV0creyA== Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:40:11 GMT Etag: 84d4a6e5-3860-4103-9387-92737002d50d Expires: Tue, 12 Dec 2023 20:55:11 GMT Last-Modified: Wed, 16 Aug 2023 20:56:04 GMT opc-request-id: iad-1:KCQ1aGBji1n5of4shGk-FBVkAM328fV65P1-Lfpp-Jz6hRlEAN3ZfgCIlFeYXNm2 Server: ECAcc (mic/9B3B) storage-tier: Standard Vary: Accept-Encoding version-id: ff6bccb1-2ffd-4aa2-bd14-9776592cc90b x-api-id: native X-Cache: HIT Content-Length: 17095 Connection: close
2023-12-12 20:40:12 UTC	16383	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 3e 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 36 37 36 3a 28 65 2c 74 29 3d 3e 7b 74 2e 77 72 69 74 65 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 6c 3d 31 3b 66 6f 72 28 6c 3d 31 3b 6c 3c 64 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 69 66 28 64 5b 64 2e 6c 65 6e 67 74 68 2d 6c 5d 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 22 2f 61 64 73 65 72 76 5f 22 29 3e 30 29 Data Ascii: <!doctype html><html lang="en"><head><meta charset="UTF-8"><script>(()=>{var e={676:(e,t)=>{t.writeTag=function(e,t,n,r,i,o,a){var c=document,d=document.getElementsByTagName("script"),l=1;for(l=1;l<d.length;l++){if(d[d.length-l].src.indexOf("/adserv_")>0)
2023-12-12 20:40:12 UTC	712	IN	Data Raw: 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 74 61 64 73 5f 6c 61 73 74 5f 73 79 6e 63 22 29 2c 31 30 29 2b 34 33 32 65 35 2c 28 79 3d 69 73 4e 61 4e 28 77 29 7c 7c 77 3c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 29 26 26 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 74 61 64 73 5f 6c 61 73 74 5f 73 79 6e 63 22 2c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7d 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 61 29 7b 76 61 72 20 63 2c 64 3d 65 28 74 29 3b 74 72 79 7b 66 6f 72 28 64 2e 73 28 29 3b 21 28 63 3d 64 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 76 61 72 20 6c 3d 63 2e 76 61 6c 75 65 2c 75 3d 6c 2e 69 66 72 61 6d 65 3f 22 Data Ascii: orage.getItem("tads_last_sync"),10)+432e5,(y=isNaN(w)\|\|w<(new Date).getTime())&&localStorage.setItem("tads_last_sync",(new Date).getTime().toString())}catch(e){return}!function(n,r,a){var c,d=e(t);try{for(d.s();!(c=d.n()).done;){var l=c.value,u=l.iframe?"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.22	49865	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	802	OUT	GET /sync?dsp_id=457&user_id=MzFlNmI4MzI0ZWQzZmEyNw&gdpr=&gdpr_consent=&us_privacy=1---&ssp=gumgum2&bsw_param=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:12 UTC	541	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //usersync.gumgum.com/usersync?b=bsw&i=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=&gdpr_consent=&us_privacy=1--- Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.22	49887	34.120.107.143	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	674	OUT	GET /esp?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE If-None-Match: W/"55-muGH0vcZs6k0igZH/WpVPIvDE88"
2023-12-12 20:40:12 UTC	278	IN	HTTP/1.1 304 Not Modified X-Powered-By: Express Vary: Origin Access-Control-Allow-Credentials: true ETag: W/"55-muGH0vcZs6k0igZH/WpVPIvDE88" Date: Tue, 12 Dec 2023 20:40:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.22	49859	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	1355	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=21463991&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; chkChromeAb67Sec=1; DPSync3=1703548800%3A201_263%7C1702425600%3A248%7C1702944000%3A265; SyncRTB3=1702944000%3A223_15%7C1703548800%3A231_220_21_166_3_104_13_54_250_71; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607
2023-12-12 20:40:12 UTC	961	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:40:10 GMT Content-Length: 1884 Connection: close
2023-12-12 20:40:12 UTC	1884	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 Data Ascii: PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=AE4A8C3D-1096-459A-B091-2BADD5009F5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.22	49888	54.159.220.191	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	770	OUT	GET /cookie-sync?bee_sync_partners=pp%2Csyn%2Cox&bee_sync_current_partner=sas&bee_sync_initiator=ox&bee_sync_hop_count=2&userid=2527372694113908282 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAB3wk7K8YkAABTAD88gJQ; bitoIsSecure=ok
2023-12-12 20:40:12 UTC	598	IN	HTTP/1.1 303 See Other Date: Tue, 12 Dec 2023 20:40:11 GMT location: https://bh.contextweb.com/bh/rtset?ev=AAB3wk7K8YkAABTAD88gJQ&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D2527372694113908282%26bee_sync_partners%3Dsyn%252Cox%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D3 Server: gunicorn set-cookie: bito=AAB3wk7K8YkAABTAD88gJQ; Domain=bidr.io; expires=Fri, 10 Jan 2025 15:40:11 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.22	49899	34.224.153.9	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	708	OUT	GET /api/v1/dsync/Martin?exid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
2023-12-12 20:40:12 UTC	456	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702; Path=/; Domain=kargo.com; Expires=Wed, 11 Dec 2024 20:40:11 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.22	49894	104.18.24.173	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	957	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aCnsPCO5nP87PRo7TGr724PPWXk4aGSjVaiSAdW8yDlTXIWD1lZahNKhwgeMpS4uTTHXis6VHrUHyg7Bs
2023-12-12 20:40:12 UTC	867	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:12 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aynvfMRwEfES2QVoqavnPw4nsa7hbvm5RZa9DZa8PZbYltbZbZaypJEPsyBPtmnW6v5Pn0poZaIrj3k95b1YYBYHPQoJIYVGkZap4MSWnpC7nPhgFUpjxPIaZaNZa; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:12 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aynvfMRwEfES2QVoqavnPw4nsa7hbvm5RZa9DZa8PZbYltbZbZaypJEPsyBPtmnW6v5Pn0poZaIrj3k95b1YYBYHPQoJIYVGkZap4MSWnpC7nPhgFUpjxPIaZaNZa; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:12 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8348c7f2c84d6db5-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.22	49895	54.152.252.123	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	1407	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU
2023-12-12 20:40:12 UTC	304	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:40:11 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=GH_JvDj8VjdvrBlOavHmp2aBmNQ&gdpr=0&gdpr_consent= Content-Length: 188 Connection: Close
2023-12-12 20:40:12 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 47 48 5f 4a 76 44 6a 38 56 6a 64 76 72 42 6c 4f 61 76 48 6d 70 32 61 42 6d 4e 51 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=GH_JvDj8VjdvrBlOavHmp2aBmNQ&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.22	49901	207.198.113.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	725	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc#1702413607708; _ssuma=eyIxNSI6MTcwMjQxMzYwOTUwMH0
2023-12-12 20:40:12 UTC	786	IN	HTTP/1.1 302 cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc#1702413607708; Domain=.sitescout.com; Expires=Wed, 11-Dec-2024 20:40:11 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcwMjQxMzYxMTk3OSwiMTUiOjE3MDI0MTM2MDk1MDB9; Domain=.sitescout.com; Expires=Thu, 11-Jan-2024 20:40:11 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&gdpr=0&gdpr_consent= content-length: 0 date: Tue, 12 Dec 2023 20:40:11 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.22	49870	52.22.12.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	681	OUT	GET /sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D HTTP/1.1 Host: vop.sundaysky.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:12 UTC	883	IN	HTTP/1.1 302 Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 0 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff Set-Cookie: sskyu=d6.c5bd044156be4b89a58d19d2b5fdecfd; Domain=sundaysky.com; Expires=Fri, 12-Dec-2025 20:40:11 GMT; Path=/; Secure; SameSite=None Set-Cookie: sskyCreationTime=1702413611975; Domain=sundaysky.com; Expires=Fri, 12-Dec-2025 20:40:11 GMT; Path=/; Secure; SameSite=None Expires: Sat, 1 Apr 2000 00:00:00 GMT Pragma: no-cache Cache-control: private, no-cache, no-cache=Set-Cookie, must-revalidate, proxy-revalidate, max-age=0 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa PSAa PSDa OUR IND UNI PUR COM NAV INT DEM STA PRE" Location: https://vop.sundaysky.com/sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D&_cvt=t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.22	49902	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	1395	OUT	GET /usersync/redirect?partner=pubmatic&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:12 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.22	49900	3.228.157.65	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	616	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:12 UTC	128	IN	HTTP/1.1 204 No Content Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.22	49897	52.5.77.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	899	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; matchopenx=5
2023-12-12 20:40:12 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Tue, 12 Dec 2023 20:40:11 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:ViN9mkBO1Rd9xZ5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0a10dd62e034df3f5@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; Domain=.w55c.net; Expires=Sun, 12-Jan-2025 20:40:11 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Thu, 11-Jan-2024 20:40:11 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.22	49871	44.194.38.185	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	632	OUT	GET /match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e HTTP/1.1 Host: match.justpremium.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:12 UTC	411	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: jpxumaster=um-64c1dd86-aae6-46b1-88cc-652ea3f75878-1702413611; Path=/; Domain=justpremium.com; Expires=Fri, 12 Jan 2024 20:40:11 GMT; Secure; SameSite=None Set-Cookie: jpxumatched=ox; Path=/; Domain=justpremium.com; Expires=Wed, 13 Dec 2023 20:40:11 GMT; Secure; SameSite=None
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.22	49892	192.184.69.167	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	678	OUT	GET /pixel/p-e4m3Yko6bFYVc.gif?idmatch=0 HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EBcBDQHSKoir0QA; mc=6578c4bd-6486d-f7b32-08b36
2023-12-12 20:40:12 UTC	580	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:12 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://pixel.rubiconproject.com/tap.php?v=4939&nid=1902&gdpr=0&put=wS8DG5QuVkfaLAAbwX4ZRcB4BxHaKgxBxCx2S-Bm P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=ELoBEgHSKsujC8_8EA; expires=Mon, 11-Mar-2024 20:40:11 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.22	49898	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	845	OUT	GET /w/1.0/sd?id=540245193&val=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
2023-12-12 20:40:12 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.22	49893	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	704	OUT	GET /sync?ssp=fmx&us_privacy=&gdpr=0&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:12 UTC	249	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //p.rfihub.com/cm?in=1&pub=20513&ssp=fmx&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.22	49889	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:11 UTC	1011	OUT	GET /match?bidder_id=102&ttl=1705005607&external_user_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: cms-xch-chicago.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:12 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:12 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.22	49737	64.74.236.255	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	778	OUT	GET /usersync/gumgum/?puid=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=0&gdpr_consent=&us_privacy=&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=1DASsxNWMH7qY1-EP1FQ
2023-12-12 20:40:12 UTC	521	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 103 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://usersync.gumgum.com/usersync?b=zem&i=1DASsxNWMH7qY1-EP1FQ&gdpr=0 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=1DASsxNWMH7qY1-EP1FQ; Path=/; Domain=zemanta.com; Expires=Wed, 11 Dec 2024 20:40:12 GMT; Max-Age=31536000; Secure; SameSite=None Date: Tue, 12 Dec 2023 20:40:12 GMT
2023-12-12 20:40:12 UTC	103	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 7a 65 6d 26 61 6d 70 3b 69 3d 31 44 41 53 73 78 4e 57 4d 48 37 71 59 31 2d 45 50 31 46 51 26 61 6d 70 3b 67 64 70 72 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=zem&i=1DASsxNWMH7qY1-EP1FQ&gdpr=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.22	49675	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	1007	OUT	GET /pixel?google_nid=gumgum_dbm&google_hm=dV83ZTZhM2M2ZS1lYzY0LTQyNzItYjEyYi0xZmQzZWQzYTIzN2I=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:12 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:12 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.22	49908	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	576	OUT	GET /w/1.0/sd?id=537116306&val=R35CA9_10D97F8E3_7A5609BE HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
2023-12-12 20:40:12 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:12 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.22	49911	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	1042	OUT	GET /match?bidder_id=120&external_user_id=GH_JvDj8VjdvrBlOavHmp2aBmNQ&ts=1702413610&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:12 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:12 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.22	49910	147.135.94.213	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	673	OUT	GET /api/sync?callerId=87 HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282; csync=104:LQ2T1KDU-17-IBG6
2023-12-12 20:40:12 UTC	212	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:11 GMT location: https://pixel.rubiconproject.com/tap.php?v=333994&nid=4804&put=2527372694113908282&gdpr=0&gdpr_consent= connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.22	49913	34.107.148.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	806	OUT	GET /setuid?bidder=rubicon&uid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: prebid-s2s.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3454150986930039084V10; data-mv=6120f800-992e-11ee-8a65-3f15d911ca60~~19; data-o=162ae2ad-8a3a-0601-0e07-9a67c3d39198~~3; uids=eyJ1aWRzIjp7fSwidGVtcFVJRHMiOnsicnViaWNvbiI6eyJ1aWQiOiJMUTJUMUtEVS0xNy1JQkc2IiwiZXhwaXJlcyI6IjIwMjMtMTItMjZUMjA6NDA6MDkuNTQ0MDYxNzI2WiJ9fSwiYmRheSI6IjIwMjMtMTItMTJUMjA6NDA6MDkuNTQzMjg4NTE2WiIsImhvc3RfdWlkcyI6eyJtZWRpYW5ldCI6eyJ1aWQiOiIzNDU0MTUwOTg2OTMwMDM5MDg0VjEwIn19fQ==
2023-12-12 20:40:12 UTC	733	IN	HTTP/1.1 200 OK cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 set-cookie: uids=eyJ1aWRzIjp7fSwidGVtcFVJRHMiOnsicnViaWNvbiI6eyJ1aWQiOiJMUTJUMUtEVS0xNy1JQkc2IiwiZXhwaXJlcyI6IjIwMjMtMTItMjZUMjA6NDA6MTIuNTE1NDI1MjUyWiJ9fSwiYmRheSI6IjIwMjMtMTItMTJUMjA6NDA6MDkuNTQzMjg4NTE2WiIsImhvc3RfdWlkcyI6eyJtZWRpYW5ldCI6eyJ1aWQiOiIzNDU0MTUwOTg2OTMwMDM5MDg0VjEwIn19fQ==; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:12 GMT; Path=/; Secure; SameSite=None content-type: image/png Content-Length: 86 x-envoy-upstream-service-time: 3 date: Tue, 12 Dec 2023 20:40:12 GMT server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: clear Connection: close
2023-12-12 20:40:12 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.22	49912	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	1428	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=4229144&p=156212&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; DPSync3=1702944000%3A265%7C1703548800%3A262_261_260_259_201_263%7C1702425600%3A248; SyncRTB3=1703548800%3A3_104_13_54_250_22_48_5_176_231_220_21_178_8_165_240_166_71_55_233%7C1703203200%3A63%7C1702944000%3A223_15_2
2023-12-12 20:40:12 UTC	1108	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156212:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1703548800%3A262_261_201_263_256_260_259_258%7C1703376000%3A257%7C1702425600%3A255_248%7C1702944000%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1703635200%3A35%7C1707523200%3A69%7C1704931200%3A224%7C1703548800%3A250_240_233_7_165_96_214_54_176_56_13_220_21_166_46_99_3_249_243_81_48_231_178_71_55_5_264_104_22_8_234_238%7C1703203200%3A63%7C1702944000%3A223_38_15_2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:40:10 GMT Transfer-Encoding: chunked Connection: close
2023-12-12 20:40:12 UTC	3380	IN	Data Raw: 64 32 38 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e Data Ascii: d28PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.22	49909	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	1434	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=33525283&p=137711&s=137812&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; DPSync3=1702944000%3A265%7C1703548800%3A262_261_260_259_201_263%7C1702425600%3A248; SyncRTB3=1703548800%3A3_104_13_54_250_22_48_5_176_231_220_21_178_8_165_240_166_71_55_233%7C1703203200%3A63%7C1702944000%3A223_15_2
2023-12-12 20:40:12 UTC	1108	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=137711:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1703548800%3A258_256_262_260_259_263_261_201%7C1703376000%3A257%7C1702425600%3A255_248%7C1702944000%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1703548800%3A54_165_71_46_234_240_96_238_3_104_22_176_178_249_231_220_7_243_81_48_5_166_13_250_264_56_8_55_233_214_99_21%7C1703203200%3A63%7C1702944000%3A15_2_38_223%7C1703635200%3A35%7C1704931200%3A224%7C1707523200%3A69; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:40:11 GMT Transfer-Encoding: chunked Connection: close
2023-12-12 20:40:12 UTC	3379	IN	Data Raw: 64 32 37 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e Data Ascii: d27PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.22	49915	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	819	OUT	GET /merge?pid=83&3pid=LQ2T1KDU-17-IBG6&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
2023-12-12 20:40:12 UTC	921	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:12 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:12 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.22	49921	34.96.105.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	592	OUT	GET /v1/api/sync/openx HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:12 UTC	277	IN	HTTP/1.1 204 No Content Set-Cookie: b=6578C52C4BC40314243CDFDBBLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Date: Tue, 12 Dec 2023 20:40:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.22	49922	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	704	OUT	GET /usersync2/rmpssp?sub=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
2023-12-12 20:40:12 UTC	644	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:12 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22zdxidn%22%3A%222069.80%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Wed, 11 Dec 2024 20:40:12 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=573273228 etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:40:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.22	49923	35.194.66.159	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	661	OUT	GET /lj_match?r=1702413607293&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=EAF92472013E4E6D9A751C1DA567BFFF
2023-12-12 20:40:12 UTC	623	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Tue, 12 Dec 2023 20:40:12 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://ce.lijit.com/merge?pid=2&3pid=EAF92472013E4E6D9A751C1DA567BFFF Expires: Mon, 11 Dec 2023 20:40:12 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2023-12-12 20:40:12 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.22	49924	198.148.27.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	839	OUT	GET /bh/rtset?pid=560687&ev=1&rurl=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D390200%26nid%3D5120%26put%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=4trFhcvjylTg; INGRESSCOOKIE=185d6ef7c41ed78f; pb_rtb_ev=3-1oif\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60\|7bq.0.1
2023-12-12 20:40:12 UTC	745	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-5c6449b65-gvtwm Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=4trFhcvjylTg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 06-Dec-2024 20:40:12 GMT;Max-Age=31104000;SameSite=None Location: https://pixel.rubiconproject.com/tap.php?v=390200&nid=5120&put=4trFhcvjylTg&ev=1&pid=560687 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.22	49918	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	834	OUT	GET /merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
2023-12-12 20:40:12 UTC	941	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:12 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:12 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:12 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.22	49920	185.184.8.90	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	781	OUT	GET /cm-notify?pi=gumgum HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
2023-12-12 20:40:13 UTC	397	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:12 GMT vary: Accept-Encoding location: https://usersync.gumgum.com/usersync?b=rth&i=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=gumgum cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Tue, 12 Dec 2023 20:40:12 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.22	49906	38.98.69.175	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	697	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000000000000000000000000000006578C527
2023-12-12 20:40:12 UTC	674	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA9_10D97F8E3_7A5609BE&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000006578C52C00000000000000006578C527; domain=mxptint.net; expires=Fri, 12-Dec-2025 20:40:12 GMT; path=/; secure; SameSite=None Date: Tue, 12 Dec 2023 20:40:12 GMT Connection: close Content-Length: 302 Strict-Transport-Security: max-age=-385418412; includeSubDomains
2023-12-12 20:40:12 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 33 35 43 41 39 5f 31 30 44 39 37 46 38 45 33 5f 37 41 35 36 30 39 42 45 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA9_10D97F8E3_7A5609BE&r=https://pmp.mxptint.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.22	49925	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	845	OUT	GET /w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
2023-12-12 20:40:12 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:12 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.22	49905	52.70.186.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	649	OUT	GET /sync?pid=187&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:12 UTC	420	IN	HTTP/1.1 204 Date: Tue, 12 Dec 2023 20:40:12 GMT Set-Cookie: __187_cid=AE4A8C3D-1096-459A-B091-2BADD5009F52; Domain=.bfmio.com; Max-Age=31536000; Expires=Wed, 11-Dec-2024 15:40:12 GMT-0500; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=6f54e29a2cf4381430cb3046bc8bbacac4a01845; Domain=.bfmio.com; Max-Age=31536000; Expires=Wed, 11-Dec-2024 15:40:12 GMT-0500; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.22	49904	52.71.16.59	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	660	OUT	GET /insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:12 UTC	570	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=962260ae-2017-4479-84d2-c2601faa687e P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6Ijk2MjI2MGFlLTIwMTctNDQ3OS04NGQyLWMyNjAxZmFhNjg3ZSIsImwiOjE3MDI0MTM2MTI4ODMsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Tue, 12 Dec 2023 20:40:12 GMT; Max-Age=17280000; Secure; SameSite=None
2023-12-12 20:40:12 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 39 36 32 32 36 30 61 65 2d 32 30 31 37 2d 34 34 37 39 2d 38 34 64 32 2d 63 32 36 30 31 66 61 61 36 38 37 65 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=962260ae-2017-4479-84d2-c2601faa687e">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.22	49903	3.213.9.240	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	817	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:12 UTC	337	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:12 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=a4552c04-658f-4c5b-8dc8-e09b6c6982fb&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.22	49914	159.89.246.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	626	OUT	GET /usersync?cn=5529&ttt=1&dpui=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: e.serverbid.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:12 UTC	531	IN	HTTP/1.1 200 OK access-control-allow-origin: https://eus.rubiconproject.com access-control-allow-credentials: true access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 content-type: image/gif content-length: 35 set-cookie: CONSUMABLEID=91f8c9c066e5450eb8c9c066e5650ed1; Max-Age=1296000; Expires=Wed, 27 Dec 2023 20:40:12 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 12 Dec 2023 20:40:12 GMT connection: close
2023-12-12 20:40:12 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.22	49929	104.18.24.173	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	843	OUT	GET /i.match?p=b10&u={rubicon_user_token}&redirect=https%3A//pixel.rubiconproject.com/tap.php%3Fv%3D111756%26nid%3D3856%26put%3D%24TF_USER_ID_ENC%24%26expires%3D180 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aCnsPCO5nP87PRo7TGr724PPWXk4aGSjVaiSAdW8yDlTXIWD1lZahNKhwgeMpS4uTTHXis6VHrUHyg7Bs
2023-12-12 20:40:13 UTC	833	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=a9nuvns2aF8pAJsbX5nRXGVpxK9ZcAHV40njQiWXp3MybMr5ZdZaUZcJ0ugLhx6ZcoK6m93Zavh7NSEe9wHIRZdZahlR2FXkulWEbUaJLlBH; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:12 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=a9nuvns2aF8pAJsbX5nRXGVpxK9ZcAHV40njQiWXp3MybMr5ZdZaUZcJ0ugLhx6ZcoK6m93Zavh7NSEe9wHIRZdZahlR2FXkulWEbUaJLlBH; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:12 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8348c7f8c9e631e4-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.22	49926	147.135.94.213	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	644	OUT	GET /api/sync?callerId=81&gdpr=0 HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282
2023-12-12 20:40:13 UTC	195	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:12 GMT location: https://u.openx.net/w/1.0/sd?id=540394477&val=2527372694113908282&gdpr=0&gdpr_consent= connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.22	49934	54.152.252.123	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	1301	OUT	GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU
2023-12-12 20:40:13 UTC	253	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:40:13 GMT Location: https://usersync.gumgum.com/usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212 Content-Length: 129 Connection: Close
2023-12-12 20:40:13 UTC	129	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 73 74 61 26 61 6d 70 3b 69 3d 30 2d 31 38 37 66 63 39 62 63 2d 33 38 66 63 2d 35 36 33 37 2d 36 66 61 63 2d 31 39 34 65 36 61 66 31 65 36 61 37 24 69 70 24 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 31 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.22	49941	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	921	OUT	GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
2023-12-12 20:40:13 UTC	556	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:13 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://usersync.gumgum.com/usersync?b=opx&i=293b2f42-092f-04b7-0a33-f4e4b96c0202 Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.22	49930	54.159.220.191	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	665	OUT	GET /cookie-sync/svr?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAB3wk7K8YkAABTAD88gJQ; bitoIsSecure=ok
2023-12-12 20:40:13 UTC	389	IN	HTTP/1.1 303 See Other Date: Tue, 12 Dec 2023 20:40:13 GMT location: https://ce.lijit.com/merge?3pid=AAB3wk7K8YkAABTAD88gJQ&pid=85&gdpr=0 Server: gunicorn set-cookie: bito=AAB3wk7K8YkAABTAD88gJQ; Domain=bidr.io; expires=Fri, 10 Jan 2025 15:40:13 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.22	49949	35.244.216.234	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	704	OUT	GET /bid-engine/cs/377c7998bb9f42e5aea0416c9dac091f/v1?rd=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537146931%26val%3D%24UID HTTP/1.1 Host: openx.adhaven.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:13 UTC	393	IN	HTTP/1.1 302 Found Set-Cookie: uid=4c_dda4d101-97ce-4817-beb8-0a826215ec0d;path=/;Max-Age=315360000;Domain=adhaven.com;SameSite=None;Secure Location: https://us-u.openx.net/w/1.0/sd?id=537146931&val=4c_dda4d101-97ce-4817-beb8-0a826215ec0d Content-Length: 0 Date: Tue, 12 Dec 2023 20:40:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.22	49928	52.202.38.96	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	642	OUT	GET /v1/setuid?bidder=rubicon&gdpr=&gdpr_consent=&uid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: sync.ex.co Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:13 UTC	454	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:12 GMT Content-Type: image/png Content-Length: 86 Connection: close Vary: Origin Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Set-Cookie: exco-uids={"rubicon":{"UID":"LQ2T1KDU-17-IBG6","Expire":"2023-12-19T20:40:12.960959886Z"}}; Expires=2024-03-11 20:40:12.960973527 +0000 UTC m=+7855643.774612260; Domain=.ex.co; Path=/; HTTPOnly; SameSite=None; Secure=true; Partitioned;
2023-12-12 20:40:13 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.22	49933	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	809	OUT	GET /w/1.0/sd?id=537123500&val=863968679737 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
2023-12-12 20:40:13 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.22	49931	68.67.160.184	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	666	OUT	GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353
2023-12-12 20:40:13 UTC	1009	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://usersync.gumgum.com/usersync?b=apn&i=2638779048715878353 AN-X-Request-Uuid: c5f75ed1-0f2c-4dad-9f07-e7efa912866d Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:13 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 669.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.22	49944	169.197.150.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	793	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_1296d48b0e654caba2d72; CDIPARTNERS=%7B%221%22%3A%2220231212%22%2C%22142%22%3A%2220231212%22%7D
2023-12-12 20:40:13 UTC	645	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://usersync.gumgum.com/usersync?b=dit&i=di_1296d48b0e654caba2d72 set-cookie: CDIUSER=di_1296d48b0e654caba2d72; Max-Age=47260800; SameSite=None; Expires=Wed, 11 Jun 2025 20:40:13 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220231212%22%2C%22142%22%3A%2220231212%22%7D; Max-Age=47260800; SameSite=None; Expires=Wed, 11 Jun 2025 20:40:13 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Tue, 12 Dec 2023 20:40:12 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.22	49935	44.207.23.148	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	717	OUT	GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
2023-12-12 20:40:13 UTC	852	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Length: 0 Connection: close Location: https://usersync.gumgum.com/usersync?b=oth&i=y-i5Vemz9E2pcAB3qsj5sq4a92wTUal4GhEbBQ~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; Expires=Thu, 12 Dec 2024 02:40:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.22	49940	34.98.64.218	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	823	OUT	GET /w/1.0/sd?id=540394477&val=2527372694113908282&gdpr=0&gdpr_consent= HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
2023-12-12 20:40:13 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.22	49943	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	1565	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; DPSync3=1702944000%3A265%7C1703548800%3A262_261_260_259_201_263%7C1702425600%3A248; SyncRTB3=1703548800%3A3_104_13_54_250_22_48_5_176_231_220_21_178_8_165_240_166_71_55_233%7C1703203200%3A63%7C1702944000%3A223_15_2
2023-12-12 20:40:13 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:13 GMT; path=/ Set-Cookie: PugT=1702413613; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:13 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.22	49945	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:12 UTC	1432	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=2289741&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; DPSync3=1702944000%3A265%7C1703548800%3A262_261_260_259_201_263%7C1702425600%3A248; SyncRTB3=1703548800%3A3_104_13_54_250_22_48_5_176_231_220_21_178_8_165_240_166_71_55_233%7C1703203200%3A63%7C1702944000%3A223_15_2
2023-12-12 20:40:13 UTC	1080	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157108:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1702425600%3A248_255%7C1703548800%3A262_261_201_263_258_256_260_259%7C1703376000%3A257%7C1702944000%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1703635200%3A35%7C1703548800%3A166_55_104_220_176_231_21_240_249_7_250_71_264_56_13_48_54_22_178_233_46_214_3_8_165_234_99_5_96_238%7C1702944000%3A15_223_2%7C1704931200%3A224%7C1703203200%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:40:13 GMT Transfer-Encoding: chunked Connection: close
2023-12-12 20:40:13 UTC	2587	IN	Data Raw: 61 30 66 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e Data Ascii: a0fPubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.22	49951	44.194.38.185	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	643	OUT	GET /match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e HTTP/1.1 Host: match.justpremium.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:13 UTC	411	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: jpxumaster=um-4f6d4c28-27ff-4d51-8e1b-7edc0c421f1c-1702413613; Path=/; Domain=justpremium.com; Expires=Fri, 12 Jan 2024 20:40:13 GMT; Secure; SameSite=None Set-Cookie: jpxumatched=ox; Path=/; Domain=justpremium.com; Expires=Wed, 13 Dec 2023 20:40:13 GMT; Secure; SameSite=None
2023-12-12 20:40:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.22	49938	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	844	OUT	GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASACKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC
2023-12-12 20:40:13 UTC	508	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Length: 193 Connection: close server: Kestrel location: https://usersync.gumgum.com/usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:13 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwiy2oLYqNe9PBAFOAFaBmd1bWd1bWAC; expires=Thu, 12 Dec 2024 20:40:13 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:13 UTC	193	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 3e 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://usersync.gumgum.com/usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec">https://usersync.gumgum.com/usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.22	49936	54.162.157.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	827	OUT	GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=8a323469-881a-408a-9858-5975924b765a\|1702413502774
2023-12-12 20:40:13 UTC	460	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:40:13 GMT Location: https://usersync.gumgum.com/usersync?b=vnt&i=8a323469-881a-408a-9858-5975924b765a Set-Cookie: cu=8a323469-881a-408a-9858-5975924b765a\|1702413502774; Path=/; Domain=ipredictive.com; Expires=Wed, 11 Dec 2024 20:40:13 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 73087964-e92f-45aa-b87d-91f2ab51906e Content-Length: 108 Connection: Close
2023-12-12 20:40:13 UTC	108	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 76 6e 74 26 61 6d 70 3b 69 3d 38 61 33 32 33 34 36 39 2d 38 38 31 61 2d 34 30 38 61 2d 39 38 35 38 2d 35 39 37 35 39 32 34 62 37 36 35 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=vnt&i=8a323469-881a-408a-9858-5975924b765a">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.22	49932	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	757	OUT	GET /sync?ssp=gumgum2&user_id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:13 UTC	271	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //t.pswec.com/bsw_sync?ssp=gumgum2&bsw_user_id=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.22	49950	52.22.12.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	692	OUT	GET /sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D HTTP/1.1 Host: vop.sundaysky.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:13 UTC	883	IN	HTTP/1.1 302 Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif Content-Length: 0 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff Set-Cookie: sskyu=d6.cb2a566f56b14ad2b1bbf49c9d4a236a; Domain=sundaysky.com; Expires=Fri, 12-Dec-2025 20:40:13 GMT; Path=/; Secure; SameSite=None Set-Cookie: sskyCreationTime=1702413613237; Domain=sundaysky.com; Expires=Fri, 12-Dec-2025 20:40:13 GMT; Path=/; Secure; SameSite=None Expires: Sat, 1 Apr 2000 00:00:00 GMT Pragma: no-cache Cache-control: private, no-cache, no-cache=Set-Cookie, must-revalidate, proxy-revalidate, max-age=0 P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa TAIa PSAa PSDa OUR IND UNI PUR COM NAV INT DEM STA PRE" Location: https://vop.sundaysky.com/sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D&_cvt=t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.22	49946	134.122.57.34	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	605	OUT	GET /rubiconmatch HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:13 UTC	477	IN	HTTP/1.1 302 302 Date: Tue, 12 Dec 2023 20:40:13 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=bcb09ff6-3151-4b08-8f0d-11bcba91496e.471627613; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://pixel.rubiconproject.com/tap.php?v=17039&nid=2650&days=30&gdpr=&gdpr_consent=&put=bcb09ff6-3151-4b08-8f0d-11bcba91496e Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.22	49947	23.105.12.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	759	OUT	GET /getuid?gdpr=0&url=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D32128%26nid%3D2915%26put%3D[sas_uid] HTTP/1.1 Host: sync.smartadserver.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282; csync=104:LQ2T1KDU-17-IBG6
2023-12-12 20:40:13 UTC	742	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:12 GMT cache-control: no-cache,no-store location: https://sync.smartadserver.com:443/getuid?gdpr=0&url=https://pixel.rubiconproject.com/tap.php?v=32128&nid=2915&put=[sas_uid]&cklb=1 pragma: no-cache set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/; SameSite=None; secure set-cookie: TestIfCookieP=ok; expires=Thu, 12 Dec 2024 20:40:13 GMT; domain=.smartadserver.com; path=/; SameSite=None; secure set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Thu, 12 Dec 2024 20:40:13 GMT; domain=.smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.22	49955	8.28.7.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	1348	OUT	GET /AdServer/SPug?partnerID=157108&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63
2023-12-12 20:40:13 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:13 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1702413613; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:13 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.22	49956	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	1194	OUT	GET /dsp/google/cookiematch/beacon?gdpr=0&gdpr_consent= HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; ljtrtb=eJyrVrI0V7JSCorQTUm2SDRJNTPTNTayMNI1MUgz1020MDXXTTY0NzNJSQFKGifpGhiYKtUCAFmVDRE%3D
2023-12-12 20:40:13 UTC	528	IN	HTTP/1.1 302 Found Connection: close Date: Tue, 12 Dec 2023 20:40:13 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_hm=SHozMmhMWkhCRkt4czN4clFVcXJ3MFFi&gdpr=0 Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type X-Sovrn-Pod: ad_ap2dca1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.22	49942	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	1992	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%252C%252C%25257B%252522architecture%252522%25253A%252522x86%252522%25252C%252522bitness%252522%25253A%25252264%252522%25252C%252522brands%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Not_A%252BBrand%252522%25252C%252522version%252522%25253A%25252299%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Google%252BChrome%252522%25252C%252522version%252522%25253A%252522109%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522109%252522%25257D%25255D%25252C%252522fullVersionList%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Not_A%252BBrand%252522%25252C%252522version%252522%25253A%25252299.0.0.0%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Google%252BChrome%252522%25252C%252522version%252522%25253A%252522109.0.5414.120%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522109.0.5414.120%252522%25257D%25255D%25252C%252522mobile%252522%25253Afalse%25252C%252522model%252522%25253A%252522%252522%25252C%252522platform%252522%25253A%252522Windows%252522%25252C%252522platformVersion%252522%25253A%2525220.1.0%252522%25257D&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pandg.tapad.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASACKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC
2023-12-12 20:40:13 UTC	1549	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Length: 2217 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%2522%253A%252264%2522%252C%2522brands%2522%253A%255B%257B%2522brand%2522%253A%2522Not_A%2BBrand%2522%252C%2522version%2522%253A%252299%2522%257D%252C%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522109%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522109%2522%257D%255D%252C%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Not_A%2BBrand%2522%252C%2522version%2522%253A%252299.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522109.0.5414.120%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522109.0.5414.120%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%25220.1.0%2522%257D set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:13 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFAoFdGFwYWQSCwja6vytkte9PBAFGAEgASgCMgsImt7_2qjXvTwQBTgBWgV0YXBhZGAC; expires=Thu, 12 Dec 2024 20:40:13 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:13 UTC	2217	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 26 74 74 64 5f 70 75 69 64 3d 65 33 31 62 38 65 30 65 2d 62 65 61 32 2d 34 39 35 66 2d 38 64 32 37 2d 63 32 32 37 65 65 38 32 65 30 35 34 25 32 43 25 32 43 25 32 35 37 42 25 32 35 32 32 61 72 63 68 69 74 65 63 74 75 72 65 25 32 35 32 32 25 32 35 33 41 25 32 35 32 32 78 38 36 25 32 35 32 32 25 32 35 32 43 25 32 35 32 32 62 69 74 6e 65 73 73 25 32 35 32 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%252

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.22	49939	185.184.8.90	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	684	OUT	GET /cm-notify?pi=openx&gdpr=0 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
2023-12-12 20:40:13 UTC	407	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:13 GMT vary: Accept-Encoding location: https://us-u.openx.net/w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Tue, 12 Dec 2023 20:40:13 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.22	49958	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	1578	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:ViN9mkBO1Rd9xZ5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63; KTPCACOOKIE=YES
2023-12-12 20:40:13 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:13 GMT; path=/ Set-Cookie: PugT=1702413613; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:13 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.22	49957	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	1586	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=GH_JvDj8VjdvrBlOavHmp2aBmNQ&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63; KTPCACOOKIE=YES
2023-12-12 20:40:13 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 10:54:36 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 10:54:36 GMT; path=/ Set-Cookie: PugT=1702378476; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 10:54:36 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.22	49954	44.215.52.44	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	842	OUT	GET /web/cookie/bidswitch/sync?bidswitch_ssp_id=pubmatic&bsw_custom_parameter=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: sonata-notifications.taptapnetworks.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:13 UTC	532	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif Content-Length: 45 Connection: close Server: nginx/1.18.0 (Ubuntu) Content-Disposition: inline Location: https://x.bidswitch.net/sync?dsp_id=413&ssp=pubmatic&user_id=csonata_94d142a2-4bcb-4451-b722-a4d0cfefee3f&bsw_param=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&expires=10&gdpr=0&gdpr_consent=&gdpr_pd= Set-Cookie: SONATA_ID=csonata_94d142a2-4bcb-4451-b722-a4d0cfefee3f; Domain=taptapnetworks.com; Path=/; Max-Age=31536000; SameSite=None; Secure
2023-12-12 20:40:13 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.22	49953	3.93.99.238	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	992	OUT	GET /qmap?c=1389&tp=STSC&tpid=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%26partner_url%3Dhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D16%25263pid%253D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:13 UTC	795	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.59.201 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%26partner_url%3Dhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D16%25263pid%253D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%2526gdpr%253D0%2526gdpr_consent%253D&ct=y Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.22	49864	104.21.64.214	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	2191	OUT	GET / HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413595.0.0.0; _ga=GA1.1.1980800170.1702413486; mediavine_session={%22depth%22:3%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}; cto_bundle=onR1gl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkxFZWp5Sjh0THdhV3h6Z09Lalc5T1V3cSUyRkRvanhXekdLTGJCS1F4THRWcTdHZTBUQnlEZUlqeDhaZEdGJTJCcm1NRnVjUWM5Vko2elZzRzI0dGlnalduWVpUYUVlelR5JTJGRGVPZWhGNm5uMmFsVmpBZ2JFWEtWNXRudE9BJTJCemxDOHl3JTNEJTNE; cto_bidid=p16MSF8lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNSDBWeTgwSCUyQkdMZDExa2N4RXliT245VXpHQzJnbUxpcUJWaVl6UWZlNm5NJTNE; TAPAD=%7B%22id%22%3A%226bba3ea6-2fb6-4f4c-a1fa-4873c1b3a0ff%22%7D
2023-12-12 20:40:13 UTC	973	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close content-security-policy: block-all-mixed-content vary: Accept-Encoding, Cookie last-modified: Tue, 12 Dec 2023 20:17:50 GMT x-presslabs-stats: HIT; 0.100s; 2 queries; desktop; ttl 3600s; refresh in 2257s x-request-id: 03a14ac0e9e49201f199d62613fd4ea1 strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JS5GLr9WFlaO8uG4m6Kw37Djuy1SJ3z5IlGwxWnn1towZP1DTAf1%2BgfUqiomqCbuPVaWKdUxlE%2FLLT3NECkYuXp6G0h8RwM0BUNey4KmpFJgfZD769H4ecB41YrDoOQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c7fc0a878dd6-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:13 UTC	396	IN	Data Raw: 37 35 38 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 53 69 74 65 22 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 20 41 6c 77 61 79 73 20 66 6f 72 63 65 20 6c 61 74 65 73 74 20 49 45 20 72 65 6e 64 65 72 69 6e 67 20 65 6e 67 69 6e 65 20 28 65 76 65 6e 20 69 6e 20 69 6e 74 72 61 6e 65 74 29 20 26 20 43 68 72 6f 6d 65 20 46 72 61 6d 65 20 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 5d 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 Data Ascii: 7584<!DOCTYPE html><html class="no-js" lang="en-US"><head itemscope itemtype="http://schema.org/WebSite"><meta charset="UTF-8">... Always force latest IE rendering engine (even in intranet) & Chrome Frame -->...[if IE ]><meta http-equiv="X-U
2023-12-12 20:40:13 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 79 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 62 6c 61 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 Data Ascii: <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-style" content="black">
2023-12-12 20:40:13 UTC	1369	IN	Data Raw: 65 62 73 69 74 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 42 6c 6f 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 65 6d 61 74 69 63 73 20 69 73 20 77 6f 6e 64 65 72 66 75 6c 21 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 61 74 68 42 6c 6f 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d Data Ascii: ebsite" /><meta property="og:title" content="MathBlog" /><meta property="og:description" content="Mathematics is wonderful!" /><meta property="og:url" content="https://mathblog.com/" /><meta property="og:site_name" content="MathBlog" /><meta nam
2023-12-12 20:40:13 UTC	1369	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 69 6c 65 5f 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 32 33 Data Ascii: /! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#323
2023-12-12 20:40:13 UTC	1369	IN	Data Raw: 2c 31 30 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 28 32 30 37 2c 34 36 2c 34 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 30 25 2c 72 67 62 28 31 Data Ascii: ,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(1
2023-12-12 20:40:13 UTC	1369	IN	Data Raw: 61 63 69 6e 67 2d 2d 37 30 3a 20 33 2e 33 38 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 38 30 3a 20 35 2e 30 36 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 6e 61 74 75 72 61 6c 3a 20 36 70 78 20 36 70 78 20 39 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 64 65 65 70 3a 20 31 32 70 78 20 31 32 70 78 20 35 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 73 68 61 72 70 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 Data Ascii: acing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--sha
2023-12-12 20:40:13 UTC	1369	IN	Data Raw: 61 79 3a 20 66 6c 65 78 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 7b 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 20 3e 20 2a 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 7b 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 20 3e 20 2a 7b 6d 61 72 67 69 6e 3a 20 30 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d Data Ascii: ay: flex;}body .is-layout-flex{flex-wrap: wrap;align-items: center;}body .is-layout-flex > {margin: 0;}body .is-layout-grid{display: grid;}body .is-layout-grid > {margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-
2023-12-12 20:40:13 UTC	1369	IN	Data Raw: 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 Data Ascii: preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-b
2023-12-12 20:40:13 UTC	1369	IN	Data Raw: 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f Data Ascii: et--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-colo
2023-12-12 20:40:13 UTC	1369	IN	Data Raw: 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 Data Ascii: t--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.22	49973	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	792	OUT	GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:13 UTC	685	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://eb2.3lift.com/xuid?mid=5989&xuid=CAESELGMgy-6umwNbd3_g9x-rnA&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 Date: Tue, 12 Dec 2023 20:40:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 332 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:13 UTC	332	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 35 39 38 39 26 61 6d 70 3b 78 75 69 64 3d 43 41 45 53 45 4c 47 4d 67 79 2d 36 75 6d 77 4e 62 64 33 5f 67 39 78 2d 72 6e 41 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 63 36 32 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://eb2.3lift.com/xuid?mid=5989&xuid=CAESELGMgy-6umwNbd3_g9x-rnA&dongle=c62

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.22	49989	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	788	OUT	GET /usersync?b=pbm&i=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:14 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.22	49969	52.22.12.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	771	OUT	GET /sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D&_cvt=t HTTP/1.1 Host: vop.sundaysky.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sskyu=d6.c5bd044156be4b89a58d19d2b5fdecfd; sskyCreationTime=1702413611975
2023-12-12 20:40:14 UTC	704	IN	HTTP/1.1 302 Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Length: 0 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff Set-Cookie: sskyu=d6.c5bd044156be4b89a58d19d2b5fdecfd; Domain=sundaysky.com; Expires=Fri, 12-Dec-2025 20:40:13 GMT; Path=/; Secure; SameSite=None Set-Cookie: sskyCreationTime=1702413611975; Domain=sundaysky.com; Expires=Fri, 12-Dec-2025 20:40:13 GMT; Path=/; Secure; SameSite=None Set-Cookie: sskya="e294Ont0czoiNDVibzMxIix0OiJuaSJ9fQ=="; Version=1; Domain=sundaysky.com; Max-Age=604800; Expires=Tue, 19-Dec-2023 20:40:13 GMT; Path=/; Secure; SameSite=None Location: https://us-u.openx.net/w/1.0/sd?id=540290843&val=d6.c5bd044156be4b89a58d19d2b5fdecfd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.22	49962	18.173.219.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	834	OUT	GET /b?c1=2&c2=27053452&cs_it=b8&cv=4.0.0%2B2301240627&ns__t=1702413604442&ns_c=UTF-8&c7=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&c8=Polynomial%20Root-finding%20with%20the%20Jenkins-Traub%20Algorithm&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:14 UTC	738	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Tue, 12 Dec 2023 20:40:13 GMT Location: /b2?c1=2&c2=27053452&cs_it=b8&cv=4.0.0%2B2301240627&ns__t=1702413604442&ns_c=UTF-8&c7=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&c8=Polynomial%20Root-finding%20with%20the%20Jenkins-Traub%20Algorithm&c9= set-cookie: UID=199cfdd76753ef1245eedde1702413613; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 6c1e463b1907685097cce9e63f1cf75a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: Srddj6jh3Urt2gxqeDdqgSDlJyZ5PJ5eeZAFOXvviNAgKfpxUG04PQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.22	49963	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	1435	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=66226892&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63
2023-12-12 20:40:14 UTC	1073	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157108:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1703548800%3A259_256_260_201_263_262_261_258%7C1703376000%3A257%7C1702425600%3A248_255%7C1702944000%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1703548800%3A166_240_231_8_5_264_249_104_48_13_178_46_96_22_56_233_220_71_21_3_176_55_234_214_7_165_54_250%7C1704931200%3A224%7C1702944000%3A15_2_223%7C1703635200%3A35%7C1703203200%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:40:12 GMT Transfer-Encoding: chunked Connection: close
2023-12-12 20:40:14 UTC	2830	IN	Data Raw: 62 30 32 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e Data Ascii: b02PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.22	49979	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	1557	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=a54b90ee-992e-11ee-aedd-513fc3dc3f08 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63
2023-12-12 20:40:14 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:07:30 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:07:30 GMT; path=/ Set-Cookie: PugT=1702379250; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:07:30 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.22	49996	104.18.24.173	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	1001	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aynvfMRwEfES2QVoqavnPw4nsa7hbvm5RZa9DZa8PZbYltbZbZaypJEPsyBPtmnW6v5Pn0poZaIrj3k95b1YYBYHPQoJIYVGkZap4MSWnpC7nPhgFUpjxPIaZaNZa
2023-12-12 20:40:14 UTC	859	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aunvfMwl6h7bQQwbPCqU6Q5QLbay3OmZbhwaba7V3nSvFMP0BZbu5pyOSUE8UUb13P90q4engNovUG9a2tjs2RLbCLwfjgwxMGw8SFeETHqZaSZaMqjTasZaF; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:14 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aunvfMwl6h7bQQwbPCqU6Q5QLbay3OmZbhwaba7V3nSvFMP0BZbu5pyOSUE8UUb13P90q4engNovUG9a2tjs2RLbCLwfjgwxMGw8SFeETHqZaSZaMqjTasZaF; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:14 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8348c7ff8b1bdb1d-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.22	49968	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	814	OUT	GET /w/1.0/pd?plm=3&ph=b9be4168-e450-46a9-a2f2-8e12fc5e4de6 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
2023-12-12 20:40:14 UTC	779	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:13 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD; Version=1; Expires=Wed, 27-Dec-2023 20:40:13 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://match.deepintent.com/usersync/108/ Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.22	49987	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	803	OUT	GET /usersync?b=rth&i=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=gumgum HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:14 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.22	49988	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	786	OUT	GET /usersync?b=ttd&i=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:14 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.22	49967	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	836	OUT	GET /w/1.0/sd?id=537146931&val=4c_0f2fd50c-4ce9-46bf-8fbf-4c75ac6b55dc HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
2023-12-12 20:40:14 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.22	49998	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	813	OUT	GET /w/1.0/sd?id=539237773&val=985ce834-0b5c-1dd8-f7d7179d HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
2023-12-12 20:40:14 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.22	49975	44.207.23.148	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	743	OUT	GET /sync/triplelift/3571062816453612499566?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU
2023-12-12 20:40:14 UTC	868	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Length: 0 Connection: close Location: https://eb2.3lift.com/xuid?mid=2662&xuid=y-JtLdWKpE2oRwLcdqEbEx_EYBPzStLf6GdRvCJtyUOA--~A&dongle=0883 Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; Expires=Thu, 12 Dec 2024 02:40:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.22	49984	192.184.69.167	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	799	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=6578c4bd-6486d-f7b32-08b36; d=ELoBEgHSKsujC8_8EA
2023-12-12 20:40:15 UTC	697	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EAgBFQHSKvijDCC8_8EA; expires=Mon, 11-Mar-2024 20:40:14 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.22	49991	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	719	OUT	GET /usersync?b=bsw&i=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:14 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.22	49974	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	691	OUT	GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA& Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:14 UTC	566	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzU3MTA2MjgxNjQ1MzYxMjQ5OTU2Ng%3D%3D Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:14 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.22	49981	207.198.113.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	750	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc#1702413607708; _ssuma=eyI0NSI6MTcwMjQxMzYxMTk3OSwiMTUiOjE3MDI0MTM2MDk1MDB9
2023-12-12 20:40:14 UTC	786	IN	HTTP/1.1 302 cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc#1702413607708; Domain=.sitescout.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcwMjQxMzYxNDAxMiwiMTUiOjE3MDI0MTM2MDk1MDB9; Domain=.sitescout.com; Expires=Thu, 11-Jan-2024 20:40:14 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&gdpr=0&gdpr_consent= content-length: 0 date: Tue, 12 Dec 2023 20:40:13 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.22	49993	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	674	OUT	GET /usersync?b=zem&i=1DASsxNWMH7qY1-EP1FQ&gdpr=0 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:14 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.22	49997	54.152.252.123	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:13 UTC	1407	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id=s%3A0-187fc9bc-38fc-5637-6fac-194e6af1e6a7.WWICBVLsoQq2IAaYFNMPHmZi8hDvvltbBOTIA0lo4tE; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v2=s%3AGH_JvDj8VjdvrBlOavHmp2aBmNQ.83KQRyNnoCL7%2FW6r%2FMDW6GAtSBq46Jm2qIWzfZJdWRc; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU; sa-user-id-v3=s%3AAQAKIPrL7SANV8TAAVpJbKeV0qhL8pXca8nhssXL_Z8qbymuEHwYBCC-ieOrBjABOgRanuc5QgT4MXIP.AUPqXzSp1tmsK3i%2F0698uXKbGs7NdXRlLYIHA4RhZzU
2023-12-12 20:40:14 UTC	304	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:40:14 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=GH_JvDj8VjdvrBlOavHmp2aBmNQ&gdpr=0&gdpr_consent= Content-Length: 188 Connection: Close
2023-12-12 20:40:14 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 47 48 5f 4a 76 44 6a 38 56 6a 64 76 72 42 6c 4f 61 76 48 6d 70 32 61 42 6d 4e 51 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=GH_JvDj8VjdvrBlOavHmp2aBmNQ&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.22	49966	198.148.27.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	949	OUT	GET /bh/rtset?ev=AAB3wk7K8YkAABTAD88gJQ&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D2527372694113908282%26bee_sync_partners%3Dsyn%252Cox%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D3 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=4trFhcvjylTg; INGRESSCOOKIE=185d6ef7c41ed78f; pb_rtb_ev=3-1oif\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60\|7bq.0.1
2023-12-12 20:40:14 UTC	1087	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-5c6449b65-gvtwm Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=4trFhcvjylTg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 06-Dec-2024 20:40:14 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1oif\|7bq.0.1\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60\|7dN.0.AAB3wk7K8YkAABTAD88gJQ;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Wed, 11-Dec-2024 20:40:14 GMT;Max-Age=31536000;SameSite=None Location: https://match.prod.bidr.io/cookie-sync?userid=2527372694113908282&bee_sync_partners=syn%2Cox&bee_sync_current_partner=pp&bee_sync_initiator=ox&bee_sync_hop_count=3&ev=AAB3wk7K8YkAABTAD88gJQ&pid=558502&do=add Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.22	50017	52.71.16.59	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	660	OUT	GET /insync?vxii_pid=10067&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:14 UTC	570	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=402a9937-9d5c-4b95-8106-4af28162991a P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjQwMmE5OTM3LTlkNWMtNGI5NS04MTA2LTRhZjI4MTYyOTkxYSIsImwiOjE3MDI0MTM2MTQyMjQsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Tue, 12 Dec 2023 20:40:14 GMT; Max-Age=17280000; Secure; SameSite=None
2023-12-12 20:40:14 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 34 30 32 61 39 39 33 37 2d 39 64 35 63 2d 34 62 39 35 2d 38 31 30 36 2d 34 61 66 32 38 31 36 32 39 39 31 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=402a9937-9d5c-4b95-8106-4af28162991a">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.22	49978	3.210.17.75	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	676	OUT	GET /sync?pn_id=rc&id=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=3zzUbmittUiV3rjzJy9H%7C1702339200000%7C0
2023-12-12 20:40:14 UTC	771	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=3zzUbmittUiV3rjzJy9H%7C1702339200000%7C0; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:14 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptrrc=LQ2T1KDU-17-IBG6; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:14 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2023-12-12 20:40:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.22	49972	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	868	OUT	GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA& Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync=CgoIoQEQw-eI_sUxCgoIkQIQw-eI_sUxCgoItAIQw-eI_sUxCgoI5gEQw-eI_sUxCgoIhwIQw-eI_sUxCgoItwIQw-eI_sUxCgkIOhDD54j-xTEKCgiMAhDD54j-xTEKCQhfEMPniP7FMQoJCB8Qw-eI_sUx; tluid=3571062816453612499566
2023-12-12 20:40:14 UTC	574	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzU3MTA2MjgxNjQ1MzYxMjQ5OTU2Ng%3D%3D Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:14 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.22	49985	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	816	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:14 UTC	272	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //t.pswec.com/bsw_sync?ssp=pubmatic&bsw_user_id=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.22	50009	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	1986	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=a4552c04-658f-4c5b-8dc8-e09b6c6982fb&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; PugT=1702413613; chkChromeAb67Sec=3; pi=156212:4; DPSync3=1703548800%3A262_261_201_263_256_260_259_258%7C1703376000%3A257%7C1702425600%3A255_248%7C1702944000%3A265; SyncRTB3=1703635200%3A35%7C1707523200%3A69%7C1704931200%3A224%7C1703548800%3A250_240_233_7_165_96_214_54_176_56_13_220_21_166_46_99_3_249_243_81_48_231_178_71_55_5_264_104_22_8_234_238%7C1703203200%3A63%7C1702944000%3A223_38_15_2
2023-12-12 20:40:14 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 11:06:09 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:06:09 GMT; path=/ Set-Cookie: PugT=1702379169; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:06:09 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=AE4A8C3D-1096-459A-B091-2BADD5009F52 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.22	50003	34.96.70.87	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	646	OUT	GET /encrypted-signals/encrypted-tag-g.js HTTP/1.1 Host: invstatic101.creativecdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
2023-12-12 20:40:14 UTC	397	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 last-modified: Thu, 03 Aug 2023 03:28:51 GMT etag: fc4e6bfe266081c4873c6f08c8298e5c x-cloud-trace-context: 9f843eee8b39c44daa91337fc60af80e date: Tue, 12 Dec 2023 20:40:14 GMT server: Google Frontend Content-Length: 1207 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:14 UTC	855	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 45 53 50 20 2d 20 52 54 42 48 6f 75 73 65 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 32 2e 34 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 74 62 68 6f 75 73 65 2e 63 6f 6d 2f 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 74 62 68 6f 75 73 65 2d 65 73 70 22 29 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 74 62 68 6f 75 73 65 2d 73 65 67 6d 65 6e 74 73 22 29 2c 74 3d 70 62 6a 73 2e 67 65 74 55 73 65 72 49 64 73 28 29 3f 2e 70 75 62 63 69 64 3b 72 65 74 75 72 6e 20 73 69 67 6e 61 6c 5f 64 Data Ascii: /** * ESP - RTBHouse * @version v1.2.4 * @link https://www.rtbhouse.com/ */!function(){async function e(){var e=window.localStorage.getItem("rtbhouse-esp"),n=window.localStorage.getItem("rtbhouse-segments"),t=pbjs.getUserIds()?.pubcid;return signal_d
2023-12-12 20:40:14 UTC	352	IN	Data Raw: 73 6f 6e 28 29 29 2e 6d 65 73 73 61 67 65 7d 28 73 69 67 6e 61 6c 5f 64 65 63 72 79 70 74 65 64 29 2e 74 68 65 6e 28 65 3d 3e 65 29 7d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 68 69 73 2c 65 29 7d 73 65 6e 64 5f 73 69 67 6e 61 6c 28 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 65 6e 63 72 79 70 74 65 64 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 7c 7c 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 65 6e 63 72 79 70 74 65 64 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 3d 5b 5d 29 2c 6e 75 6c 6c 21 3d 67 6f 6f 67 6c 65 74 61 67 2e 65 6e 63 72 79 70 74 65 64 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 6e 63 72 79 70 74 Data Ascii: son()).message}(signal_decrypted).then(e=>e)}new class{constructor(e){Object.assign(this,e)}send_signal(){window.googletag.encryptedSignalProviders\|\|(window.googletag.encryptedSignalProviders=[]),null!=googletag.encryptedSignalProviders&&googletag.encrypt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.22	49961	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	741	OUT	GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAEYASACKAIyCwiI7IedqNe9PBAFOAFaBmd1bWd1bWAC
2023-12-12 20:40:14 UTC	573	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Length: 251 Connection: close server: Kestrel location: https://eb2.3lift.com/xuid?mid=3658&xuid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&dongle=0cfd&gdpr=0&gdpr_consent= set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:14 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUYASABKAIyCwjmydrjqNe9PBAFOAFaB3N2eDl0NTBgAg..; expires=Thu, 12 Dec 2024 20:40:14 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:14 UTC	251	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://eb2.3lift.com/xuid?mid=3658&xuid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&dongle=0cfd&gdpr=0&gdpr_consent=">https://eb2.3lift.com/xuid?mid=3658&xuid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&dongle=0cfd&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.22	50016	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	666	OUT	GET /usersync?b=apn&i=2638779048715878353 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:14 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.22	50012	147.135.94.213	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	689	OUT	GET /api/sync?callerId=81&gdpr=0 HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282; csync=127:AAB3wk7K8YkAABTAD88gJQ
2023-12-12 20:40:14 UTC	195	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:13 GMT location: https://u.openx.net/w/1.0/sd?id=540394477&val=2527372694113908282&gdpr=0&gdpr_consent= connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.22	49994	3.228.157.65	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	616	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:14 UTC	128	IN	HTTP/1.1 204 No Content Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.22	49970	185.184.8.90	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	696	OUT	GET /cm-notify?pi=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ts=1702413500; u=cbwfSD2W6hDiwC0lhEhO; g=cbwfSD2W6hDiwC0lhEhO_1702413500822
2023-12-12 20:40:14 UTC	411	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:14 GMT vary: Accept-Encoding location: https://ce.lijit.com/merge?pid=86&3pid=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=sovrn&gdpr=0&gdpr_consent= cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Tue, 12 Dec 2023 20:40:14 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.22	49990	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	1490	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=7558899468789434902&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63
2023-12-12 20:40:14 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:13 GMT; path=/ Set-Cookie: PugT=1702413613; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:13 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:14 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.22	50010	52.70.186.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	649	OUT	GET /sync?pid=187&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:14 UTC	420	IN	HTTP/1.1 204 Date: Tue, 12 Dec 2023 20:40:13 GMT Set-Cookie: __187_cid=AE4A8C3D-1096-459A-B091-2BADD5009F52; Domain=.bfmio.com; Max-Age=31536000; Expires=Wed, 11-Dec-2024 15:40:14 GMT-0500; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=63c3525d3a01a9a5859257053d0695bf0dc4cfe7; Domain=.bfmio.com; Max-Age=31536000; Expires=Wed, 11-Dec-2024 15:40:14 GMT-0500; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.22	50015	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	834	OUT	GET /merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D
2023-12-12 20:40:14 UTC	941	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:14 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.22	50001	74.119.119.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	838	OUT	GET /dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=1---&gpp=${GPP_STRING_28}&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:14 UTC	548	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:13 GMT server: Kestrel cache-control: no-cache expires: Tue, 12 Dec 2023 00:00:00 GMT location: https://eb2.3lift.com/xuid?mid=2711&xuid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31&dongle=013b&gdpr=0&gdpr_consent=&us_privacy=1--- pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 994058 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.22	50002	18.173.132.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	635	OUT	GET /userPixel/sync?partner=rubicon&uid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: usr.undertone.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:14 UTC	423	IN	HTTP/1.1 200 Content-Length: 0 Connection: close Date: Tue, 12 Dec 2023 20:40:14 GMT Set-Cookie: UID_EXT_47=LQ2T1KDU-17-IBG6; Path=/; Domain=undertone.com; Expires=Thu, 12-Dec-2024 02:29:26 GMT; SameSite=None; Secure; X-Cache: Miss from cloudfront Via: 1.1 15b20cdc545f9b56059a7fe493f5451a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P2 X-Amz-Cf-Id: qQIM6hDDIgyBN3yIFTYmFwYdJlBMDhf2bYSRsdQAY2gt5k4izHnyPg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.22	50005	13.225.214.44	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	679	OUT	GET /connectId-gpt.js HTTP/1.1 Host: connectid.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLvEeGUCEBz2PtZ-Lcjes-r00VZbevMFEgEBAQEWemWCZdw80iMA_eMAAA&S=AQAAAiX-RSnwtLTkBtgXHr794pU; IDSYNC="18za~2fkk:19bx~2fkk"
2023-12-12 20:40:14 UTC	682	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8730 Connection: close Last-Modified: Tue, 17 Oct 2023 13:17:45 GMT x-amz-expiration: expiry-date="Tue, 17 Oct 2028 00:00:00 GMT", rule-id="webapp-standard-lifecycle" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 12 Dec 2023 20:02:53 GMT Cache-Control: max-age=3600 ETag: "c46e30de24d0f12167e302e9e32ff4a5" X-Cache: Hit from cloudfront Via: 1.1 c5e0ddd115d9893ade353cf085d11dba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR50-C1 X-Amz-Cf-Id: ogE6-SvwMadShjatV7cnTUucOY_paq6gSbr9UO8eS29mhwvI5xJ2Yw== Age: 2242 Content-Security-Policy: default-src 'self'
2023-12-12 20:40:14 UTC	8730	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 34 30 34 3a 28 74 2c 65 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6f 29 7b 69 66 28 65 5b 6f 5d 29 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 65 5b 6f 5d 3d 7b 69 3a 6f 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6f 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 Data Ascii: (()=>{var t={404:(t,e)=>{!function(t){var e={};function n(o){if(e[o])return e[o].exports;var r=e[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=t,n.c=e,n.d=function(t,e,o){n.o(t,e)\|\|Object.defineProperty(t,e,{enume

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.22	49971	34.96.105.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	651	OUT	GET /v1/api/sync/sovrn?gdpr=0&gdpr_consent= HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b=6578C52BA3E5B7861049C694BLIS
2023-12-12 20:40:14 UTC	404	IN	HTTP/1.1 307 Temporary Redirect Location: https://ap.lijit.com/merge?pid=94&3pid=6578C52BA3E5B7861049C694BLIS&gdpr=0&gdpr_consent= Set-Cookie: b=6578C52BA3E5B7861049C694BLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Content-Length: 0 Date: Tue, 12 Dec 2023 20:40:14 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.22	50007	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	1223	OUT	GET /merge?pid=2&3pid=EAF92472013E4E6D9A751C1DA567BFFF HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; ljtrtb=eJyrVrI0V7JSCorQTUm2SDRJNTPTNTayMNI1MUgz1020MDXXTTY0NzNJSQFKGifpGhiYKtUCAFmVDRE%3D; _ljtrtb_83=LQ2T1KDU-17-IBG6
2023-12-12 20:40:14 UTC	2258	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:14 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.22	49976	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	935	OUT	GET /sync?dsp_id=413&ssp=pubmatic&user_id=csonata_94d142a2-4bcb-4451-b722-a4d0cfefee3f&bsw_param=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&expires=10&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:14 UTC	615	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=0&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.22	49980	34.224.153.9	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	708	OUT	GET /api/v1/dsync/Martin?exid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
2023-12-12 20:40:14 UTC	456	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702; Path=/; Domain=kargo.com; Expires=Wed, 11 Dec 2024 20:40:14 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2023-12-12 20:40:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.22	49964	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	1488	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; PugT=1702413607; chkChromeAb67Sec=2; pi=0:4; DPSync3=1702944000%3A265%7C1703548800%3A260_259_201_263_262_261%7C1702425600%3A248; SyncRTB3=1702944000%3A223_2_15%7C1703548800%3A220_104_178_176_165_231_166_71_22_8_21_3_54_250_48_13_55_233%7C1703203200%3A63
2023-12-12 20:40:14 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:13 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:13 GMT; path=/ Set-Cookie: PugT=1702413613; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:13 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.22	50013	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	2265	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=GH_JvDj8VjdvrBlOavHmp2aBmNQ&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; chkChromeAb67Sec=3; SPugT=1702413613; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; pi=157108:4; DPSync3=1702425600%3A248_255%7C1703548800%3A262_261_201_263_258_256_260_259%7C1703376000%3A257%7C1702944000%3A265; SyncRTB3=1703635200%3A35%7C1703548800%3A166_55_104_220_176_231_21_240_249_7_250_71_264_56_13_48_54_22_178_233_46_214_3_8_165_234_99_5_96_238%7C1702944000%3A15_223_2%7C1704931200%3A224%7C1703203200%3A63; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; PugT=1702379250
2023-12-12 20:40:14 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:14 GMT; path=/ Set-Cookie: PugT=1702413614; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:14 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.22	50008	38.98.69.175	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	745	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000000000000000000000000000006578C52700000000000000000000000000000000000000006578C52B
2023-12-12 20:40:14 UTC	722	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA9_10D97F8E3_7A5609BE&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000006578C52E00000000000000006578C52700000000000000000000000000000000000000006578C52B; domain=mxptint.net; expires=Fri, 12-Dec-2025 20:40:14 GMT; path=/; secure; SameSite=None Date: Tue, 12 Dec 2023 20:40:13 GMT Connection: close Content-Length: 302 Strict-Transport-Security: max-age=-385418414; includeSubDomains
2023-12-12 20:40:14 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 33 35 43 41 39 5f 31 30 44 39 37 46 38 45 33 5f 37 41 35 36 30 39 42 45 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA9_10D97F8E3_7A5609BE&r=https://pmp.mxptint.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.22	49965	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	845	OUT	GET /w/1.0/sd?id=540245193&val=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
2023-12-12 20:40:14 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.22	50023	192.178.50.65	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	557	OUT	GET /rtv/012310301456000/v0/amp-ad-exit-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:14 UTC	1579	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 14931 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Dec 2023 12:38:42 GMT Expires: Sat, 07 Dec 2024 12:38:42 GMT Cache-Control: public, max-age=31536000 ETag: "0b7142e00666043e" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 374492 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 33 31 30 33 30 31 34 35 36 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 61 64 2d 65 78 69 74 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 28 28 29 3d 3e 7b 76 61 72 20 6e 2c 7b 69 73 41 72 72 61 79 3a 65 7d 3d 41 72 72 61 79 2c 7b 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3a 69 2c 74 6f 53 74 72 69 6e 67 3a 72 7d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 22 6d 65 73 73 61 67 65 22 29 3b 69 66 28 6e 75 6c 6c 21 3d 6e 26 Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-ad-exit",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:e}=Array,{hasOwnProperty:i,toString:r}=Object.prototype;function s(t){const n=Object.getOwnPropertyDescriptor(t,"message");if(null!=n&
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 6e 63 74 69 6f 6e 20 67 28 74 29 7b 72 65 74 75 72 6e 20 6d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 64 2e 64 65 76 7c 7c 28 64 2e 64 65 76 3d 6d 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 2c 6f 2c 63 2c 75 2c 6c 2c 61 29 7b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 2c 6f 2c 63 2c 75 2c 6c 2c 61 29 7b 72 65 74 75 72 6e 20 62 28 29 2e 61 73 73 65 72 74 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 2c 6f 2c 63 2c 75 2c 6c 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 65 2c 69 29 7b 63 6f 6e 73 74 20 72 3d 6a 28 74 29 2c 73 3d 53 28 72 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 2c 69 2c 72 2c 73 29 7b 63 6f 6e 73 74 20 6f 3d 50 28 74 29 Data Ascii: nction g(t){return m()}function y(){return d.dev\|\|(d.dev=m())}function _(t,n,e,i,r,s,o,c,u,l,a){return t}function A(t,n,e,i,r,s,o,c,u,l,a){return b().assert(t,n,e,i,r,s,o,c,u,l,a)}function I(t,n,e,i){const r=j(t),s=S(r);!function(t,n,e,i,r,s){const o=P(t)
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 2c 63 6f 6e 74 65 78 74 3a 6e 75 6c 6c 2c 63 74 6f 72 3a 6e 75 6c 6c 7d 7d 76 61 72 20 43 3d 22 68 6f 73 74 2d 76 69 73 69 62 69 6c 69 74 79 22 2c 44 3d 22 68 6f 73 74 2d 66 75 6c 6c 73 63 72 65 65 6e 22 2c 46 3d 22 68 6f 73 74 2d 65 78 69 74 22 2c 4d 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 69 73 41 76 61 69 6c 61 62 6c 65 28 74 29 7b 72 65 74 75 72 6e 21 21 28 6e 3d 74 2c 6a 28 6e 29 29 2e 67 65 74 48 65 61 64 4e 6f 64 65 28 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 68 6f 73 74 2d 73 65 72 76 69 63 65 5d 22 29 3b 76 61 72 20 6e 7d 73 74 61 74 69 63 20 76 69 73 69 62 69 6c 69 74 79 46 6f 72 44 6f 63 28 74 29 7b 72 65 74 75 72 6e 20 54 28 74 2c 43 29 7d 73 74 61 74 69 63 20 69 6e 73 74 61 6c 6c 56 69 73 69 62 69 6c 69 74 79 Data Ascii: ,context:null,ctor:null}}var C="host-visibility",D="host-fullscreen",F="host-exit",M=class{static isAvailable(t){return!!(n=t,j(n)).getHeadNode().querySelector("script[host-service]");var n}static visibilityForDoc(t){return T(t,C)}static installVisibility
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 28 47 28 7b 7d 2c 42 29 2c 7b 7d 2c 7b 22 62 67 22 3a 22 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 62 34 61 2f 65 78 70 65 72 69 6d 65 6e 74 61 6c 2f 62 34 61 2d 72 75 6e 6e 65 72 2e 68 74 6d 6c 22 7d 29 2c 42 29 3b 66 75 6e 63 74 69 6f 6e 20 4a 28 74 2c 6e 2c 65 29 7b 69 66 28 41 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 66 69 6e 61 6c 55 72 6c 2c 22 66 69 6e 61 6c 55 72 6c 20 6f 66 20 74 61 72 67 65 74 20 27 25 73 27 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 22 2c 74 29 2c 6e 2e 66 69 6c 74 65 72 73 26 26 6e 2e 66 69 6c 74 65 72 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 41 28 65 2e 66 69 6c 74 65 72 73 5b 74 5d 2c 22 66 69 6c 74 65 72 20 27 25 73 27 20 6e 6f 74 20 Data Ascii: (G({},B),{},{"bg":"https://tpc.googlesyndication.com/b4a/experimental/b4a-runner.html"}),B);function J(t,n,e){if(A("string"==typeof n.finalUrl,"finalUrl of target '%s' must be a string",t),n.filters&&n.filters.forEach((t=>{A(e.filters[t],"filter '%s' not
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 74 74 6f 6d 7d 6f 6e 4c 61 79 6f 75 74 4d 65 61 73 75 72 65 28 29 7b 74 68 69 73 2e 73 49 2e 67 65 74 56 73 79 6e 63 28 29 2e 6d 65 61 73 75 72 65 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 77 69 6e 3a 74 7d 3d 74 68 69 73 2e 73 49 3b 69 66 28 74 68 69 73 2e 72 49 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 68 69 73 2e 72 49 29 3b 41 28 6e 2c 60 72 65 6c 61 74 69 76 65 54 6f 20 65 6c 65 6d 65 6e 74 20 24 7b 74 68 69 73 2e 72 49 7d 20 6e 6f 74 20 66 6f 75 6e 64 2e 60 29 3b 63 6f 6e 73 74 20 65 3d 6e 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 74 68 69 73 2e 6f 49 2e 6c 65 66 74 3d 65 2e 6c 65 66 74 2c 74 68 69 73 2e 6f 49 2e 74 6f 70 3d 65 2e 74 6f 70 2c 74 68 69 73 Data Ascii: ttom}onLayoutMeasure(){this.sI.getVsync().measure((()=>{const{win:t}=this.sI;if(this.rI){const n=t.document.querySelector(this.rI);A(n,`relativeTo element ${this.rI} not found.`);const e=n.getBoundingClientRect();this.oI.left=e.left,this.oI.top=e.top,this
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 65 78 69 74 28 74 29 7b 63 6f 6e 73 74 7b 61 72 67 73 3a 6e 7d 3d 74 3b 6c 65 74 20 65 2c 7b 65 76 65 6e 74 3a 69 7d 3d 74 3b 41 28 22 76 61 72 69 61 62 6c 65 22 69 6e 20 6e 21 3d 22 74 61 72 67 65 74 22 69 6e 20 6e 2c 22 4f 6e 65 20 61 6e 64 20 6f 6e 6c 79 20 6f 6e 65 20 6f 66 20 27 74 61 72 67 65 74 27 20 61 6e 64 20 27 76 61 72 69 61 62 6c 65 27 20 6d 75 73 74 20 62 65 20 73 70 65 63 69 66 69 65 64 22 29 2c 22 76 61 72 69 61 62 6c 65 22 69 6e 20 6e 3f 28 65 3d 74 68 69 73 2e 75 49 5b 6e 2e 76 61 72 69 61 62 6c 65 5d 2c 65 7c 7c 28 65 3d 6e 2e 64 65 66 61 75 6c 74 29 2c 41 28 65 2c 60 56 61 72 69 61 62 6c 65 20 74 61 72 67 65 74 20 6e 6f 74 20 66 6f 75 6e 64 2c 20 76 61 72 69 61 62 6c 65 3a 27 24 7b 6e 2e 76 61 72 69 61 62 6c 65 7d 27 2c 20 64 65 66 61 Data Ascii: exit(t){const{args:n}=t;let e,{event:i}=t;A("variable"in n!="target"in n,"One and only one of 'target' and 'variable' must be specified"),"variable"in n?(e=this.uI[n.variable],e\|\|(e=n.default),A(e,`Variable target not found, variable:'${n.variable}', defa
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 53 69 67 6e 61 6c 29 7b 63 6f 6e 73 74 20 74 3d 72 2e 65 78 70 61 6e 64 53 74 72 69 6e 67 53 79 6e 63 28 6f 2e 69 66 72 61 6d 65 54 72 61 6e 73 70 6f 72 74 53 69 67 6e 61 6c 2c 7b 22 49 46 52 41 4d 45 5f 54 52 41 4e 53 50 4f 52 54 5f 53 49 47 4e 41 4c 22 3a 28 74 2c 6e 29 3d 3e 7b 69 66 28 21 74 7c 7c 21 6e 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 68 49 5b 74 5d 3b 72 65 74 75 72 6e 20 65 26 26 6e 20 69 6e 20 65 3f 65 5b 6e 5d 3a 76 6f 69 64 20 30 7d 7d 29 3b 69 66 28 6f 2e 69 66 72 61 6d 65 54 72 61 6e 73 70 6f 72 74 53 69 67 6e 61 6c 3d 3d 60 49 46 52 41 4d 45 5f 54 52 41 4e 53 50 4f 52 54 5f 53 49 47 4e 41 4c 24 7b 74 7d 60 29 79 28 29 2e 65 72 72 6f 72 28 6e 74 2c 22 49 6e 76 61 6c 69 64 20 49 46 52 41 4d 45 5f 54 52 41 4e Data Ascii: Signal){const t=r.expandStringSync(o.iframeTransportSignal,{"IFRAME_TRANSPORT_SIGNAL":(t,n)=>{if(!t\|\|!n)return"";const e=this.hI[t];return e&&n in e?e[n]:void 0}});if(o.iframeTransportSignal==`IFRAME_TRANSPORT_SIGNAL${t}`)y().error(nt,"Invalid IFRAME_TRAN
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 6f 66 20 74 2c 22 27 74 61 72 67 65 74 73 27 20 6d 75 73 74 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 74 29 4a 28 65 2c 74 5b 65 5d 2c 6e 29 7d 28 74 2e 74 61 72 67 65 74 73 2c 74 29 2c 74 7d 28 75 28 6e 2e 74 65 78 74 43 6f 6e 74 65 6e 74 29 29 3b 6c 65 74 20 65 3b 73 3d 74 2e 6f 70 74 69 6f 6e 73 2c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 72 2e 63 61 6c 6c 28 73 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6f 70 74 69 6f 6e 73 2e 73 74 61 72 74 54 69 6d 69 6e 67 45 76 65 6e 74 26 26 28 65 3d 74 2e 6f 70 74 69 6f 6e 73 2e 73 74 61 72 74 54 69 6d 69 6e 67 45 76 65 6e 74 2c 74 68 69 73 2e 6c 49 2e 73 70 6c 69 63 65 28 30 2c 31 2c 5f 28 51 28 22 6d 69 6e 44 65 6c 61 Data Ascii: of t,"'targets' must be an object");for(const e in t)J(e,t[e],n)}(t.targets,t),t}(u(n.textContent));let e;s=t.options,"[object Object]"===r.call(s)&&"string"==typeof t.options.startTimingEvent&&(e=t.options.startTimingEvent,this.lI.splice(0,1,_(Q("minDela
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 63 6f 6e 73 74 20 65 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 69 3d 6e 7c 7c 4f 28 65 29 3b 69 66 28 65 26 26 65 21 3d 69 26 26 4f 28 65 29 3d 3d 69 29 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 74 2c 6e 29 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 69 66 28 22 41 4d 50 2d 41 44 22 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 29 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 2e 67 65 74 52 65 73 6f 75 72 63 65 49 64 28 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 Data Ascii: urn function(t,n){try{const e=function(t,n){const e=(t.ownerDocument\|\|t).defaultView,i=n\|\|O(e);if(e&&e!=i&&O(e)==i)try{return e.frameElement}catch(t){}return null}(t,n).parentElement;if("AMP-AD"==e.nodeName)return String(e.getResourceId())}catch(t){}retur
2023-12-12 20:40:14 UTC	720	IN	Data Raw: 65 74 75 72 6e 20 74 2e 64 61 74 61 7d 28 74 29 29 3b 6e 26 26 22 69 66 72 61 6d 65 2d 74 72 61 6e 73 70 6f 72 74 2d 72 65 73 70 6f 6e 73 65 22 3d 3d 6e 2e 74 79 70 65 26 26 28 74 68 69 73 2e 49 49 28 6e 2c 74 2e 6f 72 69 67 69 6e 29 2c 6e 2e 63 72 65 61 74 69 76 65 49 64 3d 3d 74 68 69 73 2e 70 49 26 26 28 74 68 69 73 2e 68 49 5b 6e 2e 76 65 6e 64 6f 72 5d 3d 6e 2e 6d 65 73 73 61 67 65 29 29 7d 29 2c 76 6f 69 64 20 30 29 29 29 7d 49 49 28 74 2c 6e 29 7b 41 28 74 2e 6d 65 73 73 61 67 65 2c 22 52 65 63 65 69 76 65 64 20 65 6d 70 74 79 20 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 33 70 20 61 6e 61 6c 79 74 69 63 73 20 66 72 61 6d 65 22 29 2c 41 28 74 2e 63 72 65 61 74 69 76 65 49 64 2c 22 52 65 63 65 69 76 65 64 20 6d 61 6c 66 6f 72 6d 65 64 20 6d 65 73 73 Data Ascii: eturn t.data}(t));n&&"iframe-transport-response"==n.type&&(this.II(n,t.origin),n.creativeId==this.pI&&(this.hI[n.vendor]=n.message))}),void 0)))}II(t,n){A(t.message,"Received empty response from 3p analytics frame"),A(t.creativeId,"Received malformed mess

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.22	50006	23.105.12.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	797	OUT	GET /getuid?gdpr=0&url=https://pixel.rubiconproject.com/tap.php?v=32128&nid=2915&put=[sas_uid]&cklb=1 HTTP/1.1 Host: sync.smartadserver.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282; csync=104:LQ2T1KDU-17-IBG6; TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100
2023-12-12 20:40:14 UTC	94	IN	HTTP/1.1 200 OK content-length: 0 date: Tue, 12 Dec 2023 20:40:13 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.22	50011	52.71.16.59	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	825	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=962260ae-2017-4479-84d2-c2601faa687e HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6Ijk2MjI2MGFlLTIwMTctNDQ3OS04NGQyLWMyNjAxZmFhNjg3ZSIsImwiOjE3MDI0MTM2MTI4ODMsInQiOjF9
2023-12-12 20:40:14 UTC	353	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6Ijk2MjI2MGFlLTIwMTctNDQ3OS04NGQyLWMyNjAxZmFhNjg3ZSIsImwiOjE3MDI0MTM2MTQ1NTIsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Sat, 29 Jun 2024 20:40:14 GMT; Secure; SameSite=None
2023-12-12 20:40:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.22	49977	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	1221	OUT	GET /merge?3pid=AAB3wk7K8YkAABTAD88gJQ&pid=85&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; ljtrtb=eJyrVrI0V7JSCorQTUm2SDRJNTPTNTayMNI1MUgz1020MDXXTTY0NzNJSQFKGifpGhiYKtUCAFmVDRE%3D; _ljtrtb_83=LQ2T1KDU-17-IBG6
2023-12-12 20:40:14 UTC	2249	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:14 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:14 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.22	50025	3.93.99.238	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	1018	OUT	GET /qmap?c=1389&tp=STSC&tpid=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%26partner_url%3Dhttps%253A%252F%252Fce.lijit.com%252Fmerge%253Fpid%253D16%25263pid%253D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%2526gdpr%253D0%2526gdpr_consent%253D&ct=y HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2023-12-12 20:40:14 UTC	1167	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.14.91 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Sep-2024 20:09:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=a31bb17c5a71a653e40698b548c9c280;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Sep-2024 20:09:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4XmNQSDQ2TEoyNE82TTQ3TDQzNU41MTCztEgyNbFItkw2sjBgAILUiqN6IBoKAEyRCk4%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Sep-2024 20:09:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4XmNgYGBIrTiqB6SgAAAW5gHR";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Sep-2024 20:09:00 GMT;Max-Age=23328000;SameSite=None;Secure Location: https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553&partner_url=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D16%263pid%3D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%26gdpr%3D0%26gdpr_consent%3D Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.22	50004	74.119.119.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	539	OUT	GET /js/ld/publishertag.ids.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:14 UTC	483	IN	HTTP/1.1 200 OK server: nginx date: Tue, 12 Dec 2023 20:40:14 GMT content-type: text/javascript content-length: 43567 last-modified: Tue, 05 Dec 2023 05:12:22 GMT etag: "656eb136-aa2f" expires: Wed, 13 Dec 2023 20:40:14 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:40:14 UTC	15901	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 65 3b 28 65 3d 69 3d 69 7c 7c 7b 7d 29 5b 65 2e 45 72 72 6f 72 3d 30 5d 3d 22 45 72 72 6f 72 22 2c 65 5b 65 2e 57 61 72 6e 69 6e 67 3d 31 5d 3d 22 57 61 72 6e 69 6e 67 22 2c 65 5b 65 2e 44 65 62 75 67 3d 32 5d 3d 22 44 65 62 75 67 22 3b 76 61 72 20 73 3d 5b 22 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 38 66 31 63 3b 22 2c 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 22 2c 22 70 61 64 64 69 6e 67 3a 20 31 70 78 20 34 70 78 3b 22 2c 22 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 22 5d 2e 6a 6f 69 6e 28 22 20 22 29 2c 68 3d 28 61 2e 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 Data Ascii: !function(){"use strict";var i,e;(e=i=i\|\|{})[e.Error=0]="Error",e[e.Warning=1]="Warning",e[e.Debug=2]="Debug";var s=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),h=(a.Log=function(e,t)
2023-12-12 20:40:14 UTC	16319	IN	Data Raw: 22 2e 22 29 3b 69 66 28 21 28 2d 31 3c 74 68 69 73 2e 70 75 62 6c 69 63 54 6f 70 54 6c 64 73 2e 69 6e 64 65 78 4f 66 28 70 29 29 29 74 72 79 7b 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 53 74 72 69 6e 67 28 65 2c 74 2c 63 2c 70 2c 69 29 3b 76 61 72 20 64 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 65 2c 6e 29 3b 69 66 28 64 26 26 64 3d 3d 3d 74 29 72 65 74 75 72 6e 20 70 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 73 7d 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 21 31 29 2c 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 65 2c 22 22 2c 30 2c 74 2c 6f 29 7d 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6f 6b Data Ascii: ".");if(!(-1<this.publicTopTlds.indexOf(p)))try{this.setCookieString(e,t,c,p,i);var d=this.getCookie(e,n);if(d&&d===t)return p}catch(e){}}return s},S.prototype.deleteCookie=function(e,t,o){void 0===o&&(o=!1),this.setCookie(e,"",0,t,o)},S.prototype.getCook
2023-12-12 20:40:14 UTC	6443	IN	Data Raw: 26 28 65 2b 3d 22 26 77 76 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 29 2c 65 7d 2c 6e 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 48 61 6e 64 6c 65 72 50 61 74 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 75 64 69 74 4d 6f 64 65 3f 6e 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 41 55 44 49 54 5f 48 41 4e 44 4c 45 52 3a 33 33 34 3d 3d 65 3f 6e 65 2e 43 52 49 54 45 4f 5f 43 4f 4d 4d 45 52 43 45 5f 45 58 50 45 52 49 45 4e 43 45 5f 33 34 5f 48 41 4e 44 4c 45 52 3a 6e 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 48 41 4e 44 4c 45 52 7d 2c 6e 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 55 52 4c 3d 22 68 74 74 70 73 3a 2f 2f 62 69 64 64 65 72 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 22 2c Data Ascii: &(e+="&wv="+encodeURIComponent(n)),e},ne.prototype.getHandlerPath=function(e){return this.auditMode?ne.CRITEO_BIDDER_AUDIT_HANDLER:334==e?ne.CRITEO_COMMERCE_EXPERIENCE_34_HANDLER:ne.CRITEO_BIDDER_HANDLER},ne.CRITEO_BIDDER_URL="https://bidder.criteo.com/",
2023-12-12 20:40:14 UTC	4904	IN	Data Raw: 6e 65 72 72 6f 72 28 65 2e 5f 72 65 73 75 6c 74 29 2c 6b 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 3d 3d 53 26 26 28 65 2e 5f 72 65 73 75 6c 74 3d 74 2c 65 2e 5f 73 74 61 74 65 3d 54 2c 30 21 3d 3d 65 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2e 6c 65 6e 67 74 68 26 26 73 28 6b 2c 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 3d 3d 53 26 26 28 65 2e 5f 73 74 61 74 65 3d 45 2c 65 2e 5f 72 65 73 75 6c 74 3d 74 2c 73 28 52 2c 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 74 2c 6f 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 65 2e 5f 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 2c 72 5b 69 5d 3d 74 2c 72 5b 69 2b 54 5d Data Ascii: nerror(e._result),k(e)}function A(e,t){e._state===S&&(e._result=t,e._state=T,0!==e._subscribers.length&&s(k,e))}function O(e,t){e._state===S&&(e._state=E,e._result=t,s(R,e))}function M(e,t,o,n){var r=e._subscribers,i=r.length;e._onerror=null,r[i]=t,r[i+T]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.22	50019	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	730	OUT	GET /pixel?google_nid=sovrn&google_hm=SHozMmhMWkhCRkt4czN4clFVcXJ3MFFi&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:14 UTC	604	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://s0.2mdn.net/dot.gif?gdpr=0 Date: Tue, 12 Dec 2023 20:40:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 231 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:14 UTC	231	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 30 2e 32 6d 64 6e 2e 6e 65 74 2f 64 6f 74 2e 67 69 66 3f 67 64 70 72 3d 30 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://s0.2mdn.net/dot.gif?gdpr=0">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.22	50014	35.244.216.234	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	757	OUT	GET /bid-engine/cs/377c7998bb9f42e5aea0416c9dac091f/v1?rd=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537146931%26val%3D%24UID HTTP/1.1 Host: openx.adhaven.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=4c_0f2fd50c-4ce9-46bf-8fbf-4c75ac6b55dc
2023-12-12 20:40:14 UTC	393	IN	HTTP/1.1 302 Found Set-Cookie: uid=4c_0f2fd50c-4ce9-46bf-8fbf-4c75ac6b55dc;path=/;Max-Age=315360000;Domain=adhaven.com;SameSite=None;Secure Location: https://us-u.openx.net/w/1.0/sd?id=537146931&val=4c_0f2fd50c-4ce9-46bf-8fbf-4c75ac6b55dc Content-Length: 0 Date: Tue, 12 Dec 2023 20:40:14 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.22	50024	192.178.50.65	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	559	OUT	GET /rtv/012310301456000/v0/amp-analytics-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:14 UTC	1579	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 96790 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Dec 2023 12:38:42 GMT Expires: Sat, 07 Dec 2024 12:38:42 GMT Cache-Control: public, max-age=31536000 ETag: "7b1f1965b6cd6fda" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 374492 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 33 31 30 33 30 31 34 35 36 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 61 6e 61 6c 79 74 69 63 73 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 28 28 29 3d 3e 7b 76 61 72 20 69 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 29 7d 76 61 72 20 65 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 69 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 74 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 69 7d 29 Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-analytics",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function s(){return i\|\|(i=Promise.resolve(void 0))}var e=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i})
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 49 28 74 2c 69 2c 73 29 7b 63 6f 6e 73 74 20 65 3d 69 7c 7c 28 74 3d 3e 74 29 2c 7b 64 61 74 61 73 65 74 3a 6e 7d 3d 74 2c 72 3d 7b 7d 2c 6f 3d 73 7c 7c 2f 5e 70 61 72 61 6d 28 2e 2b 29 2f 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 69 3d 74 2e 6d 61 74 63 68 28 6f 29 3b 69 26 26 28 72 5b 65 28 69 5b 31 5d 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 5b 31 5d 2e 73 75 62 73 74 72 28 31 29 29 5d 3d 6e 5b 74 5d 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 72 65 6e 74 26 26 74 2e 70 61 72 65 6e 74 21 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 63 6f 6e 73 74 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 Data Ascii: unction I(t,i,s){const e=i\|\|(t=>t),{dataset:n}=t,r={},o=s\|\|/^param(.+)/;for(const t in n){const i=t.match(o);i&&(r[e(i[1][0].toLowerCase()+i[1].substr(1))]=n[t])}return r}function v(t){return t.parent&&t.parent!=t}function R(t){const i=Object.getOwnProper
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 76 61 72 20 78 3d 73 65 6c 66 2e 5f 5f 41 4d 50 5f 4c 4f 47 3b 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 69 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 66 61 69 6c 65 64 20 74 6f 20 63 61 6c 6c 20 69 6e 69 74 4c 6f 67 43 6f 6e 73 74 72 75 63 74 6f 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 20 78 2e 75 73 65 72 7c 7c 28 78 2e 75 73 65 72 3d 6a 28 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 26 69 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 21 3d 74 7d 28 78 2e 75 73 65 72 2e 77 69 6e 2c 74 29 3f 78 2e 75 73 65 72 46 6f 72 45 6d 62 65 64 7c 7c 28 78 2e 75 73 65 72 46 6f 72 45 6d 62 65 64 3d 6a 28 29 29 3a 78 2e 75 73 65 72 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: var x=self.__AMP_LOG;function U(t,i){throw new Error("failed to call initLogConstructor")}function H(t){return x.user\|\|(x.user=j()),function(t,i){return i&&i.ownerDocument.defaultView!=t}(x.user.win,t)?x.userForEmbed\|\|(x.userForEmbed=j()):x.user}function
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 74 69 6f 6e 20 69 74 28 74 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 73 74 28 74 29 5b 69 5d 3b 72 65 74 75 72 6e 20 73 3f 73 2e 70 72 6f 6d 69 73 65 3f 73 2e 70 72 6f 6d 69 73 65 3a 28 51 28 74 2c 69 29 2c 73 2e 70 72 6f 6d 69 73 65 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 2e 6f 62 6a 29 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 74 29 7b 6c 65 74 20 69 3d 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 3b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 3d 7b 7d 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 2c 69 29 7b 63 6f 6e 73 74 20 73 3d 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 26 26 74 2e 5f 5f 41 4d 50 5f 53 45 52 56 49 43 45 53 5b 69 5d 3b 72 65 74 75 72 6e 21 28 21 73 7c 7c Data Ascii: tion it(t,i){const s=st(t)[i];return s?s.promise?s.promise:(Q(t,i),s.promise=Promise.resolve(s.obj)):null}function st(t){let i=t.__AMP_SERVICES;return i\|\|(i=t.__AMP_SERVICES={}),i}function et(t,i){const s=t.__AMP_SERVICES&&t.__AMP_SERVICES[i];return!(!s\|\|
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 6f 77 6e 22 2c 22 6b 65 79 75 70 22 5d 2c 52 74 3d 5b 22 6d 6f 75 73 65 6c 65 61 76 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 4d 74 28 74 2c 69 2c 73 29 7b 72 65 74 75 72 6e 20 69 20 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2c 7b 76 61 6c 75 65 3a 73 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 69 5d 3d 73 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 62 74 28 74 2c 69 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 Data Ascii: own","keyup"],Rt=["mouseleave"];function Mt(t,i,s){return i in t?Object.defineProperty(t,i,{value:s,enumerable:!0,configurable:!0,writable:!0}):t[i]=s,t}function bt(t,i){var s=Object.keys(t);if(Object.getOwnPropertySymbols){var e=Object.getOwnPropertySymb
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 53 68 69 66 74 22 3a 22 43 55 4d 55 4c 41 54 49 56 45 5f 4c 41 59 4f 55 54 5f 53 48 49 46 54 22 2c 22 64 6f 63 75 6d 65 6e 74 43 68 61 72 73 65 74 22 3a 22 44 4f 43 55 4d 45 4e 54 5f 43 48 41 52 53 45 54 22 2c 22 64 6f 63 75 6d 65 6e 74 52 65 66 65 72 72 65 72 22 3a 22 44 4f 43 55 4d 45 4e 54 5f 52 45 46 45 52 52 45 52 22 2c 22 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 54 69 6d 65 22 3a 22 44 4f 4d 5f 49 4e 54 45 52 41 43 54 49 56 45 5f 54 49 4d 45 22 2c 22 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 54 69 6d 65 22 3a 22 44 4f 4d 41 49 4e 5f 4c 4f 4f 4b 55 50 5f 54 49 4d 45 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 42 72 61 6e 63 68 65 73 22 3a 22 45 58 50 45 52 49 4d 45 4e 54 5f 42 52 41 4e 43 48 45 53 22 2c 22 65 78 74 65 72 6e 61 6c 52 65 66 65 72 72 65 72 22 3a Data Ascii: Shift":"CUMULATIVE_LAYOUT_SHIFT","documentCharset":"DOCUMENT_CHARSET","documentReferrer":"DOCUMENT_REFERRER","domInteractiveTime":"DOM_INTERACTIVE_TIME","domainLookupTime":"DOMAIN_LOOKUP_TIME","experimentBranches":"EXPERIMENT_BRANCHES","externalReferrer":
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 61 6d 70 22 3a 22 54 49 4d 45 53 54 41 4d 50 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 54 49 4d 45 5a 4f 4e 45 22 2c 22 74 69 6d 65 7a 6f 6e 65 43 6f 64 65 22 3a 22 54 49 4d 45 5a 4f 4e 45 5f 43 4f 44 45 22 2c 22 74 69 74 6c 65 22 3a 22 54 49 54 4c 45 22 2c 22 74 6f 74 61 6c 45 6e 67 61 67 65 64 54 69 6d 65 22 3a 22 54 4f 54 41 4c 5f 45 4e 47 41 47 45 44 5f 54 49 4d 45 22 2c 22 75 61 63 68 22 3a 22 55 41 43 48 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 55 53 45 52 5f 41 47 45 4e 54 22 2c 22 76 69 65 77 65 72 22 3a 22 56 49 45 57 45 52 22 2c 22 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 22 3a 22 56 49 45 57 50 4f 52 54 5f 48 45 49 47 48 54 22 2c 22 76 69 65 77 70 6f 72 74 57 69 64 74 68 22 3a 22 56 49 45 57 50 4f 52 54 5f 57 49 44 54 48 22 7d 7d 27 29 3b Data Ascii: amp":"TIMESTAMP","timezone":"TIMEZONE","timezoneCode":"TIMEZONE_CODE","title":"TITLE","totalEngagedTime":"TOTAL_ENGAGED_TIME","uach":"UACH","userAgent":"USER_AGENT","viewer":"VIEWER","viewportHeight":"VIEWPORT_HEIGHT","viewportWidth":"VIEWPORT_WIDTH"}}');
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 6d 65 2c 22 2e 6c 6f 63 61 6c 68 6f 73 74 22 29 7c 7c 2f 5e 5c 2f 5c 2f 2f 2e 74 65 73 74 28 74 29 2c 27 25 73 20 25 73 20 6d 75 73 74 20 73 74 61 72 74 20 77 69 74 68 20 22 68 74 74 70 73 3a 2f 2f 22 20 6f 72 20 22 2f 2f 22 20 6f 72 20 62 65 20 72 65 6c 61 74 69 76 65 20 61 6e 64 20 73 65 72 76 65 64 20 66 72 6f 6d 20 65 69 74 68 65 72 20 68 74 74 70 73 20 6f 72 20 66 72 6f 6d 20 6c 6f 63 61 6c 68 6f 73 74 2e 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 3a 20 25 73 27 2c 69 2c 73 2c 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 47 74 28 74 29 7b 72 65 74 75 72 6e 20 78 74 2e 63 64 6e 50 72 6f 78 79 52 65 67 65 78 2e 74 65 73 74 28 48 74 28 74 29 2e 6f 72 69 67 69 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 74 2c 69 29 7b 69 66 28 21 74 7c 7c 22 3f 22 3d 3d 74 Data Ascii: me,".localhost")\|\|/^\/\//.test(t),'%s %s must start with "https://" or "//" or be relative and served from either https or from localhost. Invalid value: %s',i,s,t),t}function Gt(t){return xt.cdnProxyRegex.test(Ht(t).origin)}function Wt(t,i){if(!t\|\|"?"==t
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 2c 65 2c 22 64 65 6c 65 74 65 22 2c 44 61 74 65 2e 6e 6f 77 28 29 2d 31 65 33 2c 73 29 2c 73 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 74 2c 69 2c 73 2c 65 2c 6e 2c 72 2c 6f 29 7b 22 61 6d 70 70 72 6f 6a 65 63 74 2e 6f 72 67 22 3d 3d 6e 26 26 28 73 3d 22 64 65 6c 65 74 65 22 2c 65 3d 30 29 3b 63 6f 6e 73 74 20 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 69 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 29 2b 22 3b 20 70 61 74 68 3d 2f 22 2b 28 6e 3f 22 3b 20 64 6f 6d 61 69 6e 3d 22 2b 6e 3a 22 22 29 2b 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 6e 65 77 20 44 61 74 65 28 65 29 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 2b 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 Data Ascii: ,e,"delete",Date.now()-1e3,s),s}return null}function Qt(t,i,s,e,n,r,o){"ampproject.org"==n&&(s="delete",e=0);const h=encodeURIComponent(i)+"="+encodeURIComponent(s)+"; path=/"+(n?"; domain="+n:"")+"; expires="+new Date(e).toUTCString()+function(t,i){retur
2023-12-12 20:40:14 UTC	1579	IN	Data Raw: 57 69 6e 64 6f 77 29 7b 74 2e 73 70 6c 69 63 65 28 73 2c 31 29 3b 63 6f 6e 73 74 7b 65 76 65 6e 74 73 3a 6e 7d 3d 65 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 6e 5b 74 5d 2e 73 70 6c 69 63 65 28 30 2c 31 2f 30 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 28 69 29 7d 29 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 69 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 69 3f 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 6d 70 2d 33 70 2d 73 65 6e 74 69 6e 65 6c 22 29 3a 22 61 6d 70 22 7d 66 75 6e 63 74 69 6f 6e 20 6c 69 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 5f 5f 41 4d 50 5f 45 4d 42 45 44 5f 5f 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 69 2d 61 Data Ascii: Window){t.splice(s,1);const{events:n}=e;for(const t in n)n[t].splice(0,1/0).forEach((t=>{t(i)}))}}}function ai(t,i){return i?t.getAttribute("data-amp-3p-sentinel"):"amp"}function li(t){return t.__AMP_EMBED__}function fi(t){return t.classList.contains("i-a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.22	50028	192.178.50.65	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	558	OUT	GET /rtv/012310301456000/v0/amp-fit-text-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:14 UTC	1578	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 5139 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Dec 2023 12:38:42 GMT Expires: Sat, 07 Dec 2024 12:38:42 GMT Cache-Control: public, max-age=31536000 ETag: "5b0a82507b260c6e" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 374492 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:14 UTC	1578	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 33 31 30 33 30 31 34 35 36 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 66 69 74 2d 74 65 78 74 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 28 28 29 3d 3e 7b 76 61 72 20 6e 2c 7b 69 73 41 72 72 61 79 3a 69 7d 3d 41 72 72 61 79 2c 7b 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3a 65 2c 74 6f 53 74 72 69 6e 67 3a 6f 7d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 74 29 3b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 69 3d 6e 29 26 26 69 73 46 69 6e 69 74 65 28 69 29 3f Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-fit-text",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:i}=Array,{hasOwnProperty:e,toString:o}=Object.prototype;function r(t){const n=parseFloat(t);return"number"==typeof(i=n)&&isFinite(i)?
2023-12-12 20:40:14 UTC	1578	IN	Data Raw: 6c 75 69 64 22 3d 3d 74 7c 7c 22 69 6e 74 72 69 6e 73 69 63 22 3d 3d 74 7d 28 74 29 7d 62 75 69 6c 64 43 61 6c 6c 62 61 63 6b 28 29 7b 63 6f 6e 73 74 7b 65 6c 65 6d 65 6e 74 3a 74 7d 3d 74 68 69 73 2c 7b 63 6f 6e 74 65 6e 74 3a 6e 2c 63 6f 6e 74 65 6e 74 57 72 61 70 70 65 72 3a 69 2c 6d 65 61 73 75 72 65 72 3a 65 7d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 69 2d 61 6d 70 68 74 6d 6c 2d 73 73 72 22 29 7d 28 74 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 2e 24 7b 61 28 6d 29 7d 60 29 2c 69 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 2e 24 7b 61 Data Ascii: luid"==t\|\|"intrinsic"==t}(t)}buildCallback(){const{element:t}=this,{content:n,contentWrapper:i,measurer:e}=function(t){if(function(t){return t.hasAttribute("i-amphtml-ssr")}(t))return function(t){const n=t.querySelector(`.${a(m)}`),i=t.querySelector(`.${a
2023-12-12 20:40:14 UTC	1578	IN	Data Raw: 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 6c 65 74 20 65 3d 30 2c 6f 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 6f 3d 6e 75 6c 6c 2c 65 3d 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 73 2c 31 30 30 29 2c 6e 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 65 3d 30 2c 6f 26 26 72 28 6f 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 74 29 7b 65 3f 6f 3d 74 3a 72 28 74 29 7d 7d 28 74 68 69 73 2e 77 69 6e 2c 28 28 29 3d 3e 74 68 69 73 2e 6d 75 74 61 74 65 45 6c 65 6d 65 6e 74 28 28 28 29 3d 3e 7b 74 68 69 73 2e 77 38 28 29 2c 74 68 69 73 2e 6d 67 28 29 7d 29 29 29 29 29 3b 74 2e 6f 62 73 65 72 76 65 28 74 68 69 73 2e 4e 44 29 2c 74 2e 6f 62 73 65 72 76 65 28 74 68 69 73 2e 66 67 Data Ascii: ver(function(t,n,i){let e=0,o=null;function r(i){o=null,e=t.setTimeout(s,100),n.apply(null,i)}function s(){e=0,o&&r(o)}return function(...t){e?o=t:r(t)}}(this.win,(()=>this.mutateElement((()=>{this.w8(),this.mg()})))));t.observe(this.ND),t.observe(this.fg
2023-12-12 20:40:14 UTC	405	IN	Data Raw: 6b 69 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 69 2d 61 6d 70 68 74 6d 6c 2d 66 69 74 2d 74 65 78 74 2d 6d 65 61 73 75 72 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 7a 2d 69 6e 64 65 78 3a 31 21 69 6d 70 6f 72 74 61 6e 74 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 5c 6e 2f 2a 23 20 73 6f 75 72 63 65 55 52 4c 3d 2f 65 78 74 65 6e 73 69 6f 6e 73 2f 61 6d 70 2d 66 69 74 2d Data Ascii: kit-box;-webkit-box-orient:vertical;overflow:hidden}.i-amphtml-fit-text-measurer{position:absolute!important;top:0!important;left:0!important;z-index:1!important;visibility:hidden!important;line-height:1.15em!important}\n/*# sourceURL=/extensions/amp-fit-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.22	50046	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	824	OUT	GET /w/1.0/sd?id=539237773&val=985ce834-0b5c-1dd8-f7d7179d HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5
2023-12-12 20:40:14 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.22	50022	52.70.100.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	745	OUT	GET /bsw_sync?ssp=pubmatic&bsw_user_id=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: t.pswec.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:14 UTC	759	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 12 Dec 2023 20:40:14 GMT Location: https://t.pswec.com/ul_cb/bsw_sync?ssp=pubmatic&bsw_user_id=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d P3P: CP="NON DSP ADMo DEVo TAIo PSAo PSDo IVAo IVDo CONo OUR UNRo IND ONL UNI PUR COM NAV INT DEM STA PRE" Set-Cookie: tuuid=2c80b275-6a96-4623-a12b-c0c93c69aed9; path=/; expires=Thu, 11-Dec-2025 20:40:14 GMT; domain=.pswec.com; samesite=none; secure Set-Cookie: c=1702413614; path=/; expires=Thu, 11-Dec-2025 20:40:14 GMT; domain=.pswec.com; samesite=none; secure Set-Cookie: tuuid_lu=1702413614; path=/; expires=Thu, 11-Dec-2025 20:40:14 GMT; domain=.pswec.com; samesite=none; secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.22	50032	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	637	OUT	GET /avatar/f7f6fb5e9a83603612b1e39a984cb981?s=100&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:15 UTC	461	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/png Content-Length: 5399 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/f7f6fb5e9a83603612b1e39a984cb981?s=100&d=identicon&r=g>; rel="canonical" Access-Control-Allow-Origin: * Expires: Tue, 12 Dec 2023 20:45:14 GMT Cache-Control: max-age=300 X-nc: HIT mia 2 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2023-12-12 20:40:15 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 14 c9 49 44 41 54 78 9c dd 5d 79 70 13 57 9a ff 75 ab 75 b5 4f 39 86 29 c2 a4 76 13 4c 36 01 9c 40 0c a9 c9 c1 91 0c 21 09 39 30 0c 16 e0 61 92 60 02 18 b0 37 3b 3b a9 90 25 dc 24 ce d4 d4 d4 56 cd e2 70 1f 93 09 0b d8 49 c5 e1 88 19 98 22 31 a1 2a b5 33 c6 b3 a9 32 50 9b c5 ec 91 d9 24 35 5c 96 64 5b 92 65 a9 df fe 21 3f b9 d5 ea e3 b5 d4 12 c7 ef 3f f5 f1 ba d5 5f 7f ef 7b df f7 7e fd 7b dc 27 c1 7d 64 96 fb 15 64 0b 97 a2 17 d0 15 3d 87 8f 83 bb 71 59 fa ce f2 f6 f3 b8 02 cc 74 57 03 00 5a 43 07 d0 47 7a 2c bf c6 70 fe 4e cc 11 5f 45 99 30 0e a3 84 31 96 b7 4f 71 38 f4 5b 70 2f 5f 9b 4c Data Ascii: PNGIHDRddpTpHYs+IDATx]ypWuuO9)vL6@!90a`7;;%$VpI"1*32P$5\d[e!??_{~{'}dd=qYtWZCGz,pN_E01Oq8[p/_L
2023-12-12 20:40:15 UTC	1369	IN	Data Raw: c1 3d b8 2c 65 5e c7 a2 90 67 ef 00 4c 65 e5 ac 90 67 ef 9f 86 0e a4 ec 1f 25 8c 45 a9 6d 84 a9 36 27 38 1e 87 93 73 a3 9f 84 52 f6 a9 0e 59 a6 bb e6 a0 84 1f 66 ea 22 3c 78 78 c5 5a d5 7d 34 2b 6f f4 1c 41 6d fe 3a 94 f2 e6 fe 80 12 22 97 0f af 58 8b 6d 25 ad a8 16 eb 50 c8 17 27 b2 f2 6d 25 ad f0 8a b5 10 b9 fc 8c ae 51 ca 8f 40 6d fe 3a 34 16 1f c5 d3 2e af 6a 29 05 00 bc 62 ad e9 91 5f 09 3f 0c d3 5d 73 54 f7 a5 c4 10 07 e7 c4 4e cf 1f 50 c4 97 98 ba 08 c5 eb 3e 6f 4a 30 55 8e b2 94 59 39 2b cc 64 ef ca ac 9c 15 7a d9 bb 32 86 8c 12 c6 e0 d7 c5 cd cc 6d cb e1 97 ae 63 69 f7 53 88 90 fe a4 ed 29 a6 9d e1 aa 4a db 18 00 30 4f 5c 01 a3 00 47 b3 f2 46 cf 51 d4 e6 af 33 ec 7f f3 b9 c2 41 8f 38 8e 6a b1 9e 29 7b cf e3 0a 51 2d d6 63 5b c9 71 78 c5 5a e4 1b Data Ascii: =,e^gLeg%Em6'8sRYf"<xxZ}4+oAm:"Xm%P'm%Q@m:4.j)b_?]sTNP>oJ0UY9+dz2mciS)J0O\GFQ3A8j){Q-c[qxZ
2023-12-12 20:40:15 UTC	1369	IN	Data Raw: 4f 5a f7 f4 7f b1 ff c2 3a 7f 4d d2 87 31 4a 98 89 53 46 59 39 2b d4 b2 f7 94 51 56 2e 48 6c 4a e8 8d 80 3c fc 30 6c 2e da 8b 91 b6 bb 4d b5 a9 c4 b7 b1 ff c6 5a 7f 0d ba a5 2b 29 fb d2 1d c9 65 83 8c a7 99 87 b0 96 e4 ad 2a b5 ab e5 08 1e be 14 9b 8b f6 65 6c 0c 8a b8 51 16 25 79 8a 15 b9 0e 6b 49 5e 59 6a 57 83 61 a6 9e 0b 12 1b 85 7c 44 e4 e1 87 61 53 d1 9e b4 bb 29 2d c4 bb af c5 e8 96 ae 58 5e 0d b0 82 8c c7 5c cb ea 97 c2 e4 78 e8 10 59 7c ed 49 b2 bf ef 37 c4 1f eb 36 55 a3 61 45 8f e4 27 ef f8 57 92 6f a2 5d 59 69 9f 10 42 be 89 76 91 77 fc 2b b3 56 2f f3 c7 ba c9 fe be df 90 c5 d7 9e 24 c7 43 87 48 bf 14 66 3e 97 39 35 cd 05 89 0d 88 77 81 ab 0b 1b 71 97 6d 54 56 da 07 80 bb 6c a3 b0 ba b0 d1 f2 3a 19 45 26 64 3c c3 2e 4b 2f 7b b7 82 c4 76 bb c0 Data Ascii: OZ:M1JSFY9+QV.HlJ<0l.MZ+)e*elQ%ykI^YjWa\|DaS)-X^\xY\|I76UaE'Wo]YiBvw+V/$CHf>95wqmTVl:E&d<.K/{v
2023-12-12 20:40:15 UTC	1292	IN	Data Raw: a6 c1 5f 0d 66 06 04 b7 22 f4 14 e5 d4 82 35 0d fe 6a 50 0e 08 78 20 35 30 ab 41 19 ac 8d e4 64 59 06 04 b7 22 e4 81 59 0d a9 c1 da 58 4e 56 3e 20 e0 01 36 45 39 79 b0 56 06 7f 35 b0 0c 08 6e 45 b0 28 ca c9 83 b5 32 f8 ab 41 3e 20 e0 59 15 e5 e4 c1 9a 55 4e 56 6f 40 70 2b 82 55 51 4e 1e ac 59 e5 64 e9 80 40 30 a3 f3 5e e1 98 8a 31 f6 0a 66 39 d9 db 2d 96 98 51 23 9d e5 7e 05 97 a2 17 98 e5 64 e9 80 20 27 8a 72 79 5c 81 29 4d e0 ad bd 1b 50 93 f7 06 f3 8a 71 74 be 9a b5 4a 10 26 41 ec ed fb 15 56 e4 6f 60 be a7 c3 a1 df a2 8f f4 64 5d 51 8e 37 a3 c1 ce 0a a5 56 7b 2e c8 78 b9 20 b1 99 d1 92 67 85 52 73 9e 07 86 96 45 dd 52 7c 24 23 c3 e4 0d 1a e2 3d 4f 2b 16 88 75 89 6f 0e 73 41 c6 cb 05 89 0d 18 5a de f5 3d 4f 7c 59 8c 74 e5 a9 a8 21 b6 14 1f c1 d3 2e 6f Data Ascii: _f"5jPx 50AdY"YXNV> 6E9yV5nE(2A> YUNVo@p+UQNYd@0^1f9-Q#~d 'ry\)MPqtJ&AVo`d]Q7V{.x gRsER\|$#=O+uosAZ=O\|Yt!.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.22	50035	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	704	OUT	GET /usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:15 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:15 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.22	50027	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	702	OUT	GET /xuid?mid=5989&xuid=CAESELGMgy-6umwNbd3_g9x-rnA&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:15 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:14 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:14 GMT; Secure; SameSite=None
2023-12-12 20:40:15 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.22	50048	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	758	OUT	GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzU3MTA2MjgxNjQ1MzYxMjQ5OTU2Ng%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:15 UTC	617	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://eb2.3lift.com/ebda?gdpr=0&gdpr_consent= Date: Tue, 12 Dec 2023 20:40:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 248 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:15 UTC	248	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://eb2.3lift.com/ebda?gdpr=0&gdpr_consent=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.22	50040	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	683	OUT	GET /usersync?b=opx&i=293b2f42-092f-04b7-0a33-f4e4b96c0202 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:15 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:15 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.22	50045	198.148.27.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:14 UTC	809	OUT	GET /bh/rtset?pid=558355&ev=1&rurl=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=4trFhcvjylTg; INGRESSCOOKIE=185d6ef7c41ed78f; pb_rtb_ev=3-1oif\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60\|7bq.0.1
2023-12-12 20:40:15 UTC	953	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-5c6449b65-gvtwm Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=4trFhcvjylTg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 06-Dec-2024 20:40:15 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1oif\|7bq.0.1\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60\|7dN.0.AAB3wk7K8YkAABTAD88gJQ;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Wed, 11-Dec-2024 20:40:15 GMT;Max-Age=31536000;SameSite=None Location: https://usersync.gumgum.com/usersync?b=pln&i=4trFhcvjylTg&ev=1&pid=558355 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.22	50056	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	995	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=90&external_user_id=2638779048715878353 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:15 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:15 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:15 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.22	50049	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	688	OUT	GET /xuid?mid=2662&xuid=y-JtLdWKpE2oRwLcdqEbEx_EYBPzStLf6GdRvCJtyUOA--~A&dongle=0883 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:15 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:15 GMT; Secure; SameSite=None
2023-12-12 20:40:15 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.22	50038	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	687	OUT	GET /usersync?b=oth&i=y-i5Vemz9E2pcAB3qsj5sq4a92wTUal4GhEbBQ~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:15 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:15 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.22	50060	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	697	OUT	GET /xuid?mid=3658&xuid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:15 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:15 GMT; Secure; SameSite=None
2023-12-12 20:40:15 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.22	50029	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	636	OUT	GET /avatar/2dba0e1f37c50ff66849dc68c4e4816a?s=80&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:15 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/png Content-Length: 1348 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/2dba0e1f37c50ff66849dc68c4e4816a?s=80&d=identicon&r=g>; rel="canonical" Access-Control-Allow-Origin: * Expires: Tue, 12 Dec 2023 20:45:15 GMT Cache-Control: max-age=300 X-nc: HIT mia 1 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2023-12-12 20:40:15 UTC	1348	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 f6 49 44 41 54 78 9c ed 9c 3d 6e 1b 31 10 85 1f 85 05 e4 22 ee 04 15 86 9a 24 45 0c b8 c9 15 74 0e b5 29 e3 22 17 70 e1 2b 38 65 5a 9d c3 57 48 63 c0 69 9c 46 50 21 b8 73 0a 09 30 c0 14 c2 c8 b2 bc 5c 3e 92 b3 5c ca d2 ab 0c 99 d8 a5 3e f1 6f e6 91 34 d6 5a 0b 42 57 f6 1e 73 2c bd e5 7e 99 af de 32 b7 78 c4 d4 ce bc e5 2e 70 0a 00 b8 c3 93 b7 ec c4 8c 30 c6 c0 5b ee 9b fd ed 2d 73 86 13 5c 9b 73 6f 39 00 e8 51 a5 14 15 02 ef d2 7c c2 a5 f9 b4 01 d9 a4 a9 9d e1 16 8f 1a 55 0c 52 56 80 a1 f0 2a 18 54 30 45 43 cc 06 30 06 9e a8 64 88 59 00 a6 c0 13 95 0a 31 0b c0 b9 f5 4f 3e 4d f0 44 21 10 Data Ascii: PNGIHDRPPpHYs+IDATx=n1"$Et)"p+8eZWHciFP!s0\>\>o4ZBWs,~2x.p0[-s\so9Q\|URV*T0EC0dY1O>MD!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.22	50044	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	786	OUT	GET /usersync/turn/7558899468789434902?dspret=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22zdxidn%22%3A%222069.80%22%2C%22nxtrdr%22%3Afalse%7D
2023-12-12 20:40:15 UTC	714	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:15 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Wed, 11 Dec 2024 20:40:15 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D97%263pid%3DRX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 connection: close
2023-12-12 20:40:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.22	50034	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	636	OUT	GET /avatar/ba51f84bcae9a5f5db84699198452d64?s=80&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:15 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/png Content-Length: 1200 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/ba51f84bcae9a5f5db84699198452d64?s=80&d=identicon&r=g>; rel="canonical" Access-Control-Allow-Origin: * Expires: Tue, 12 Dec 2023 20:45:15 GMT Cache-Control: max-age=300 X-nc: HIT mia 1 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2023-12-12 20:40:15 UTC	1200	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 62 49 44 41 54 78 9c ed 9c b1 4e 1b 41 10 86 7f 6c 3f 80 ad 9c 44 4a e8 28 89 6b 9a 28 96 db 28 32 52 6a 14 a4 b4 41 4a 44 de 20 89 88 94 3a 52 50 5e 00 84 d2 22 a2 14 81 32 40 e9 ce 2e 41 3a 64 3f 00 96 53 2d d8 e7 bd db d9 9d b9 b5 ef bc 7f e5 33 eb f5 dd a7 9d dd 9d f9 17 af bc 3b f8 34 06 41 df de 7f 34 b6 e9 f6 7b d8 58 5b a7 74 37 37 51 ef 71 ef eb 67 52 7f 15 ee 0d 29 75 fb 3d 1c 9e 1c 49 75 97 9b 0e 4f 8e d0 ed f7 c4 fa 13 01 a8 e0 dd 8f 46 12 dd e5 aa fb d1 48 14 22 1b 60 91 e0 29 49 42 64 01 2c 22 3c 25 29 88 35 d7 0f da c0 a3 4e c8 fb 3b bb 78 fa 24 ca 6c 73 73 17 e3 cb cf 1f Data Ascii: PNGIHDRPPpHYs+bIDATxNAl?DJ(k((2RjAJD :RP^"2@.A:d?S-3;4A4{X[t77QqgR)u=IuOFH"`)IBd,"<%)5N;x$lss

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.22	50054	3.93.99.238	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	1255	OUT	GET /qmap?c=1389&tp=STSC&tpid=c2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3Dc2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553%26partner_url%3Dhttps%253A%252F%252Fssc-cms.33across.com%252Fps%252F%253Fus_privacy%253D1---%2526xi%253D45%2526xu%253Dc2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2023-12-12 20:40:15 UTC	536	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.8.64 Location: https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=c2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553&partner_url=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D1---%26xi%3D45%26xu%3Dc2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.22	50062	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	2399	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=0&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; chkChromeAb67Sec=3; SPugT=1702413613; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; pi=157108:3; DPSync3=1703548800%3A259_256_260_201_263_262_261_258%7C1703376000%3A257%7C1702425600%3A248_255%7C1702944000%3A265; SyncRTB3=1703548800%3A166_240_231_8_5_264_249_104_48_13_178_46_96_22_56_233_220_71_21_3_176_55_234_214_7_165_54_250%7C1704931200%3A224%7C1702944000%3A15_2_223%7C1703635200%3A35%7C1703203200%3A63; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; PugT=1702413613
2023-12-12 20:40:15 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:05:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:05:52 GMT; path=/ Set-Cookie: PugT=1702379152; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:05:52 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:15 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.22	50020	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	746	OUT	GET /sync?ssp=triplelift&user_id=3571062816453612499566&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:15 UTC	296	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //r.bidswitch.net/sync?bidswitch_ssp_id=triplelift&bsw_custom_parameter=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.22	50071	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	1288	OUT	GET /merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF
2023-12-12 20:40:15 UTC	2428	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:15 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjcFOwzAQRP8lZ1ay12vvmluSJlVVVCiCqOJSOXYiCOXQ0qoqiH%2FHuexh3tuZ3wKL%2B6IpW4%2FEqLRpqHELX7LVtV6U1nHVtm1xVyBnzxitA48GIlEESkZAtHeQYqCIvRpliNn1cyc6I8xekbC2wmKsyUhMRg9bfNHrxStohlW1dHNOOX%2FbTe26knC5bVL4bPRW3qtTuTzOlfP88y4vSaDBOTAoCKRGhiCWIWp2lFKGpgelbH6heWqabvv6%2FO3dIXRPfF1PX3joVv50udbdY19tP372t83xzNlnl%2F0eB7F2RIi9DKDcEAHDSGDzVV6SidoVf%2F%2B7wE96; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.22	50063	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	1267	OUT	GET /merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF
2023-12-12 20:40:15 UTC	2428	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:15 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjcFOwzAQRP8lZ1ay12vvmluSJlVVVCiCqOJSOXYiCOXQ0qoqiH%2FHuexh3tuZ3wKL%2B6IpW4%2FEqLRpqHELX7LVtV6U1nHVtm1xVyBnzxitA48GIlEESkZAtHeQYqCIvRpliNn1cyc6I8xekbC2wmKsyUhMRg9bfNHrxStohlW1dHNOOX%2FbTe26knC5bVL4bPRW3qtTuTzOlfP88y4vSaDBOTAoCKRGhiCWIWp2lFKGpgelbH6heWqabvv6%2FO3dIXRPfF1PX3joVv50udbdY19tP372t83xzNlnl%2F0eB7F2RIi9DKDcEAHDSGDzVV6SidoVf%2F%2B7wE96; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.22	50047	34.96.105.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	632	OUT	GET /v1/api/sync/openx HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b=6578C52C4BC40314243CDFDBBLIS
2023-12-12 20:40:15 UTC	521	IN	HTTP/1.1 307 Temporary Redirect Location: https://eu-u.openx.net/w/1.0/sd?id=539732443&gdpr=&gdpr_consent=&val=6578C52C4BC40314243CDFDBBLIS&r=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2Fopenx%3Fpartner_device_id%3D6578C52C4BC40314243CDFDBBLIS Set-Cookie: b=6578C52C4BC40314243CDFDBBLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Content-Length: 0 Date: Tue, 12 Dec 2023 20:40:15 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.22	50039	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	671	OUT	GET /usersync?b=dit&i=di_1296d48b0e654caba2d72 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:15 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:15 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.22	50041	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	683	OUT	GET /usersync?b=vnt&i=8a323469-881a-408a-9858-5975924b765a HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:15 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:15 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.22	50065	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	1513	OUT	GET /merge?pid=94&3pid=6578C52BA3E5B7861049C694BLIS&gdpr=0&gdpr_consent= HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF
2023-12-12 20:40:16 UTC	172	IN	HTTP/1.1 301 Moved Permanently Content-length: 0 Location: https://ce.lijit.com/merge?pid=94&3pid=6578C52BA3E5B7861049C694BLIS&gdpr=0&gdpr_consent= Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.22	50052	142.250.217.228	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	871	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AP5ubKfMPba992ylsec_VGDaaDlm2JokpCOfiQUUtLEr7-b0bK63PO3hxR7Yv8Qb5pTuQ1MwBcKIUwIU9SG65Jw
2023-12-12 20:40:15 UTC	847	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Tue, 12 Dec 2023 20:40:15 GMT Date: Tue, 12 Dec 2023 20:40:15 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-8Ndgm31M1y19QAjhSv8uYQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-12 20:40:15 UTC	405	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 38 4e 64 67 6d 33 31 4d 31 79 31 39 51 41 6a 68 53 76 38 75 59 51 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="8Ndgm31M1y19QAjhSv8uYQ">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2023-12-12 20:40:15 UTC	431	IN	Data Raw: 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 61 22 29 3f 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 62 22 29 3a 22 22 29 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 72 63 3a 3a 65 22 2c 70 61 72 73 65 49 6e 74 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 Data Ascii: .data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorag
2023-12-12 20:40:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.22	50051	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	1849	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA9_10D97F8E3_7A5609BE&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; PugT=1702413613; chkChromeAb67Sec=3; pi=156212:4; DPSync3=1703548800%3A262_261_201_263_256_260_259_258%7C1703376000%3A257%7C1702425600%3A255_248%7C1702944000%3A265; SyncRTB3=1703635200%3A35%7C1707523200%3A69%7C1704931200%3A224%7C1703548800%3A250_240_233_7_165_96_214_54_176_56_13_220_21_166_46_99_3_249_243_81_48_231_178_71_55_5_264_104_22_8_234_238%7C1703203200%3A63%7C1702944000%3A223_38_15_2
2023-12-12 20:40:15 UTC	657	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:14 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:14 GMT; path=/ Set-Cookie: PugT=1702413614; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:14 GMT; path=/ Location: https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.22	50067	3.213.9.240	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	743	OUT	GET /pbmtc.gif?puid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:15 UTC	446	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=0d2b585e-dbe9-4680-8c70-3d0a0e81332d; expires=Thu, 12 Dec 2024 20:40:15 GMT; path=/; secure; samesite=none Set-Cookie: ss=7UkAu4JBMzE1aNIs%2BRMziitYfTqLIbZ70Kfc5Sb%2B0ClSOVKv2dEqydBwpceqeA9%2BkfM0T15N1I3TtwQrF5jmfg%3D%3D; expires=Thu, 12 Dec 2024 20:40:15 GMT; path=/; secure; samesite=none
2023-12-12 20:40:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.22	50033	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	636	OUT	GET /avatar/8aa3206ec1e859b32f90e17f138f0450?s=80&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:15 UTC	539	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/png Content-Length: 12201 Connection: close Last-Modified: Fri, 07 Mar 2014 17:26:46 GMT Link: <https://gravatar.com/avatar/8aa3206ec1e859b32f90e17f138f0450?s=80&d=identicon&r=g>; rel="canonical" Content-Disposition: inline; filename="8aa3206ec1e859b32f90e17f138f0450.png" Access-Control-Allow-Origin: * Expires: Tue, 12 Dec 2023 20:45:15 GMT Cache-Control: max-age=300 X-nc: HIT mia 1 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2023-12-12 20:40:15 UTC	830	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 da 5d bc d9 af 65 59 72 de f7 8b b5 d6 de e7 9c 3b e4 cd a9 b2 06 16 bb d9 c5 16 87 26 5b 94 ba 41 da f4 04 01 96 01 59 36 0c 18 06 0c f8 c5 7e f2 df e3 67 bf da 06 08 01 84 24 43 80 20 40 30 04 8b a2 24 37 5b 1c ba c9 9e 87 1a ba 2a e7 bc c3 99 f6 de 6b ad 08 3f c4 da fb de ec 2c 24 b2 f2 d6 ad 73 cf 59 3b 56 c4 17 df f7 45 c8 0f ff e5 ff 6e 66 06 c0 fc 27 18 aa 4a 08 82 99 a1 ea ff 6d 1c 47 36 9b 35 a2 8a 99 d1 f7 2b f6 fb 3d 15 e3 78 28 a4 94 e8 3a 08 a6 58 30 08 1d 39 77 fc d1 1f fd 31 bf fe 9b bf ca ff f4 bf fc f7 dc 7f ef 11 5f fc f8 87 4c 37 d7 44 02 ef bf ff 3e Data Ascii: PNGIHDRPPpHYs+ IDATx]eYr;&[AY6~g$C @0$7[*k?,$sY;VEnf'JmG65+=x(:X09w1_L7D>
2023-12-12 20:40:15 UTC	630	IN	Data Raw: bf 1c a0 5f d7 ea 3f 40 41 f0 03 54 ab 88 08 29 25 fa ae 03 ab 08 42 d7 77 3c 90 fb 18 81 61 18 10 11 ba ae 23 09 48 04 93 c4 7e a7 74 29 11 a3 a0 5a 31 ab 7e fd 24 12 52 84 10 c1 94 88 22 56 99 f2 c0 7e 38 50 62 64 ca 95 e7 97 5b ca ab 37 3c 7d 79 43 d0 8a 85 c8 37 37 0f 79 f7 03 23 c6 c8 66 bd 46 6b f5 07 6f 19 41 a8 f9 48 4a 42 c9 8a 6a 05 8c be ef 58 af d7 a4 94 08 c1 23 57 c4 a3 59 24 f8 03 35 3c 55 b4 52 70 b8 39 62 66 ac d7 6b 4a 29 64 2b a8 cd d1 58 30 53 d2 e5 e5 e5 f2 14 fc 00 b5 15 11 7f 12 a6 86 a2 c4 18 d9 ef f7 a4 2e 62 5a 08 41 e8 fb 15 37 37 37 04 e9 18 86 01 80 d5 6a 45 c4 90 00 2a 91 ed b6 50 6a 26 a5 40 ea 04 44 51 33 0c 41 09 54 13 4c 22 63 2e fc f0 67 3f e3 fb 3f fe 11 bb c3 91 ed ee 48 ad 95 f2 e2 15 b5 54 f6 bb 91 69 cc 9c 9e 6d f8 Data Ascii: _?@AT)%Bw<a#H~t)Z1~$R"V~8Pbd[7<}yC77y#fFkoAHJBjX#WY$5<URp9bfkJ)d+X0S.bZA777jE*Pj&@DQ3ATL"c.g??HTim
2023-12-12 20:40:15 UTC	1369	IN	Data Raw: ff 3e 5f fb f5 5f c1 4c c8 b5 50 6c 44 a2 b0 d9 9c d0 c5 e4 b0 a5 56 4a 35 b2 56 72 ad 58 10 3f 14 55 ac 56 82 79 11 19 86 4c 8c 1d 21 24 cf d7 e6 b7 27 06 2f 84 24 9d ab b0 b5 0a 2c 40 c5 d4 61 c4 dd 2b 3c e7 c0 f5 7a 8d aa 92 52 6a 39 b1 07 84 61 38 82 28 29 45 52 e8 11 31 20 61 b5 27 c5 b4 e4 1e cc 18 f3 c4 77 bf f7 1d 5e bc 78 c1 61 1c b9 78 78 41 c9 99 94 12 53 ae 88 24 cc 8c 69 34 6a 11 a6 c9 fc 03 d6 4a 68 55 fb 70 1c a9 c5 88 71 45 08 09 d5 c0 cb 57 57 fc 5f ff c7 3f e2 cb 1f 3c e4 bf fb af ff 3e 53 06 d5 56 a8 72 e6 48 25 b6 ca 9b 82 57 ed 7e b5 82 18 91 20 88 40 94 40 24 10 24 70 b9 bd 66 b3 39 65 b3 39 75 08 63 86 35 9c 68 c0 54 07 d2 ab 57 2f 30 b4 01 0a 4f f4 82 47 9f 99 20 38 c6 8a 31 b2 db ed 38 1c 0e 0b 76 3a 3b 3b e3 f2 f2 12 09 0e b2 b5 Data Ascii: >__LPlDVJ5VrX?UVyL!$'/$,@a+<zRj9a8()ER1 a'w^xaxxAS$i4jJhUpqEWW_?<>SVrH%W~ @@$$pf9e9uc5hTW/0OG 818v:;;
2023-12-12 20:40:15 UTC	1369	IN	Data Raw: 27 a7 ec d6 6b aa 15 72 2e 1c 8f 47 6a 55 4e 4f 36 84 90 c8 53 65 1c 27 ca 38 51 8b 32 0d 99 92 2b d3 54 c8 93 82 2a d1 14 09 46 58 f5 68 72 bc 3a 4d 85 f1 38 52 55 3d 00 02 f4 5d 87 21 a4 55 cf 61 bf e3 f9 f3 67 48 83 6b f3 87 32 d5 46 b1 b5 d6 d5 fa d6 b9 80 6a 61 6c 88 c0 d4 69 33 64 0e aa c6 95 56 21 bd 7e fd 6a 81 30 aa 9e 88 b5 ea 72 85 67 90 1d 42 f0 08 4c 11 13 71 c0 9c 3a b6 37 d7 c4 60 1c 0e 07 c6 d1 31 9c c4 44 4a 42 8c 2b 5e bf 9e 7b e5 89 c3 61 0f 54 8e c7 1d 39 67 ba ae 63 bd 3a 45 55 99 a6 4c 29 42 cd 42 c9 89 69 aa 94 dc 51 4a a4 66 c1 4a 46 6b 21 e7 01 09 5e 50 10 e7 17 bb 2e 92 c2 09 bb dd 9e c3 f1 40 b7 5e d1 85 44 88 86 08 6c 4e 56 bc f3 f8 31 22 76 7b 1d f1 8e 64 a6 b6 1c b6 45 6f 24 f0 1c 38 1c 46 ce ce ee a1 d5 5b 5a 13 a5 d6 82 04 Data Ascii: 'kr.GjUNO6Se'8Q2+T*FXhr:M8RU=]!UagHk2Fjali3dV!~j0rgBLq:7`1DJB+^{aT9gc:EUL)BBiQJfJFk!^P.@^DlNV1"v{dEo$8F[Z
2023-12-12 20:40:15 UTC	1369	IN	Data Raw: ba d8 d8 9e ea d1 67 ab d6 27 77 ec 76 03 a5 b4 ab dd 90 b2 da e0 d5 58 9d ea 53 0b a4 17 2f 5e f8 a1 a8 b6 52 ae 0b f6 9b 43 16 a4 e9 c2 83 73 63 02 31 1a 5a 95 69 f2 43 9e a6 71 79 08 21 45 a7 f1 63 cf e1 b0 a3 d4 53 6e b6 85 5a 85 4d 12 be f2 78 c3 c9 d7 be c4 0f 7f fa 94 17 bb 91 a2 81 c3 7e cf 64 f0 e8 de 3d b4 0e 48 c9 f4 12 e9 42 cf a8 c6 34 56 52 5a 13 63 c7 f9 c5 29 3f 78 fa 19 b1 c2 e6 e4 94 92 8f 68 86 55 bf 41 a2 10 ef 9f f0 ea 5a 18 72 45 fb 35 df fd eb 1f 73 ba 32 fe d6 6f fd 1a aa c5 0f 70 81 2f 5d 43 1f 60 d5 35 e8 10 7a 86 61 e0 e4 e4 64 c9 79 a6 ea 44 85 01 e6 7a b6 9a b8 26 b2 e4 c4 05 17 e9 9d c4 e9 72 67 ce 85 93 93 d3 d6 5c 57 62 f2 ab 56 b2 1f 74 ce 79 a9 54 b1 8b 18 95 18 7a 62 0c bc 7e fd bc 75 35 c6 26 c1 f9 4a 29 e7 89 fb 2b 38 Data Ascii: g'wvXS/^RCsc1ZiCqy!EcSnZMx~d=HB4VRZc)?xhUAZrE5s2op/]C`5zadyDz&rg\WbVtyTzb~u5&J)+8
2023-12-12 20:40:15 UTC	1369	IN	Data Raw: 7e e0 fe fd 7b ec 0e 95 ed 61 c7 8b cb 81 dd 00 bb 01 02 01 91 8e 9a 95 5e 22 64 73 76 be 59 27 34 40 51 e1 30 55 f6 53 86 a0 24 51 de ff e0 82 af 7d fd ab 1c c6 1d 36 18 aa 33 fb 5c 30 f2 5b 4d c3 ac 7f d4 ea 06 a2 d7 af de bc 15 81 7e d0 5e 40 4a 56 44 94 24 ad 12 2d ac c4 cc d6 fe 92 18 ee 5a 47 58 f2 48 4a de e2 ac fa 55 fb 9a bb 3e bb ae 27 76 a9 49 90 81 d8 ad 78 f4 ee 13 5e 5f 3e 63 d5 47 0e 43 e6 f3 57 6f 78 7c 92 58 53 d1 ac ec 0f 99 eb ed c1 2d 24 9b 13 7e f8 e9 33 46 eb f9 fc f5 9e a7 6f f6 bc ba dc 71 b6 5a 73 71 d2 d1 f5 6b 92 2a 49 a0 58 65 54 a3 20 0c 5a 39 8e c6 2e 0b db b1 12 43 e4 ec b4 e3 1b bf ff 3b 6c 2e 36 9c 9e ac e8 3a 37 46 06 e9 9a 15 ab 2e f8 ee 2e de 3b 1e 8f 1c 0e 47 1e dc 7f bc e0 41 2f 24 de b1 d0 04 2c a5 92 5c b2 b3 85 77 Data Ascii: ~{a^"dsvY'4@Q0US$Q}63\0[M~^@JVD$-ZGXHJU>'vIx^_>cGCWox\|XS-$~3FoqZsqk*IXeT Z9.C;l.6:7F..;GA/$,\w
2023-12-12 20:40:15 UTC	1369	IN	Data Raw: 37 a2 5b e2 5b df fe 73 7e f4 93 9f d2 75 1d 27 eb 0d 67 e7 f7 e9 25 51 4b 61 bf 3b 20 d5 d0 d0 71 d4 4c ad 46 cd c6 70 7d 43 34 f8 e8 c1 05 e7 5d cf 26 46 82 19 b9 1a 16 02 5b 73 57 40 41 1d 42 39 c9 74 47 45 14 02 42 29 81 dd 5e f9 37 ff ee 3b 7c f2 d9 33 fe c7 ff e1 bf e1 ab 5f fe 80 2e 41 a4 b4 c8 4b cb 67 14 a4 39 32 8c 29 67 4e cf ce 31 0a b5 18 b5 1a b9 54 ea 34 51 da 4d ab b5 62 b5 22 ff ee 1f ff 6f 36 13 03 b7 b9 8f 3b ff ee e4 c2 f6 66 cb d9 d9 d9 82 93 42 08 5e 75 cd a8 22 8b 32 37 1b b6 bf f3 dd 1f f2 8f ff c9 bf 60 18 8c 27 f7 ce 59 a7 8e 71 c8 d4 ac 4c cd 0d 55 8a 32 9a 71 cc 13 1d c6 a3 f3 73 ba 5a 58 87 c0 7b 17 0f 48 6a 4c 79 e0 a8 13 55 85 52 03 97 e3 c4 55 29 5c d6 4c 31 ef 46 8a 2a c1 92 eb ba b5 12 cc 05 fe 10 05 b3 4c ea 03 8f ee ad Data Ascii: 7[[s~u'g%QKa; qLFp}C4]&F[sW@AB9tGEB)^7;\|3_.AKg92)gN1T4QMb"o6;fB^u"27`'YqLU2qsZX{HjLyURU)\L1F*L
2023-12-12 20:40:15 UTC	1369	IN	Data Raw: 94 5a 9f 6d 6f b5 82 4b 2b 69 cd 0d b5 b4 5d b3 66 6b cb 6b d3 e8 b8 bb e6 9f 99 8a 9a cd 02 62 61 69 37 b5 56 a6 22 e4 a6 03 8f b9 72 98 7c e8 a7 ca 8a ab ed c4 ff fd cf fe 39 df f8 bb bf c7 fb ef 3e 41 9a 31 fe 2e 77 da 75 89 54 4a 6d 5f 08 94 d2 f2 4f 50 b6 fb 6b ae 76 37 14 cb bc be bc e1 f5 eb 23 87 5d 61 bf 1b 38 dd dc c3 82 b1 3b 1c 31 12 55 8d 49 47 56 29 d2 77 89 e3 71 a2 eb dd 9d d0 ad 12 e3 58 89 0d 98 ab ba 45 2d c5 b8 54 fc 52 0b 5a 6d 21 74 ed 4e 5f 7a 77 f5 80 10 16 bd 66 e6 2f cd 8c 6a f5 2d 5a de da 04 c0 3c 2c ee 93 46 d5 87 29 d5 f3 62 46 90 50 c9 d3 4c 0c 18 21 45 56 a9 27 11 89 62 6c f7 03 7f f6 1f fe 92 3f fc 83 3f e0 d7 3f fa 0a eb ce 81 f7 f2 be 4b 21 9d 9e de 73 dc d4 ca fe f6 b8 e5 d9 ab 67 1c c7 03 b9 66 a6 3c f1 ea d5 0d c3 41 Data Ascii: ZmoK+i]fkkbai7V"r\|9>A1.wuTJm_OPkv7#]a8;1UIGV)wqXE-TRZm!tN_zwf/j-Z<,F)bFPL!EV'bl???K!sgf<A
2023-12-12 20:40:16 UTC	1369	IN	Data Raw: 67 23 d1 6c a2 52 31 54 20 f6 1d 16 bc 21 d0 66 72 77 fd 23 62 04 8e 53 66 7f 3c 32 d5 4c 51 b7 a3 a8 d3 48 84 cb ab 2b 8a 29 5d bf f2 91 00 dc 9a db 77 6b 27 11 43 24 35 02 b1 2e 0a 9c 57 c5 18 13 5d d7 33 0c 23 31 a5 36 f9 e8 f9 2b 97 bc 0c 6f cf 83 39 f3 34 7c 0c 01 31 d7 6e bb 2e 70 76 7a d2 e6 8c db 78 c4 3c 7c 34 47 50 7b cd 79 8a 34 44 07 e9 7e 70 b6 24 cd b7 0c 51 8d de ef bb 6e e9 83 6d e1 0b 1d 0c 37 b7 2e 31 26 c6 69 6a 7e c2 46 6d 98 bb bd 2a 30 e6 02 d1 85 74 09 15 93 82 92 21 0a e1 cd cd 9e 6a 09 d5 c4 b8 af 58 0e 94 02 b5 75 06 12 23 d9 47 86 c9 a3 0f 00 1a 13 fd 3a 32 e5 11 09 91 da f6 bf cc b3 17 b4 cd 18 a2 15 b3 4c 2e 99 10 13 21 46 8a fa 83 a8 58 eb 77 61 cc 13 b5 16 ba 10 59 c7 8e 60 6e e2 94 25 cf 05 ba d8 91 62 a4 eb 02 31 54 c4 14 Data Ascii: g#lR1T !frw#bSf<2LQH+)]wk'C$5.W]3#16+o94\|1n.pvzx<\|4GP{y4D~p$Qnm7.1&ij~Fm*0t!jXu#G:2L.!FXwaY`n%b1T
2023-12-12 20:40:16 UTC	1158	IN	Data Raw: fb eb 3b d1 27 78 07 63 cc 2b 3c 3d 72 a3 04 a2 38 77 17 44 16 2b 5b 8c a9 1d ac b6 99 92 d6 73 b7 8e 45 6b 8b e6 e6 0f 9c 7f 85 96 7b 4d 8d 69 ca 1c 8e 03 d6 1c b8 b3 99 de 0c 12 18 e3 38 b4 a5 39 2b c7 3c cd 50 d3 f7 3d 3a 4d 8b 45 dd b5 da 59 7f d5 c5 d1 39 cf d6 cd 96 07 ad be 45 37 a5 44 ae e5 ad 79 33 e7 ff 84 2e 75 4c 53 c6 e7 2a da c2 46 09 a8 b8 ee 2a 51 de d2 44 82 cc bb 52 dd fc 34 df 82 5a e7 c4 2f 0b 65 45 eb 85 ef 1e 86 ef 3d 9d 73 69 5c fa 16 55 7f 48 cd fa f7 96 5f da dd b6 65 29 2e 31 44 72 1e 31 32 21 fa fb 4a 57 57 7b a6 31 37 b6 c4 27 80 24 86 05 b3 a5 98 c8 a1 b8 5c d8 88 82 bb ea d7 5d 93 f6 2d 9e 02 cc 13 6d 6c 7b 06 52 ea 6e f1 1a b7 bf 99 fb e5 f6 26 17 be ee 97 b6 49 ce 2b 94 7d 9e 4d 96 7e 55 ee 80 5f 66 ab 5f 13 05 e6 62 35 57 Data Ascii: ;'xc+<=r8wD+[sEk{Mi89+<P=:MEY9E7Dy3.uLSFQDR4Z/eE=si\UH_e).1Dr12!JWW{17'$\]-ml{Rn&I+}M~U_f_b5W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.22	50061	192.178.50.65	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	554	OUT	GET /rtv/012310301456000/v0/amp-form-0.1.mjs HTTP/1.1 Host: cdn.ampproject.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:16 UTC	1579	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="amphtml-china-available" Report-To: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]} Timing-Allow-Origin: * Content-Length: 41185 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Dec 2023 12:38:42 GMT Expires: Sat, 07 Dec 2024 12:38:42 GMT Cache-Control: public, max-age=31536000 ETag: "9817e561a46c70fa" Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 374493 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	1579	IN	Data Raw: 3b 0a 28 73 65 6c 66 2e 41 4d 50 3d 73 65 6c 66 2e 41 4d 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 7b 6d 3a 31 2c 76 3a 22 32 33 31 30 33 30 31 34 35 36 30 30 30 22 2c 6e 3a 22 61 6d 70 2d 66 6f 72 6d 22 2c 65 76 3a 22 30 2e 31 22 2c 6c 3a 21 30 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 28 28 29 3d 3e 7b 76 61 72 20 69 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 69 7c 7c 28 69 3d 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 29 7d 76 61 72 20 73 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 69 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 74 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 69 7d 29 29 7d 7d 3b 66 Data Ascii: ;(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-form",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function e(){return i\|\|(i=Promise.resolve(void 0))}var s=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}};f
2023-12-12 20:40:16 UTC	1579	IN	Data Raw: 73 68 28 64 29 29 7d 63 6f 6e 73 74 20 6f 3d 52 28 74 29 3b 69 66 28 6e 75 6c 6c 21 3d 6f 26 26 6f 2e 6e 61 6d 65 29 7b 63 6f 6e 73 74 7b 6e 61 6d 65 3a 74 2c 76 61 6c 75 65 3a 69 7d 3d 6f 3b 76 6f 69 64 20 30 3d 3d 3d 65 5b 74 5d 26 26 28 65 5b 74 5d 3d 5b 5d 29 2c 65 5b 74 5d 2e 70 75 73 68 28 69 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 30 3d 3d 65 5b 74 5d 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 74 5d 7d 29 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 63 6f 6e 73 74 7b 65 6c 65 6d 65 6e 74 73 3a 69 7d 3d 74 2c 7b 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3a 65 7d 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 73 3d 72 28 69 29 2e 66 69 6c 74 65 72 28 67 29 3b Data Ascii: sh(d))}const o=R(t);if(null!=o&&o.name){const{name:t,value:i}=o;void 0===e[t]&&(e[t]=[]),e[t].push(i)}return Object.keys(e).forEach((t=>{0==e[t].length&&delete e[t]})),e}function R(t){const{elements:i}=t,{activeElement:e}=t.ownerDocument,s=r(i).filter(g);
2023-12-12 20:40:16 UTC	1579	IN	Data Raw: 28 74 29 29 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 69 29 7b 63 6f 6e 73 74 20 65 3d 47 28 7a 28 74 29 29 3b 72 65 74 75 72 6e 20 57 28 65 2c 69 29 3f 71 28 65 2c 69 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 63 6f 6e 73 74 20 65 3d 42 28 74 2c 69 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 3b 63 6f 6e 73 74 20 6e 3d 4a 28 74 29 3b 72 65 74 75 72 6e 20 6e 5b 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 73 2c 7b 70 72 6f 6d 69 73 65 3a 69 2c 72 65 6a 65 63 74 3a 65 2c 72 65 73 6f 6c 76 65 3a 6e 7d 3d 74 3b 72 65 74 75 72 6e 20 69 2e 63 61 74 63 68 28 28 28 29 3d 3e 7b 7d 29 29 2c 7b 6f 62 6a 3a 6e 75 6c 6c 2c 70 72 6f 6d 69 Data Ascii: (t)),i)}function U(t,i){const e=G(z(t));return W(e,i)?q(e,i):null}function H(t,i){return function(t,i){const e=B(t,i);if(e)return e;const n=J(t);return n[i]=function(){const t=new s,{promise:i,reject:e,resolve:n}=t;return i.catch((()=>{})),{obj:null,promi
2023-12-12 20:40:16 UTC	1579	IN	Data Raw: 20 59 7d 28 29 2c 75 3d 21 28 6e 75 6c 6c 3d 3d 73 7c 7c 21 73 2e 63 61 70 74 75 72 65 29 3b 72 65 74 75 72 6e 20 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 69 2c 6f 2c 63 3f 73 3a 75 29 2c 28 29 3d 3e 7b 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 69 2c 6f 2c 63 3f 73 3a 75 29 2c 72 3d 6e 75 6c 6c 2c 6e 3d 6e 75 6c 6c 2c 6f 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 74 2c 69 2c 65 2c 73 29 7b 63 6f 6e 73 74 20 6e 3d 7b 64 65 74 61 69 6c 3a 65 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6e 2c 73 29 2c 6e 65 77 20 74 2e 43 75 73 74 6f 6d 45 76 65 6e 74 28 69 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 74 2c 69 2c 65 2c 73 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: Y}(),u=!(null==s\|\|!s.capture);return n.addEventListener(i,o,c?s:u),()=>{null==n\|\|n.removeEventListener(i,o,c?s:u),r=null,n=null,o=null}}function st(t,i,e,s){const n={detail:e};return Object.assign(n,s),new t.CustomEvent(i,n)}function nt(t,i,e,s){return e
2023-12-12 20:40:16 UTC	1579	IN	Data Raw: 70 70 65 6e 64 28 74 2c 69 29 7d 64 65 6c 65 74 65 28 74 29 7b 74 68 69 73 2e 6d 47 2e 64 65 6c 65 74 65 28 74 29 7d 65 6e 74 72 69 65 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 47 2e 65 6e 74 72 69 65 73 28 29 7d 67 65 74 46 6f 72 6d 44 61 74 61 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 47 7d 7d 2c 66 74 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 6c 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 73 75 70 65 72 28 74 29 2c 74 26 26 54 28 74 2e 65 6c 65 6d 65 6e 74 73 2c 28 74 3d 3e 7b 22 66 69 6c 65 22 3d 3d 74 2e 74 79 70 65 26 26 30 3d 3d 74 2e 66 69 6c 65 73 2e 6c 65 6e 67 74 68 26 26 28 74 68 69 73 2e 6d 47 2e 64 65 6c 65 74 65 28 74 2e 6e 61 6d 65 29 2c 74 68 69 73 2e 6d 47 2e 61 70 70 65 6e 64 28 74 2e 6e 61 6d 65 2c 6e 65 77 20 Data Ascii: ppend(t,i)}delete(t){this.mG.delete(t)}entries(){return this.mG.entries()}getFormData(){return this.mG}},ft=class extends lt{constructor(t){super(t),t&&T(t.elements,(t=>{"file"==t.type&&0==t.files.length&&(this.mG.delete(t.name),this.mG.append(t.name,new
2023-12-12 20:40:16 UTC	1579	IN	Data Raw: 61 64 65 72 73 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 22 6d 75 6c 74 69 70 61 72 74 2f 66 6f 72 6d 2d 64 61 74 61 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2c 65 2e 62 6f 64 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 69 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 65 3d 74 2e 6e 65 78 74 28 29 3b 21 65 2e 64 6f 6e 65 3b 65 3d 74 2e 6e 65 78 74 28 29 29 69 2e 70 75 73 68 28 65 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 69 7d 28 74 2e 65 6e 74 72 69 65 73 28 29 29 7d 76 61 72 20 73 3b 72 65 74 75 72 6e 7b 69 6e 70 75 74 3a 74 2c 69 6e 69 74 3a 65 7d 7d 76 61 72 20 52 74 3d 5b 22 57 65 62 6b 69 74 22 2c 22 77 65 62 6b 69 74 22 2c 22 4d 6f 7a 22 2c 22 6d 6f 7a 22 2c 22 6d 73 22 2c 22 4f 22 2c 22 6f 22 5d 2c 67 74 3d 7b 22 67 65 74 50 Data Ascii: aders["Content-Type"]="multipart/form-data;charset=utf-8",e.body=function(t){const i=[];for(let e=t.next();!e.done;e=t.next())i.push(e.value);return i}(t.entries())}var s;return{input:t,init:e}}var Rt=["Webkit","webkit","Moz","moz","ms","O","o"],gt={"getP
2023-12-12 20:40:16 UTC	1579	IN	Data Raw: 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 69 3d 51 28 74 29 3b 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 69 2e 6d 65 61 73 75 72 65 45 6c 65 6d 65 6e 74 28 28 28 29 3d 3e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 29 29 2c 72 74 28 74 2c 22 6d 6f 75 73 65 75 70 22 29 5d 29 2e 74 68 65 6e 28 28 65 3d 3e 7b 63 6f 6e 73 74 20 73 3d 65 5b 30 5d 3b 6c 65 74 20 6e 3d 30 3b 72 65 74 75 72 6e 20 69 2e 6d 65 61 73 75 72 65 4d 75 74 61 74 65 45 6c 65 6d 65 6e 74 28 74 2c 28 28 29 3d 3e 7b 6e 3d 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 7d 29 2c 28 28 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 29 7b 69 21 3d 65 26 26 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 53 74 29 7d 28 74 2c 73 2c 6e 29 7d 29 29 7d 29 29 7d 28 69 29 7d 29 29 Data Ascii: &function(t){const i=Q(t);Promise.all([i.measureElement((()=>t.scrollHeight)),rt(t,"mouseup")]).then((e=>{const s=e[0];let n=0;return i.measureMutateElement(t,(()=>{n=t.scrollHeight}),(()=>{!function(t,i,e){i!=e&&t.removeAttribute(St)}(t,s,n)}))}))}(i)}))
2023-12-12 20:40:16 UTC	1579	IN	Data Raw: 3d 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 62 6f 78 2d 73 69 7a 69 6e 67 22 29 3f 2d 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 70 61 64 64 69 6e 67 2d 74 6f 70 22 29 2c 31 30 29 2d 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 22 29 2c 31 30 29 3a 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 22 29 2c 31 30 29 2b 70 61 72 73 65 49 6e 74 28 69 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 22 29 2c 31 30 29 7d 29 2c 28 28 29 3d 3e 6f 2e 74 68 65 6e 28 28 69 Data Ascii: =i.getPropertyValue("box-sizing")?-parseInt(i.getPropertyValue("padding-top"),10)-parseInt(i.getPropertyValue("padding-bottom"),10):parseInt(i.getPropertyValue("border-top-width"),10)+parseInt(i.getPropertyValue("border-bottom-width"),10)}),(()=>o.then((i
2023-12-12 20:40:16 UTC	1579	IN	Data Raw: 75 62 62 6c 65 2d 6d 65 73 73 61 67 65 2d 24 7b 74 2e 69 64 7d 60 2c 69 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 2e 6d 65 73 73 61 67 65 2c 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 65 64 62 79 22 2c 69 2e 69 64 29 2c 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 61 6c 65 72 74 22 29 2c 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 69 76 65 22 2c 22 61 73 73 65 72 74 69 76 65 22 29 2c 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 2c 77 74 28 74 2e 62 75 62 62 6c 65 45 6c 65 6d 65 6e 74 2c 21 30 29 2c 66 75 6e Data Ascii: ubble-message-${t.id}`,i.textContent=t.message,t.bubbleElement.setAttribute("aria-labeledby",i.id),t.bubbleElement.setAttribute("role","alert"),t.bubbleElement.setAttribute("aria-live","assertive"),t.bubbleElement.appendChild(i),wt(t.bubbleElement,!0),fun
2023-12-12 20:40:16 UTC	1579	IN	Data Raw: 28 74 2e 77 69 6e 2c 22 76 73 79 6e 63 22 29 2c 74 68 69 73 2e 76 47 3d 6e 75 6c 6c 2c 74 68 69 73 2e 45 47 3d 22 22 2c 74 68 69 73 2e 70 73 3d 21 31 2c 74 68 69 73 2e 54 47 3d 74 2e 77 69 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 77 74 28 74 68 69 73 2e 54 47 2c 21 31 29 2c 74 68 69 73 2e 54 47 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 2d 61 6d 70 68 74 6d 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 62 75 62 62 6c 65 22 29 2c 74 68 69 73 2e 54 47 2e 5f 5f 42 55 42 42 4c 45 5f 4f 42 4a 3d 74 68 69 73 2c 74 2e 67 65 74 42 6f 64 79 28 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 54 47 29 7d 69 73 41 63 74 69 76 65 4f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 73 26 26 74 3d 3d Data Ascii: (t.win,"vsync"),this.vG=null,this.EG="",this.ps=!1,this.TG=t.win.document.createElement("div"),wt(this.TG,!1),this.TG.classList.add("i-amphtml-validation-bubble"),this.TG.__BUBBLE_OBJ=this,t.getBody().appendChild(this.TG)}isActiveOn(t){return this.ps&&t==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.22	50072	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	576	OUT	GET /w/1.0/sd?id=537141727&val=18072662090765666652 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:15 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.22	50066	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	1537	OUT	GET /merge?pid=86&3pid=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF
2023-12-12 20:40:15 UTC	2435	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:15 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjcFOwzAQRP8lZ1ay12vvmluSJlVVVCiCqOJSOXYiCOXQ0qoqiH%2FHuexh3tuZ3wKL%2B6IpW4%2FEqLRpqHELX7LVtV6U1nHVtm1xVyBnzxitA48GIlEESkZAtHeQYqCIvRpliNn1cyc6I8xekbC2wmKsyUhMRg9bfNHrxStohlW1dHNOOX%2FbTe26knC5bVL4bPRW3qtTuTzOlfP88y4vSaDBOTAoCKRGhiCWIWp2lFKGpgelbH6heWqabvv6%2FO3dIXRPfF1PX3joVv50udbdY19tP372t83xzNlnl%2F0eB7F2RIi9DKDcEAHDSGDzVV6SidoVf%2F%2B7wE96; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.22	50055	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	1005	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=2&external_user_id=ZXjEurXK3YbtORulaCkY0QAA%26633 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:15 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:15 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:15 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.22	50069	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	1288	OUT	GET /merge?pid=27&3pid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF
2023-12-12 20:40:15 UTC	2428	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:15 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjcFOwzAQRP8lZ1ay12vvmluSJlVVVCiCqOJSOXYiCOXQ0qoqiH%2FHuexh3tuZ3wKL%2B6IpW4%2FEqLRpqHELX7LVtV6U1nHVtm1xVyBnzxitA48GIlEESkZAtHeQYqCIvRpliNn1cyc6I8xekbC2wmKsyUhMRg9bfNHrxStohlW1dHNOOX%2FbTe26knC5bVL4bPRW3qtTuTzOlfP88y4vSaDBOTAoCKRGhiCWIWp2lFKGpgelbH6heWqabvv6%2FO3dIXRPfF1PX3joVv50udbdY19tP372t83xzNlnl%2F0eB7F2RIi9DKDcEAHDSGDzVV6SidoVf%2F%2B7wE96; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.22	50068	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	440	OUT	GET /usersync?b=pln&i=4trFhcvjylTg&ev=1&pid=558355 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:15 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:15 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.22	50050	18.173.219.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	882	OUT	GET /b2?c1=2&c2=27053452&cs_it=b8&cv=4.0.0%2B2301240627&ns__t=1702413604442&ns_c=UTF-8&c7=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&c8=Polynomial%20Root-finding%20with%20the%20Jenkins-Traub%20Algorithm&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=199cfdd76753ef1245eedde1702413613
2023-12-12 20:40:15 UTC	326	IN	HTTP/1.1 204 No Content Connection: close Date: Tue, 12 Dec 2023 20:40:15 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 7bd20765fb335de036eff4682be365d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: bPlbEbplk32RIrDXc2rPrNg_djGXHQciOcRi5lI_OfRpbOI8gwCxeg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.22	50057	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	766	OUT	GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzU3MTA2MjgxNjQ1MzYxMjQ5OTU2Ng%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:15 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:15 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.22	50059	147.135.94.213	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	829	OUT	GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282; csync=104:LQ2T1KDU-17-IBG6; TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100
2023-12-12 20:40:16 UTC	173	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:15 GMT location: https://usersync.gumgum.com/usersync?b=sad&i=2527372694113908282 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.22	50058	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	713	OUT	GET /xuid?mid=2711&xuid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31&dongle=013b&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:16 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:15 GMT; Secure; SameSite=None
2023-12-12 20:40:16 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.22	50053	52.70.100.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	838	OUT	GET /ul_cb/bsw_sync?ssp=pubmatic&bsw_user_id=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: t.pswec.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=2c80b275-6a96-4623-a12b-c0c93c69aed9; c=1702413614; tuuid_lu=1702413614
2023-12-12 20:40:16 UTC	666	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 12 Dec 2023 20:40:15 GMT Location: https://x.bidswitch.net/sync?dsp_id=2&user_id=2c80b275-6a96-4623-a12b-c0c93c69aed9&expires=3&user_group=1&ssp=pubmatic P3P: CP="NON DSP ADMo DEVo TAIo PSAo PSDo IVAo IVDo CONo OUR UNRo IND ONL UNI PUR COM NAV INT DEM STA PRE" Set-Cookie: tuuid=2c80b275-6a96-4623-a12b-c0c93c69aed9; path=/; expires=Thu, 11-Dec-2025 20:40:15 GMT; domain=.pswec.com; samesite=none; secure Set-Cookie: tuuid_lu=1702413615; path=/; expires=Thu, 11-Dec-2025 20:40:15 GMT; domain=.pswec.com; samesite=none; secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.22	50070	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	1271	OUT	GET /merge?pid=92&3pid=2638779048715878353&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF
2023-12-12 20:40:16 UTC	2411	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:15 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjcFOwzAQRP8lZ1ay12vvmluSJlVVVCiCqOJSOXYiCOXQ0qoqiH%2FHuexh3tuZ3wKL%2B6IpW4%2FEqLRpqHELX7LVtV6U1nHVtm1xVyBnzxitA48GIlEESkZAtHeQYqCIvRpliNn1cyc6I8xekbC2wmKsyUhMRg9bfNHrxStohlW1dHNOOX%2FbTe26knC5bVL4bPRW3qtTuTzOlfP88y4vSaDBOTAoCKRGhiCWIWp2lFKGpgelbH6heWqabvv6%2FO3dIXRPfF1PX3joVv50udbdY19tP372t83xzNlnl%2F0eB7F2RIi9DKDcEAHDSGDzVV6SidoVf%2F%2B7wE96; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:15 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.22	50030	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	636	OUT	GET /avatar/6351d5c8c991067a7c217f9548f3760e?s=80&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:16 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/png Content-Length: 2015 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/6351d5c8c991067a7c217f9548f3760e?s=80&d=identicon&r=g>; rel="canonical" Access-Control-Allow-Origin: * Expires: Tue, 12 Dec 2023 20:45:15 GMT Cache-Control: max-age=300 X-nc: HIT mia 2 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2023-12-12 20:40:16 UTC	909	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 07 91 49 44 41 54 78 9c ed 9c 5f 68 5b 55 1c c7 bf f9 d3 98 35 cd 16 4b fa 47 fa c7 ee 5f ed 5c bb f5 61 93 2a 65 95 6e 0f 3e 14 37 61 55 28 28 05 c1 e1 d8 eb c0 a7 22 f3 61 82 af 65 e2 60 28 0a 7d 70 03 37 ed 83 0f 5d 31 52 74 b4 82 99 29 ae b4 d9 da 65 29 d6 34 ba db 35 19 35 7f 7d 90 5f bc b9 b9 7f ce bd 27 77 6b c2 fd 3c 95 9b 93 93 9b cf fd a6 f7 9c f3 bb f7 da f2 f9 7c 1e 1a 08 a1 38 84 50 1c 1d 23 5d 5a 4d 31 d9 f5 85 66 1b 00 18 5a 18 65 6a c7 4a 39 3f 77 65 62 01 be 1e 3f 7c 3d 7e cd b6 76 96 0f 5d 1c 0f 22 7c 39 84 5c 2a cb d2 bc a2 c9 a5 b2 08 5f 0e 61 71 3c c8 d4 5e 53 a0 10 8a Data Ascii: PNGIHDRPPpHYs+IDATx_h[U5KG_\aen>7aU(("ae`(}p7]1Rt)e)455}_'wk<\|8P#]ZM1fZejJ9?web?\|=~v]"\|9\_aq<^S
2023-12-12 20:40:16 UTC	551	IN	Data Raw: 8a 94 8a 03 d8 57 5c 8c 60 8a 40 e9 4a 8d cd 61 2b 11 99 4e a4 65 c5 01 a5 73 72 e9 4a 88 9c c8 9a ba 9a 12 71 84 d6 7a 1f 0f a6 08 04 e4 57 6a c4 22 73 a9 6c 89 38 42 6e ed 4d 6e 25 44 2c d2 ee 72 94 88 03 cc 4d 1f 60 c2 49 84 50 9b 9d d8 1c 36 45 79 4a ab e1 6a ab c2 8e 1d 4e 59 79 80 b9 e9 03 4c 14 08 18 9b 23 ab ad 86 b3 5e 2d 40 98 9d 3e c0 64 81 7a e7 c8 5a b5 18 d6 ab 05 08 b3 d3 07 98 2c 10 d0 97 42 96 84 b1 a6 f0 49 a4 0f d0 71 12 31 5a c3 c8 24 52 c8 a5 72 4c 53 45 96 d9 06 eb 8c 24 97 ca 21 93 48 95 6c 2f 77 2d 86 59 a0 d1 1a c6 9e d1 83 70 d6 d5 30 b5 ed 3c d7 8b d9 33 53 9a 6d 58 70 d6 d5 60 cf e8 c1 92 c4 96 bb 16 63 ea 4f 98 be 04 2b 8d 03 ad aa d7 e4 f9 7a fc 68 1c 68 65 ee 4f cf c1 33 8a a9 02 8d 7c 01 b5 84 b1 a6 8f d0 7b 00 8d 60 9a 40 Data Ascii: W\`@Ja+NesrJqzWj"sl8BnMn%D,rM`IP6EyJjNYyL#^-@>dzZ,BIq1Z$RrLSE$!Hl/w-Yp0<3SmXp`cO+zhheO3\|{`@
2023-12-12 20:40:16 UTC	555	IN	Data Raw: 4e d6 5a 47 60 e8 3a d3 20 34 93 48 97 65 fe f9 78 35 81 da 36 6f e1 6f 5e 92 cb 1b 70 37 7b 98 da 7a f7 f9 30 30 79 8a a9 ad 55 13 e1 c4 aa 89 70 62 d5 44 38 b1 6a 22 9c 58 35 11 4e ac 9a 08 27 56 4d 84 13 ab 26 c2 89 55 13 e1 c4 c9 5a 23 30 3a 08 dd 6e 35 11 16 92 91 4d e6 da 89 d3 ec fb 35 b6 5b 4d 84 85 5c 2a cb 5c 3b b1 6a 22 9c 58 35 11 4e ac 9a 08 27 56 4d 84 13 ab 26 c2 89 55 13 e1 c4 aa 89 70 62 d5 44 38 b1 b1 3c 3b 8b 05 21 14 c7 c3 e0 3a 76 bf 7d 80 a9 3d 6b 8d 85 05 3d 35 8c e5 af ee e0 d9 de 06 a6 e7 62 b1 c0 bd 1e 48 27 07 ba 5d 6c bb f3 fc 5b 9d 98 3b 3b 0d 9b c3 56 72 b2 31 82 e1 61 8c 78 38 c2 7b af dd 93 44 7c af 9b da f0 87 15 dd 09 94 0e 47 8c de e5 f9 34 21 89 73 67 a7 11 0b 44 11 0b 44 65 87 3f 2c 30 0b 94 1b c7 55 a2 3c 42 2c 71 7d Data Ascii: NZG`: 4Hex56oo^p7{z00yUpbD8j"X5N'VM&UZ#0:n5M5[M\*\;j"X5N'VM&UpbD8<;!:v}=k=5bH']l[;;Vr1ax8{D\|G4!sgDDe?,0U<B,q}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.22	50084	34.197.219.74	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:15 UTC	372	OUT	GET /cs?aid=11590&id=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: cs.yellowblue.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:16 UTC	479	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: application/javascript Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: cs.yellowblue.io x-envoy-upstream-service-time: 1 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.22	50031	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	636	OUT	GET /avatar/0357be48a77180052e32b659cd94bad6?s=80&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:16 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/png Content-Length: 1560 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/0357be48a77180052e32b659cd94bad6?s=80&d=identicon&r=g>; rel="canonical" Access-Control-Allow-Origin: * Expires: Tue, 12 Dec 2023 20:45:16 GMT Cache-Control: max-age=300 X-nc: HIT mia 1 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2023-12-12 20:40:16 UTC	909	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 05 ca 49 44 41 54 78 9c ed 9c 4f 68 1b 47 18 c5 df ae c4 d6 c4 76 e2 5a 46 69 ea 1c e4 a8 cd 1f e8 c1 f4 d4 43 21 a1 31 d4 d0 1e 03 b9 f8 90 9e 02 e9 a9 90 4b 2f b9 f6 62 08 21 f4 dc 5c 72 eb ad 2d f4 60 0a a1 0e 14 07 8a 0f 85 d6 aa 4d 44 e2 84 d6 d8 54 54 b2 91 36 d2 6e 0f ea 28 eb dd 9d 9d 6f 66 76 b5 b2 77 df 51 1a 59 33 bf 79 5e ed ce 9b 6f 0c d7 75 5d 10 b4 5a 5f 44 a3 bd 2e 6c 37 35 36 2f 6c 57 34 27 b1 f0 ce af 28 9a 93 dc 36 8d f6 3a 6a bb cb 00 80 f3 33 b7 31 35 36 cf 6d db 75 9a 58 d9 7c 1f 5d a7 a9 dd 37 d6 ee c3 ca 8f c2 76 00 60 92 5a a1 3f 88 b8 da 9d 9b be c9 85 d7 68 af 63 Data Ascii: PNGIHDRPPpHYs+IDATxOhGvZFiC!1K/b!\r-`MDTT6n(ofvwQY3y^ou]Z_D.l756/lW4'(6:j3156muX\|]7v`Z?hc
2023-12-12 20:40:16 UTC	651	IN	Data Raw: 66 2c a1 cf c2 aa 59 88 4a c7 86 2d d5 3e f2 98 28 e5 c2 b9 5e 2b 07 a8 a9 1c a0 a6 72 80 9a ca 01 6a 2a 07 a8 a9 1c a0 a6 72 80 9a 2a 52 ea 3f 28 75 1d c7 49 32 75 27 da 99 c8 71 94 4c 26 62 aa d6 75 1c 77 51 eb 4e a4 33 91 ac 88 9a 89 98 00 ad ae 23 8b a2 d4 9d 90 33 91 2c 8a 92 89 0c 00 8a ea 3a b2 2a 51 dd 89 54 26 92 45 89 32 91 43 00 a9 75 1d 59 53 54 dd 49 a0 4e 44 a6 ae 23 2b 8a aa 3b 31 7e 7e fa b1 7b 7e e6 f6 21 b2 aa 99 08 00 7c ff c7 5b ca 1d 1d 86 3e bd f8 97 d2 e7 fc 4c 76 5a 2b a8 ed 2e a3 c8 f6 ba 4c 8d cd 83 81 cc eb 43 82 62 4c 18 b8 c1 06 04 d6 20 0c 64 ae d7 f2 83 63 0a 5c 03 73 90 87 c5 03 c7 c4 2d 36 cc 3a 48 11 38 26 e1 7a e0 c1 ab e7 68 da b5 cc ed 91 6e da 35 1c bc 7a 2e 6c cb 75 a0 55 28 a1 5a fa 1c 95 a9 1b 28 98 27 62 ed e0 a8 Data Ascii: f,YJ->(^+rjrR?(uI2u'qL&buwQN3#3,:*QT&E2CuYSTIND#+;1~~{~!\|[>LvZ+.LCbL dc\s-6:H8&zhn5z.luU(Z('b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.22	50082	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	531	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=70&external_user_id=a86d875c-ffb1-0c0e-017f-ebd97b68911b HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:16 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.22	50083	34.197.219.74	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	381	OUT	GET /cs?aid=21479&id=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: cs.minutemedia-prebid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:16 UTC	488	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: application/javascript Content-Length: 0 Connection: close access-control-allow-credentials: true access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF,X-Requested-With access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-origin: cs.minutemedia-prebid.com x-envoy-upstream-service-time: 0 server: istio-envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.22	50081	104.21.64.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	2296	OUT	POST /wp-admin/admin-ajax.php HTTP/1.1 Host: mathblog.com Connection: keep-alive Content-Length: 27 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://mathblog.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413595.0.0.0; _ga=GA1.1.1980800170.1702413486; cto_bundle=onR1gl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkxFZWp5Sjh0THdhV3h6Z09Lalc5T1V3cSUyRkRvanhXekdLTGJCS1F4THRWcTdHZTBUQnlEZUlqeDhaZEdGJTJCcm1NRnVjUWM5Vko2elZzRzI0dGlnalduWVpUYUVlelR5JTJGRGVPZWhGNm5uMmFsVmpBZ2JFWEtWNXRudE9BJTJCemxDOHl3JTNEJTNE; cto_bidid=p16MSF8lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNSDBWeTgwSCUyQkdMZDExa2N4RXliT245VXpHQzJnbUxpcUJWaVl6UWZlNm5NJTNE; TAPAD=%7B%22id%22%3A%226bba3ea6-2fb6-4f4c-a1fa-4873c1b3a0ff%22%7D; mediavine_session={%22depth%22:4%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}
2023-12-12 20:40:16 UTC	27	OUT	Data Raw: 61 63 74 69 6f 6e 3d 6d 74 73 5f 76 69 65 77 5f 63 6f 75 6e 74 26 69 64 3d 33 34 Data Ascii: action=mts_view_count&id=34
2023-12-12 20:40:16 UTC	1352	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: https://mathblog.com access-control-allow-credentials: true x-robots-tag: noindex x-content-type-options: nosniff expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 referrer-policy: strict-origin-when-cross-origin x-frame-options: SAMEORIGIN x-request-id: 2f33f1a89b96061e144b65afc4914d5c access-control-allow-methods: HEAD,GET,POST,OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-WP-Nonce access-control-expose-headers: Content-Length,Content-Range,X-WP-Total,X-WP-TotalPages,Link x-presslabs-stats: desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RwI9DdXuvPKcjq90WNqMPV98jzeTsCtL6KPsyE2Qk0zTFsRUkyV24diBtWW4mC2fzBrS%2FG%2F95n6lMG2kVgawiiFvyPgDG%2Bu36QNM%2BRkXyQrv015E0eGvknO2nR%2B9VdQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c80e6aea744a-MIA
2023-12-12 20:40:16 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.22	50085	96.46.186.182	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	454	OUT	GET /cookiesyncendpoint?biddername=5&auid=&key=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: sync.aniview.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1_C_5=LQ2T1KDU-17-IBG6; 1_C_5=LQ2T1KDU-17-IBG6
2023-12-12 20:40:16 UTC	326	IN	HTTP/1.1 200 OK set-cookie: 1_C_5=LQ2T1KDU-17-IBG6; Path=/; Domain=aniview.com; Expires=Fri, 22 Dec 2023 20:40:16 GMT; Secure; SameSite=None set-cookie: 1_C_5=LQ2T1KDU-17-IBG6; Path=/; Expires=Fri, 22 Dec 2023 20:40:16 GMT; Secure; SameSite=None date: Tue, 12 Dec 2023 20:40:16 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.22	50086	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	1207	OUT	GET /usersync.min.js?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D If-None-Match: W/"3217-18c54a15c0c" If-Modified-Since: Sun, 10 Dec 2023 16:48:30 GMT
2023-12-12 20:40:16 UTC	352	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 12823 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: no-cache, private Accept-Ranges: bytes Last-Modified: Tue, 12 Dec 2023 17:50:40 GMT ETag: W/"3217-18c5f270022"
2023-12-12 20:40:16 UTC	12823	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 75 73 65 72 73 79 6e 63 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 33 34 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 76 61 72 20 69 2c 6f 2c 72 3b 76 6f 69 64 20 30 3d 3d 3d 28 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 69 3d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 6e 3d 7b 7d 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 6e 5b 69 5d 3d 74 5b 69 5d 7d 72 65 74 75 72 Data Ascii: /! For license information please see usersync.min.js.LICENSE.txt /(()=>{var e={34:(e,n,t)=>{var i,o,r;void 0===(o="function"==typeof(i=r=function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var i in t)n[i]=t[i]}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.22	50064	68.67.160.186	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	716	OUT	GET /getuid?https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D3335%26xuid%3D%24UID%26dongle%3D4d58%26gdpr=0%26gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353
2023-12-12 20:40:16 UTC	1038	IN	HTTP/1.1 302 Found Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://eb2.3lift.com/xuid?mid=3335&xuid=2638779048715878353&dongle=4d58&gdpr=0&gdpr_consent= AN-X-Request-Uuid: e37bfaec-f073-457e-979a-4835f2ed3c31 Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:16 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.22	50018	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	720	OUT	GET /sync?dsp_id=119&user_id=968625794546145592&expires=30&ssp=fmx HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:16 UTC	531	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ce.lijit.com/merge?pid=26&3pid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=&gdpr_consent=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.22	50087	104.21.64.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	2152	OUT	GET /2WOFDurG0lJJ.js?ts=86748 HTTP/1.1 Host: mathblog.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1079324331.1702413486; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; utm_source=; utm_campaign=; _pubCommonId=fba01a0d-3739-4ed4-bf4d-31b3f6b27552; _pubCommonId_cst=VyxHLMwsHQ%3D%3D; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22:%22invalidate-verizon-pushes%22}; __gads=ID=70f210562803e33e:T=1702413502:RT=1702413502:S=ALNI_MZ86afG_GeJfRMpfgRRReV2Az_JhQ; __gpi=UID=00000da8e52e5ed8:T=1702413502:RT=1702413502:S=ALNI_Mbt-4gTOue7eKAirWxS9ehly3bk_A; _gat_gtag_UA_192905992_1=1; _ga_LYGYJBC3GR=GS1.1.1702413486.1.1.1702413595.0.0.0; _ga=GA1.1.1980800170.1702413486; cto_bundle=onR1gl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkxFZWp5Sjh0THdhV3h6Z09Lalc5T1V3cSUyRkRvanhXekdLTGJCS1F4THRWcTdHZTBUQnlEZUlqeDhaZEdGJTJCcm1NRnVjUWM5Vko2elZzRzI0dGlnalduWVpUYUVlelR5JTJGRGVPZWhGNm5uMmFsVmpBZ2JFWEtWNXRudE9BJTJCemxDOHl3JTNEJTNE; cto_bidid=p16MSF8lMkZHSDVheiUyRllSeHd2eG5LQklsV1ZQaVp4QjlwUDQ2cGlGRzMyUzVxaTNCRWhncTczcyUyQnFrY1QyczdNeFoxNHFNSDBWeTgwSCUyQkdMZDExa2N4RXliT245VXpHQzJnbUxpcUJWaVl6UWZlNm5NJTNE; TAPAD=%7B%22id%22%3A%226bba3ea6-2fb6-4f4c-a1fa-4873c1b3a0ff%22%7D; mediavine_session={%22depth%22:4%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%222.94.20%22%2C%22name%22:%222.94.20-tooDense-beta-control%22}%2C%22videoVersionGroup%22:{%22name%22:%22default%22%2C%22version%22:%229.1.10%22}}
2023-12-12 20:40:16 UTC	940	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-request-id: 4bcc8c85a590fc8ee1c621e51547f644 x-presslabs-stats: desktop strict-transport-security: max-age=31536000; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN vary: Accept-Encoding expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: max-age=31536000 CF-Cache-Status: MISS Last-Modified: Tue, 12 Dec 2023 20:40:16 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IQFlqVuKGJw3f3kV%2BJQw%2BC8YxvdOVXimv%2FVXNPAxmgt4arGwFxbn4RBdLI%2BWNUXyETo%2F41ELwTmVH%2BEg8WyU5XCWwmoRMbf81MJFDW1S05K%2FOFhz3ydNPaZPs5ipu1o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c80e6b8a4986-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:16 UTC	82	IN	Data Raw: 34 63 0d 0a 2f 2f 20 74 68 69 73 20 62 65 61 63 6f 6e 20 69 73 20 75 73 65 64 20 62 79 20 50 72 65 73 73 6c 61 62 73 20 66 6f 72 20 6d 65 74 72 69 63 20 63 6f 6d 70 75 74 61 74 69 6f 6e 73 20 6f 6e 20 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 0a 0d 0a Data Ascii: 4c// this beacon is used by Presslabs for metric computations on mathblog.com
2023-12-12 20:40:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.22	50105	54.159.220.191	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	808	OUT	GET /cookie-sync?userid=2527372694113908282&bee_sync_partners=syn%2Cox&bee_sync_current_partner=pp&bee_sync_initiator=ox&bee_sync_hop_count=3&ev=AAB3wk7K8YkAABTAD88gJQ&pid=558502&do=add HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAB3wk7K8YkAABTAD88gJQ; bitoIsSecure=ok
2023-12-12 20:40:16 UTC	593	IN	HTTP/1.1 303 See Other Date: Tue, 12 Dec 2023 20:40:16 GMT location: https://sync.technoratimedia.com/services?uid=AAB3wk7K8YkAABTAD88gJQ&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D2527372694113908282%26bee_sync_partners%3Dox%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D4 Server: gunicorn set-cookie: bito=AAB3wk7K8YkAABTAD88gJQ; Domain=bidr.io; expires=Fri, 10 Jan 2025 15:40:16 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.22	50111	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	830	OUT	GET /w/1.0/sd?id=537146931&val=4c_dda4d101-97ce-4817-beb8-0a826215ec0d HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:16 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.22	50113	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	2572	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=7558899468789434902&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; chkChromeAb67Sec=3; SPugT=1702413613; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; pi=157108:3; DPSync3=1703548800%3A259_256_260_201_263_262_261_258%7C1703376000%3A257%7C1702425600%3A248_255%7C1702944000%3A265; SyncRTB3=1703548800%3A166_240_231_8_5_264_249_104_48_13_178_46_96_22_56_233_220_71_21_3_176_55_234_214_7_165_54_250%7C1704931200%3A224%7C1702944000%3A15_2_223%7C1703635200%3A35%7C1703203200%3A63; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; PugT=1702413614
2023-12-12 20:40:16 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:15 GMT; path=/ Set-Cookie: PugT=1702413615; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:16 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.22	50093	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	615	OUT	GET /w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.22	50141	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	530	OUT	GET /match?bidder_id=102&ttl=1705005607&external_user_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: cms-xch-chicago.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:16 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.22	50092	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	917	OUT	GET /idsync/ex/push?partner_id=2499&partner_device_id=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553&partner_url=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D16%263pid%3D8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:16 UTC	1194	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:16 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:16 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:16 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sat, 10 Feb 2024 20:40:16 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://ce.lijit.com/merge?pid=16&3pid=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.22	50104	169.197.150.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	707	OUT	GET /usersync/108/ HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_1296d48b0e654caba2d72; CDIPARTNERS=%7B%221%22%3A%2220231212%22%2C%22142%22%3A%2220231212%22%7D
2023-12-12 20:40:16 UTC	678	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://us-u.openx.net/w/1.0/sd?id=537138692&val=di_1296d48b0e654caba2d72 set-cookie: CDIUSER=di_1296d48b0e654caba2d72; Max-Age=47260800; SameSite=None; Expires=Wed, 11 Jun 2025 20:40:16 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%22108%22%3A%2220231212%22%2C%221%22%3A%2220231212%22%2C%22142%22%3A%2220231212%22%7D; Max-Age=47260800; SameSite=None; Expires=Wed, 11 Jun 2025 20:40:16 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Tue, 12 Dec 2023 20:40:16 GMT server: b connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.22	50103	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	826	OUT	GET /w/1.0/sd?id=540290843&val=d6.c5bd044156be4b89a58d19d2b5fdecfd HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:16 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.22	50091	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	582	OUT	GET /dot.gif?gdpr=0 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:16 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 43 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 12 Dec 2023 03:23:43 GMT Expires: Wed, 13 Dec 2023 03:23:43 GMT Cache-Control: public, max-age=86400 Age: 62193 Last-Modified: Sun, 01 Feb 2009 08:00:00 GMT Content-Type: image/gif Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.22	50102	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	803	OUT	GET /w/1.0/sd?id=537123500&val=863968679737 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:16 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.22	50116	52.71.16.59	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	825	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=402a9937-9d5c-4b95-8106-4af28162991a HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6Ijk2MjI2MGFlLTIwMTctNDQ3OS04NGQyLWMyNjAxZmFhNjg3ZSIsImwiOjE3MDI0MTM2MTQ1NTIsInQiOjF9
2023-12-12 20:40:16 UTC	353	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6Ijk2MjI2MGFlLTIwMTctNDQ3OS04NGQyLWMyNjAxZmFhNjg3ZSIsImwiOjE3MDI0MTM2MTY2NzUsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Sat, 29 Jun 2024 20:40:16 GMT; Secure; SameSite=None
2023-12-12 20:40:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.22	50076	35.207.24.140	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	608	OUT	GET /sync?ssp=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:17 UTC	704	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Tue, 12 Dec 2023 20:40:16 GMT Location: https://rtb.mfadsrvr.com/ul_cb/sync?ssp=sovrn&gdpr=0&gdpr_consent= Set-Cookie: tuuid=55927f38-2b7b-4f3f-958e-daf09ffe771c; path=/; expires=Thu, 11-Dec-2025 20:40:16 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1702413616; path=/; expires=Thu, 11-Dec-2025 20:40:16 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1702413616; path=/; expires=Thu, 11-Dec-2025 20:40:16 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.22	50139	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	431	OUT	GET /usersync?b=sad&i=2527372694113908282 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:16 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:16 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.22	50112	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	2649	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; chkChromeAb67Sec=3; SPugT=1702413613; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; pi=157108:3; DPSync3=1703548800%3A259_256_260_201_263_262_261_258%7C1703376000%3A257%7C1702425600%3A248_255%7C1702944000%3A265; SyncRTB3=1703548800%3A166_240_231_8_5_264_249_104_48_13_178_46_96_22_56_233_220_71_21_3_176_55_234_214_7_165_54_250%7C1704931200%3A224%7C1702944000%3A15_2_223%7C1703635200%3A35%7C1703203200%3A63; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; PugT=1702413614
2023-12-12 20:40:16 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:15 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:15 GMT; path=/ Set-Cookie: PugT=1702413615; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.22	50110	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	830	OUT	GET /w/1.0/pd?plm=3&ph=b9be4168-e450-46a9-a2f2-8e12fc5e4de6 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:16 UTC	864	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:16 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1702413498.3.1.102.3.2.4.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg; Version=1; Expires=Wed, 27-Dec-2023 20:40:16 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://j.mrpdata.net/c.gif?ex=OpenX&rd=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537144753%26val%3DMRPDATAUSERID Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.22	50109	52.22.12.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	828	OUT	GET /sync/dmp?redirect=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D540290843%26val%3D%24%7Bssky_uuid%7D&_cvt=t HTTP/1.1 Host: vop.sundaysky.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sskyu=d6.c5bd044156be4b89a58d19d2b5fdecfd; sskyCreationTime=1702413611975; sskya="e294Ont0czoiNDVibzMxIix0OiJuaSJ9fQ=="
2023-12-12 20:40:16 UTC	527	IN	HTTP/1.1 302 Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Length: 0 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff Set-Cookie: sskyu=d6.c5bd044156be4b89a58d19d2b5fdecfd; Domain=sundaysky.com; Expires=Fri, 12-Dec-2025 20:40:16 GMT; Path=/; Secure; SameSite=None Set-Cookie: sskyCreationTime=1702413611975; Domain=sundaysky.com; Expires=Fri, 12-Dec-2025 20:40:16 GMT; Path=/; Secure; SameSite=None Location: https://us-u.openx.net/w/1.0/sd?id=540290843&val=d6.c5bd044156be4b89a58d19d2b5fdecfd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.22	50124	35.244.159.8	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	571	OUT	GET /w/1.0/sd?id=537072979&val=ViN9mkBO1Rd9xZ5 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.22	50132	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	613	OUT	GET /w/1.0/sd?id=540245193&val=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:16 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.22	50146	18.232.190.152	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	431	OUT	GET /api/v1/dsync/Rubicon?exid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
2023-12-12 20:40:16 UTC	456	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702; Path=/; Domain=kargo.com; Expires=Wed, 11 Dec 2024 20:40:16 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2023-12-12 20:40:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.22	50142	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	492	OUT	GET /csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
2023-12-12 20:40:16 UTC	387	IN	HTTP/1.1 200 OK date: Tue, 12 Dec 2023 20:40:16 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:16 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2023-12-12 20:40:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.22	50097	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	1290	OUT	GET /merge?pid=84&3pid=ZXjFKB8auyNdakE1Q8hBrAGq HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ
2023-12-12 20:40:16 UTC	2564	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:16 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjk1PwkAQhv9Lz06y3zPrbUtbgjVoDRD0QrbbVi14ACEEjf%2Fd6WUymeeZmfc3U9l9VobKK4NKSF2a0hU%2BoJUzWQTrMK%2BqKrvLFLKntZQRBw3JmASm0wQkvYMuRZNUKwbqE7t%2BuqmcJkQvDKG0hKStZkSa0WOjVrIu1iARFvncTXPD87ftWNU5xctt2cV9KRv6yE9hfpy4ZR5Crq97rOl1z%2B0qFETvD830cAr3suUcFE3vHGhFCowYECJZhCTRma5jqFsQwvKKmYKM4203O397d4ibZ7zW45c6bBb%2BdLnONk9t3nz%2B7G7L4xnZR8d%2Bq3qydlCQWupBuD6BioMBy1V46nSSLvv7BzUiVzs%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:16 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:16 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:16 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:16 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.22	50123	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	568	OUT	GET /w/1.0/sd?id=537123500&val=863968679737 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.22	50107	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	850	OUT	GET /w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:16 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.22	50090	35.190.39.111	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	594	OUT	POST /encrypt HTTP/1.1 Host: esp.rtbhouse.com Connection: keep-alive Content-Length: 190 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:16 UTC	190	OUT	Data Raw: 7b 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 72 74 62 68 6f 75 73 65 22 2c 22 73 69 67 6e 61 6c 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 25 32 46 70 6f 6c 79 6e 6f 6d 69 61 6c 2d 72 6f 6f 74 2d 66 69 6e 64 69 6e 67 2d 77 69 74 68 2d 74 68 65 2d 6a 65 6e 6b 69 6e 73 2d 74 72 61 75 62 2d 61 6c 67 6f 72 69 74 68 6d 25 32 46 25 32 33 62 6c 6f 67 22 2c 22 45 49 44 22 3a 22 66 62 61 30 31 61 30 64 2d 33 37 33 39 2d 34 65 64 34 2d 62 66 34 64 2d 33 31 62 33 66 36 62 32 37 35 35 32 22 7d 7d Data Ascii: {"publisher_id":"rtbhouse","signal":{"domain":"https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog","EID":"fba01a0d-3739-4ed4-bf4d-31b3f6b27552"}}
2023-12-12 20:40:17 UTC	452	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-headers: X-Requested-With content-type: application/json x-cloud-trace-context: 4c1e304084c3d6f1578fe7fd3daee9b3 date: Tue, 12 Dec 2023 20:40:16 GMT server: Google Frontend Content-Length: 265 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:17 UTC	265	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 74 72 75 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4d 55 56 57 72 46 4a 52 71 4a 4b 7a 65 4c 74 76 77 75 76 4b 34 57 76 5a 4f 4c 62 35 65 44 32 54 63 4a 68 6e 64 6a 44 2b 62 49 44 62 31 69 41 64 6c 68 49 61 4f 73 43 4d 6b 61 34 4e 42 30 50 63 4d 72 65 56 2f 69 47 47 6f 39 61 62 2b 6b 32 47 43 33 44 49 5a 46 31 71 56 56 74 6f 4f 48 6c 30 6d 65 6b 42 4c 43 5a 34 77 49 37 48 53 5a 46 6c 44 4c 78 67 55 4c 66 2f 68 68 52 49 72 79 46 63 77 6e 2f 59 6e 4b 51 48 43 30 4b 71 55 49 59 4a 67 79 69 58 4e 66 38 52 37 6d 2f 75 65 64 6a 6e 7a 75 51 4a 76 72 75 72 54 34 36 51 39 7a 5a 71 64 33 43 38 46 69 51 35 34 78 38 53 46 42 41 48 71 45 64 65 2b 6f 73 37 64 43 54 31 53 79 4c 4f 66 71 2b 4c 70 67 3d 3d 22 2c 22 73 65 67 6d 65 6e 74 73 Data Ascii: {"status":"true","message":"MUVWrFJRqJKzeLtvwuvK4WvZOLb5eD2TcJhndjD+bIDb1iAdlhIaOsCMka4NB0PcMreV/iGGo9ab+k2GC3DIZF1qVVtoOHl0mekBLCZ4wI7HSZFlDLxgULf/hhRIryFcwn/YnKQHC0KqUIYJgyiXNf8R7m/uedjnzuQJvrurT46Q9zZqd3C8FiQ54x8SFBAHqEde+os7dCT1SyLOfq+Lpg==","segments

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.22	50118	35.244.193.51	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	750	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&src=esp&ver=1.2.0&us_privacy=1--- HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:16 UTC	362	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://mathblog.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Tue, 12 Dec 2023 20:40:16 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.22	50129	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	561	OUT	GET /match?bidder_id=120&external_user_id=GH_JvDj8VjdvrBlOavHmp2aBmNQ&ts=1702413610&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:16 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.22	50073	23.83.76.73	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	514	OUT	GET /redir/?partnerid=104&partneruserid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282; csync=104:LQ2T1KDU-17-IBG6; TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100
2023-12-12 20:40:16 UTC	371	IN	HTTP/1.1 200 OK content-type: image/gif date: Tue, 12 Dec 2023 20:40:16 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=104:LQ2T1KDU-17-IBG6; expires=Thu, 12 Dec 2024 20:40:16 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2023-12-12 20:40:16 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.22	50095	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	545	OUT	GET /match?bidder_id=30&external_user_id=LQ2T1KDU-17-IBG6&ts=1702413609&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:16 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:16 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.22	50096	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	484	OUT	GET /usersync?b=bsw&i=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:17 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:17 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.22	50108	34.98.64.218	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	828	OUT	GET /w/1.0/sd?id=540394477&val=2527372694113908282&gdpr=0&gdpr_consent= HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.22	50115	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	830	OUT	GET /w/1.0/sd?id=537146931&val=4c_0f2fd50c-4ce9-46bf-8fbf-4c75ac6b55dc HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.22	50157	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	947	OUT	GET /w/1.0/sd?id=539732443&gdpr=&gdpr_consent=&val=6578C52C4BC40314243CDFDBBLIS&r=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2Fopenx%3Fpartner_device_id%3D6578C52C4BC40314243CDFDBBLIS HTTP/1.1 Host: eu-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:17 UTC	547	IN	HTTP/1.1 302 Found Vary: Accept Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:16 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://tr.blismedia.com/v1/redirect/openx?partner_device_id=6578C52C4BC40314243CDFDBBLIS Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.22	50151	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	593	OUT	GET /w/1.0/sd?id=540394477&val=2527372694113908282&gdpr=0&gdpr_consent= HTTP/1.1 Host: u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.22	50144	44.194.38.185	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	484	OUT	GET /match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e HTTP/1.1 Host: match.justpremium.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jpxumatched=ox; jpxumaster=um-4f6d4c28-27ff-4d51-8e1b-7edc0c421f1c-1702413613
2023-12-12 20:40:17 UTC	242	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: jpxumatched=ox; Path=/; Domain=justpremium.com; Expires=Wed, 13 Dec 2023 20:40:16 GMT; Secure; SameSite=None
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.22	50165	18.173.132.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	429	OUT	GET /userPixel/sync?partner=rubicon&uid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: usr.undertone.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID_EXT_47=LQ2T1KDU-17-IBG6
2023-12-12 20:40:17 UTC	423	IN	HTTP/1.1 200 Content-Length: 0 Connection: close Date: Tue, 12 Dec 2023 20:40:17 GMT Set-Cookie: UID_EXT_47=LQ2T1KDU-17-IBG6; Path=/; Domain=undertone.com; Expires=Thu, 12-Dec-2024 02:29:29 GMT; SameSite=None; Secure; X-Cache: Miss from cloudfront Via: 1.1 38385695b10551583d750b943a475982.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P2 X-Amz-Cf-Id: 4g6aO2MerAMgjqTkbqFtrPrLL119At2sj63lMUhyD1m8F0_iAbCkxA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.22	50119	68.67.160.186	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	691	OUT	GET /prebid/setuid?bidder=triplelift_native&gdpr=0&gdpr_consent=&uid=3571062816453612499566 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353
2023-12-12 20:40:17 UTC	1393	IN	HTTP/1.1 200 OK Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: dfe45507-82d2-44f5-9d38-f71198d2fa70 Set-Cookie: anj=dTM7k!M4/YDunaTF']wIg2Il]g0G:u!]tbP6j2F-.aDE7BAf@@gm4K$irqLdY0RJjGe!qfQhRXjFGXt9jGEOGdD1J%q)3RK#-s; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:16 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIzNTcxMDYyODE2NDUzNjEyNDk5NTY2IiwiZXhwaXJlcyI6IjIwMjQtMDMtMTFUMjA6NDA6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMTJUMjA6NDA6MTZaIn0=; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:16 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:16 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.22	50158	52.204.91.144	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	457	OUT	GET /sync?pn_id=rc&id=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=3zzUbmittUiV3rjzJy9H%7C1702339200000%7C0; ptrrc=LQ2T1KDU-17-IBG6
2023-12-12 20:40:17 UTC	771	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=3zzUbmittUiV3rjzJy9H%7C1702339200000%7C0; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:16 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptrrc=LQ2T1KDU-17-IBG6; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:16 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.22	50169	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	2656	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=88383604&p=156212&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; chkChromeAb67Sec=3; SPugT=1702413613; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; pi=157108:3; DPSync3=1703548800%3A259_256_260_201_263_262_261_258%7C1703376000%3A257%7C1702425600%3A248_255%7C1702944000%3A265; SyncRTB3=1703548800%3A166_240_231_8_5_264_249_104_48_13_178_46_96_22_56_233_220_71_21_3_176_55_234_214_7_165_54_250%7C1704931200%3A224%7C1702944000%3A15_2_223%7C1703635200%3A35%7C1703203200%3A63; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; PugT=1702413614
2023-12-12 20:40:17 UTC	1118	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156212:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Length: 1550 Connection: close
2023-12-12 20:40:17 UTC	1550	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 62 70 69 2e 72 74 61 63 74 69 76 61 74 65 2e 63 6f 6d 2f 74 61 67 2f 3f 69 64 3d 32 30 39 30 39 26 75 73 65 72 5f 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 37 35 31 34 35 3f 62 69 64 64 65 72 5f 69 64 3d 31 39 35 37 35 35 26 62 69 64 64 65 72 5f 75 75 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 Data Ascii: PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=AE4A8C3D-1096-459A-B091-2BADD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.22	50094	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	1339	OUT	GET /merge?pid=43&gdpr=0&gdpr_consent=&us_privacy=&3pid=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ
2023-12-12 20:40:17 UTC	2580	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:16 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjk1PwkAQhv9Lz06y3zPrbUtbgjVoDRD0QrbbVi14ACEEjf%2Fd6WUymeeZmfc3U9l9VobKK4NKSF2a0hU%2BoJUzWQTrMK%2BqKrvLFLKntZQRBw3JmASm0wQkvYMuRZNUKwbqE7t%2BuqmcJkQvDKG0hKStZkSa0WOjVrIu1iARFvncTXPD87ftWNU5xctt2cV9KRv6yE9hfpy4ZR5Crq97rOl1z%2B0qFETvD830cAr3suUcFE3vHGhFCowYECJZhCTRma5jqFsQwvKKmYKM4203O397d4ibZ7zW45c6bBb%2BdLnONk9t3nz%2B7G7L4xnZR8d%2Bq3qydlCQWupBuD6BioMBy1V46nSSLvv7BzUiVzs%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:16 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:16 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:16 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:16 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.22	50106	52.46.151.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	689	OUT	GET /ecm3?ex=gg.com&id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:17 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 12 Dec 2023 20:40:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9VC4SY0793A9QTGGMDPC Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.22	50138	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	439	OUT	GET /usersync?b=zem&i=1DASsxNWMH7qY1-EP1FQ&gdpr=0 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:17 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:17 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.22	50140	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	595	OUT	GET /w/1.0/sd?id=537146931&val=4c_0f2fd50c-4ce9-46bf-8fbf-4c75ac6b55dc HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.22	50153	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	1289	OUT	GET /merge?pid=83&3pid=LQ2T1KDU-17-IBG6&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ
2023-12-12 20:40:17 UTC	2556	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:17 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjk1PwkAQhv9Lz06y3zPrbUtbgjVoDRD0QrbbVi14ACEEjf%2Fd6WUymeeZmfc3U9l9VobKK4NKSF2a0hU%2BoJUzWQTrMK%2BqKrvLFLKntZQRBw3JmASm0wQkvYMuRZNUKwbqE7t%2BuqmcJkQvDKG0hKStZkSa0WOjVrIu1iARFvncTXPD87ftWNU5xctt2cV9KRv6yE9hfpy4ZR5Crq97rOl1z%2B0qFETvD830cAr3suUcFE3vHGhFCowYECJZhCTRma5jqFsQwvKKmYKM4203O397d4ibZ7zW45c6bBb%2BdLnONk9t3nz%2B7G7L4xnZR8d%2Bq3qydlCQWupBuD6BioMBy1V46nSSLvv7BzUiVzs%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.22	50150	104.18.24.173	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:16 UTC	640	OUT	GET /i.match?p=b10&u={rubicon_user_token}&redirect=https%3A//pixel.rubiconproject.com/tap.php%3Fv%3D111756%26nid%3D3856%26put%3D%24TF_USER_ID_ENC%24%26expires%3D180 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aunvfMwl6h7bQQwbPCqU6Q5QLbay3OmZbhwaba7V3nSvFMP0BZbu5pyOSUE8UUb13P90q4engNovUG9a2tjs2RLbCLwfjgwxMGw8SFeETHqZaSZaMqjTasZaF
2023-12-12 20:40:17 UTC	895	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=avnxY1tMPmFUTgUpyTVoqR4CLx92iB4gZcZcKmAyQjr9qFnhW7JhytAS1dE9Vb7FWslB5oPUXl5vVTtTETuJpjisGRRiBLbf5OeGeD5REjNXN9iXehpEMXUbWS38AW3pZdFUVG4Iso4; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:17 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=avnxY1tMPmFUTgUpyTVoqR4CLx92iB4gZcZcKmAyQjr9qFnhW7JhytAS1dE9Vb7FWslB5oPUXl5vVTtTETuJpjisGRRiBLbf5OeGeD5REjNXN9iXehpEMXUbWS38AW3pZdFUVG4Iso4; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:17 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8348c8128f684c2d-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.22	50159	162.248.18.37	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	2394	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=7558899468789434902&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; chkChromeAb67Sec=3; SPugT=1702413613; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; pi=157108:3; DPSync3=1703548800%3A259_256_260_201_263_262_261_258%7C1703376000%3A257%7C1702425600%3A248_255%7C1702944000%3A265; SyncRTB3=1703548800%3A166_240_231_8_5_264_249_104_48_13_178_46_96_22_56_233_220_71_21_3_176_55_234_214_7_165_54_250%7C1704931200%3A224%7C1702944000%3A15_2_223%7C1703635200%3A35%7C1703203200%3A63; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; PugT=1702379152
2023-12-12 20:40:17 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:17 GMT; path=/ Set-Cookie: PugT=1702413617; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:17 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:17 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.22	50147	18.232.190.152	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
2023-12-12 20:40:17 UTC	456	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702; Path=/; Domain=kargo.com; Expires=Wed, 11 Dec 2024 20:40:17 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.22	50114	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	2570	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; chkChromeAb67Sec=3; SPugT=1702413613; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; pi=157108:3; DPSync3=1703548800%3A259_256_260_201_263_262_261_258%7C1703376000%3A257%7C1702425600%3A248_255%7C1702944000%3A265; SyncRTB3=1703548800%3A166_240_231_8_5_264_249_104_48_13_178_46_96_22_56_233_220_71_21_3_176_55_234_214_7_165_54_250%7C1704931200%3A224%7C1702944000%3A15_2_223%7C1703635200%3A35%7C1703203200%3A63; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; PugT=1702413614
2023-12-12 20:40:17 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:06:12 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:06:12 GMT; path=/ Set-Cookie: PugT=1702379172; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:06:12 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.22	50168	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	1302	OUT	GET /merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; ljtrtb=eJwVjcFOwzAQRP%2FFZ1ayvWvvmhspbVUFFYIgqrhUjp0IQjm0tKoC4t9xLnuY92bnV1lWtwrRmMgDQiJKQBkFxAQPOUVKttOD9EndqGCLaz0Kc9AkbJywoMOCBAt6aOyLqe9fwTBsqrWfcyr5225c1ZXEy7TN8XNpGnmvTnfr4%2Fxynn%2FelSWJ1HsPaMUC6YEhimNIhj3lXCB2oLUrFZqnxnHaL87fwR9i%2B8TXevyyh3YTTpfron3squbjZz9tj2cuPvvid7YX5wYLqZMetO8T2DgQuHJ1kIzJePX3DwVjRvQ%3D; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ
2023-12-12 20:40:17 UTC	2576	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:17 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjk1PwkAQhv9Lz06y3zPrbUtbgjVoDRD0QrbbVi14ACEEjf%2Fd6WUymeeZmfc3U9l9VobKK4NKSF2a0hU%2BoJUzWQTrMK%2BqKrvLFLKntZQRBw3JmASm0wQkvYMuRZNUKwbqE7t%2BuqmcJkQvDKG0hKStZkSa0WOjVrIu1iARFvncTXPD87ftWNU5xctt2cV9KRv6yE9hfpy4ZR5Crq97rOl1z%2B0qFETvD830cAr3suUcFE3vHGhFCowYECJZhCTRma5jqFsQwvKKmYKM4203O397d4ibZ7zW45c6bBb%2BdLnONk9t3nz%2B7G7L4xnZR8d%2Bq3qydlCQWupBuD6BioMBy1V46nSSLvv7BzUiVzs%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.22	50149	3.215.81.149	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	499	OUT	GET /v1/setuid?bidder=rubicon&gdpr=&gdpr_consent=&uid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: sync.ex.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: exco-uids={"rubicon":{"UID":"LQ2T1KDU-17-IBG6","Expire":"2023-12-19T20:40:12.960959886Z"}}
2023-12-12 20:40:17 UTC	454	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/png Content-Length: 86 Connection: close Vary: Origin Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Set-Cookie: exco-uids={"rubicon":{"UID":"LQ2T1KDU-17-IBG6","Expire":"2023-12-19T20:40:17.271199534Z"}}; Expires=2024-03-11 20:40:17.271206034 +0000 UTC m=+7882792.579281716; Domain=.ex.co; Path=/; HTTPOnly; SameSite=None; Secure=true; Partitioned;
2023-12-12 20:40:17 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.22	50173	74.119.119.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	925	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:17 UTC	532	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:16 GMT server: Kestrel cache-control: no-cache expires: Tue, 12 Dec 2023 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1455867 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.22	50156	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	2572	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CA9_10D97F8E3_7A5609BE&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; chkChromeAb67Sec=3; SPugT=1702413613; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; pi=157108:3; DPSync3=1703548800%3A259_256_260_201_263_262_261_258%7C1703376000%3A257%7C1702425600%3A248_255%7C1702944000%3A265; SyncRTB3=1703548800%3A166_240_231_8_5_264_249_104_48_13_178_46_96_22_56_233_220_71_21_3_176_55_234_214_7_165_54_250%7C1704931200%3A224%7C1702944000%3A15_2_223%7C1703635200%3A35%7C1703203200%3A63; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; PugT=1702413614
2023-12-12 20:40:17 UTC	657	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:15 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:15 GMT; path=/ Set-Cookie: PugT=1702413615; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:15 GMT; path=/ Location: https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.22	50174	198.148.27.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	833	OUT	GET /bh/rtset?pid=558511&ev=1&rurl=https%3A%2F%2Fce.lijit.com/merge?pid=49&3pid=%%VGUID%%&gdpr=0&gdpr_consent= HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=4trFhcvjylTg; INGRESSCOOKIE=185d6ef7c41ed78f; pb_rtb_ev=3-1oif\|7bq.0.1\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60\|7dN.0.AAB3wk7K8YkAABTAD88gJQ
2023-12-12 20:40:17 UTC	976	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-5c6449b65-gvtwm Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=4trFhcvjylTg;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 06-Dec-2024 20:40:17 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1oif\|7bq.0.1\|88N.0.6120f800-992e-11ee-8a65-3f15d911ca60\|7dN.0.AAB3wk7K8YkAABTAD88gJQ\|7dW.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Wed, 11-Dec-2024 20:40:17 GMT;Max-Age=31536000;SameSite=None Location: https://ce.lijit.com/merge?pid=49&3pid=4trFhcvjylTg&ev=1&pid=558511&gdpr_consent=&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.22	50179	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	583	OUT	GET /w/1.0/sd?id=539237773&val=985ce834-0b5c-1dd8-f7d7179d HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.22	50098	216.34.207.82	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	509	OUT	GET /w/user.sync?ptrid=14&userid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: match.sync.ad.cpe.dotomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: DotomiUser=711907349493661519$3$582080014$$1; receive-cookie-deprecation=1; DotomiTest=655bbbb6202d135c
2023-12-12 20:40:17 UTC	426	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: 0 Accept-CH: Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness Set-Cookie: DotomiUser=711907349493661519$3$582080014$$1; Expires=Wed, 08 Jan 2025 20:40:17 GMT; Path=/; Domain=.dotomi.com; SameSite=None; Secure
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.22	50143	152.199.5.184	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	465	OUT	GET /html/usersync.html?cb=https%3A%2F%2Fcs.krushmedia.com%2F462e2b5850cd99fa168d581296d0f392.gif%3Fpuid%3D%5BUSER_ID%5D HTTP/1.1 Host: ad-cdn.technoratimedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:17 UTC	887	IN	HTTP/1.1 200 OK Accept-Ranges: bytes access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: * access-control-expose-headers: access-control-allow-credentials,access-control-allow-methods,access-control-allow-origin,date,etag,opc-client-info,opc-request-id,x-api-id Age: 6 cache-control: max-age=900 content-md5: jpm9v92eYnJZrYEV0creyA== Content-Type: text/html; charset=utf-8 Date: Tue, 12 Dec 2023 20:40:17 GMT Etag: 84d4a6e5-3860-4103-9387-92737002d50d Expires: Tue, 12 Dec 2023 20:55:17 GMT Last-Modified: Wed, 16 Aug 2023 20:56:04 GMT opc-request-id: iad-1:KCQ1aGBji1n5of4shGk-FBVkAM328fV65P1-Lfpp-Jz6hRlEAN3ZfgCIlFeYXNm2 Server: ECAcc (mic/9B3B) storage-tier: Standard Vary: Accept-Encoding version-id: ff6bccb1-2ffd-4aa2-bd14-9776592cc90b x-api-id: native X-Cache: HIT Content-Length: 17095 Connection: close
2023-12-12 20:40:17 UTC	16383	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 3e 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 36 37 36 3a 28 65 2c 74 29 3d 3e 7b 74 2e 77 72 69 74 65 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 6c 3d 31 3b 66 6f 72 28 6c 3d 31 3b 6c 3c 64 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 69 66 28 64 5b 64 2e 6c 65 6e 67 74 68 2d 6c 5d 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 22 2f 61 64 73 65 72 76 5f 22 29 3e 30 29 Data Ascii: <!doctype html><html lang="en"><head><meta charset="UTF-8"><script>(()=>{var e={676:(e,t)=>{t.writeTag=function(e,t,n,r,i,o,a){var c=document,d=document.getElementsByTagName("script"),l=1;for(l=1;l<d.length;l++){if(d[d.length-l].src.indexOf("/adserv_")>0)
2023-12-12 20:40:17 UTC	712	IN	Data Raw: 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 74 61 64 73 5f 6c 61 73 74 5f 73 79 6e 63 22 29 2c 31 30 29 2b 34 33 32 65 35 2c 28 79 3d 69 73 4e 61 4e 28 77 29 7c 7c 77 3c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 29 26 26 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 74 61 64 73 5f 6c 61 73 74 5f 73 79 6e 63 22 2c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7d 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 61 29 7b 76 61 72 20 63 2c 64 3d 65 28 74 29 3b 74 72 79 7b 66 6f 72 28 64 2e 73 28 29 3b 21 28 63 3d 64 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 76 61 72 20 6c 3d 63 2e 76 61 6c 75 65 2c 75 3d 6c 2e 69 66 72 61 6d 65 3f 22 Data Ascii: orage.getItem("tads_last_sync"),10)+432e5,(y=isNaN(w)\|\|w<(new Date).getTime())&&localStorage.setItem("tads_last_sync",(new Date).getTime().toString())}catch(e){return}!function(n,r,a){var c,d=e(t);try{for(d.s();!(c=d.n()).done;){var l=c.value,u=l.iframe?"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.22	50170	8.28.7.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	2564	OUT	GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; chkChromeAb67Sec=3; SPugT=1702413613; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; pi=157108:3; DPSync3=1703548800%3A259_256_260_201_263_262_261_258%7C1703376000%3A257%7C1702425600%3A248_255%7C1702944000%3A265; SyncRTB3=1703548800%3A166_240_231_8_5_264_249_104_48_13_178_46_96_22_56_233_220_71_21_3_176_55_234_214_7_165_54_250%7C1704931200%3A224%7C1702944000%3A15_2_223%7C1703635200%3A35%7C1703203200%3A63; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; PugT=1702413614
2023-12-12 20:40:17 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:17 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1702413617; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:17 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.22	50148	159.89.246.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	438	OUT	GET /usersync?cn=5529&ttt=1&dpui=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: e.serverbid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSUMABLEID=91f8c9c066e5450eb8c9c066e5650ed1
2023-12-12 20:40:17 UTC	462	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 10080 content-type: image/gif content-length: 35 set-cookie: CONSUMABLEID=91f8c9c066e5450eb8c9c066e5650ed1; Max-Age=1296000; Expires=Wed, 27 Dec 2023 20:40:17 GMT; Path=/; Domain=.serverbid.com; Secure; SameSite=None date: Tue, 12 Dec 2023 20:40:17 GMT connection: close
2023-12-12 20:40:17 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.22	50099	52.70.100.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	639	OUT	GET /bsw_sync?ssp=gumgum2&bsw_user_id=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: t.pswec.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:17 UTC	758	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 12 Dec 2023 20:40:17 GMT Location: https://t.pswec.com/ul_cb/bsw_sync?ssp=gumgum2&bsw_user_id=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d P3P: CP="NON DSP ADMo DEVo TAIo PSAo PSDo IVAo IVDo CONo OUR UNRo IND ONL UNI PUR COM NAV INT DEM STA PRE" Set-Cookie: tuuid=5f42ecf1-af84-4b6f-9802-40b4e18c102a; path=/; expires=Thu, 11-Dec-2025 20:40:17 GMT; domain=.pswec.com; samesite=none; secure Set-Cookie: c=1702413617; path=/; expires=Thu, 11-Dec-2025 20:40:17 GMT; domain=.pswec.com; samesite=none; secure Set-Cookie: tuuid_lu=1702413617; path=/; expires=Thu, 11-Dec-2025 20:40:17 GMT; domain=.pswec.com; samesite=none; secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.22	50171	38.98.69.175	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	728	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000006578C52E00000000000000006578C52700000000000000000000000000000000000000006578C52B
2023-12-12 20:40:17 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Tue, 12 Dec 2023 20:40:16 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-385418417; includeSubDomains
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.22	50117	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	634	OUT	GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:17 UTC	172	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2023-12-12 20:40:17 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.22	50137	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	1335	OUT	GET /merge?pid=2&3pid=EAF92472013E4E6D9A751C1DA567BFFF HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; ljtrtb=eJwVjcFOwzAQRP8lZ1ay12vvmluSJlVVVCiCqOJSOXYiCOXQ0qoqiH%2FHuexh3tuZ3wKL%2B6IpW4%2FEqLRpqHELX7LVtV6U1nHVtm1xVyBnzxitA48GIlEESkZAtHeQYqCIvRpliNn1cyc6I8xekbC2wmKsyUhMRg9bfNHrxStohlW1dHNOOX%2FbTe26knC5bVL4bPRW3qtTuTzOlfP88y4vSaDBOTAoCKRGhiCWIWp2lFKGpgelbH6heWqabvv6%2FO3dIXRPfF1PX3joVv50udbdY19tP372t83xzNlnl%2F0eB7F2RIi9DKDcEAHDSGDzVV6SidoVf%2F%2B7wE96
2023-12-12 20:40:17 UTC	2571	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:17 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjk1PwkAQhv9Lz06y3zPrbUtbgjVoDRD0QrbbVi14ACEEjf%2Fd6WUymeeZmfc3U9l9VobKK4NKSF2a0hU%2BoJUzWQTrMK%2BqKrvLFLKntZQRBw3JmASm0wQkvYMuRZNUKwbqE7t%2BuqmcJkQvDKG0hKStZkSa0WOjVrIu1iARFvncTXPD87ftWNU5xctt2cV9KRv6yE9hfpy4ZR5Crq97rOl1z%2B0qFETvD830cAr3suUcFE3vHGhFCowYECJZhCTRma5jqFsQwvKKmYKM4203O397d4ibZ7zW45c6bBb%2BdLnONk9t3nz%2B7G7L4xnZR8d%2Bq3qydlCQWupBuD6BioMBy1V46nSSLvv7BzUiVzs%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.22	50182	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	826	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%7D
2023-12-12 20:40:17 UTC	683	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:17 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:17 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=8735234982 etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:40:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.22	50152	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	431	OUT	GET /usersync?b=apn&i=2638779048715878353 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:17 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:17 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.22	50180	69.90.254.78	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	1077	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: auid=863968679737; aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7gTIy+kIkrEMlAUYXeCNPnEQlAUYXeCNPnEVjYTBlNmM2OGYtOGRiZC0wYWZiLTM3ODYtMGU5NGMxOTgzYjQz+/uGdmVyc2lvbsL7
2023-12-12 20:40:17 UTC	862	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=863968679737; Domain=.acuityplatform.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7gTIy+kIkrEMlAUYXeCNPnEQlAUYXeCNPnEVjYTBlNmM2OGYtOGRiZC0wYWZiLTM3ODYtMGU5NGMxOTgzYjQz+4A2+kLMQyUBRhd4JEaqRCUBRhd4JEaqRSH7+4Z2ZXJzaW9uwvs="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Path=/; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=863968679737
2023-12-12 20:40:17 UTC	1077	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: auid=863968679737; aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7gTIy+kIkrEMlAUYXeCNPnEQlAUYXeCNPnEVjYTBlNmM2OGYtOGRiZC0wYWZiLTM3ODYtMGU5NGMxOTgzYjQz+/uGdmVyc2lvbsL7
2023-12-12 20:40:17 UTC	862	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=863968679737; Domain=.acuityplatform.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7gTIy+kIkrEMlAUYXeCNPnEQlAUYXeCNPnEVjYTBlNmM2OGYtOGRiZC0wYWZiLTM3ODYtMGU5NGMxOTgzYjQz+4A2+kLMQyUBRhd4JE+wRCUBRhd4JE+wRSH7+4Z2ZXJzaW9uwvs="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Path=/; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=863968679737
2023-12-12 20:40:18 UTC	1077	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: auid=863968679737; aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7gTIy+kIkrEMlAUYXeCNPnEQlAUYXeCNPnEVjYTBlNmM2OGYtOGRiZC0wYWZiLTM3ODYtMGU5NGMxOTgzYjQz+/uGdmVyc2lvbsL7
2023-12-12 20:40:18 UTC	862	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=863968679737; Domain=.acuityplatform.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7gTIy+kIkrEMlAUYXeCNPnEQlAUYXeCNPnEVjYTBlNmM2OGYtOGRiZC0wYWZiLTM3ODYtMGU5NGMxOTgzYjQz+4A2+kLMQyUBRhd4JGyuRCUBRhd4JGyuRSH7+4Z2ZXJzaW9uwvs="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Path=/; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=863968679737
2023-12-12 20:40:18 UTC	1077	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: auid=863968679737; aum=OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7gTIy+kIkrEMlAUYXeCNPnEQlAUYXeCNPnEVjYTBlNmM2OGYtOGRiZC0wYWZiLTM3ODYtMGU5NGMxOTgzYjQz+/uGdmVyc2lvbsL7
2023-12-12 20:40:19 UTC	862	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=863968679737; Domain=.acuityplatform.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqBMjf6jXVzZXJNYXRjaGluZ0lkJLaRbGFzdERyb3BUaW1lTWlsbGlzJQFGF3gIErSYbGFzdFN1Y2Nlc3NmdWxNYXRjaE1pbGxpcyUBRhd4CBK0j3RoaXJkUGFydHlVc2VySWRXSHozMmhMWkhCRkt4czN4clFVcXJ3MFFi+4Ay+kLEQyUBRhd4Ii2ARCUBRhd4Ii2ARSH7gTIy+kIkrEMlAUYXeCNPnEQlAUYXeCNPnEVjYTBlNmM2OGYtOGRiZC0wYWZiLTM3ODYtMGU5NGMxOTgzYjQz+4A2+kLMQyUBRhd4JHi4RCUBRhd4JHi4RSH7+4Z2ZXJzaW9uwvs="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Path=/; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=863968679737

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.22	50154	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	830	OUT	GET /csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D97%263pid%3DRX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
2023-12-12 20:40:17 UTC	562	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:17 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:17 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ce.lijit.com/merge?pid=97&3pid=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:40:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.22	50167	35.211.118.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	750	OUT	GET /sync?bidswitch_ssp_id=triplelift&bsw_custom_parameter=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: r.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:17 UTC	507	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Tue, 12 Dec 2023 20:40:17 GMT Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=3205&partner_device_id=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D393%26user_id%3D0%26ssp%3Dtriplelift%26bsw_param%3Df22c27da-5a11-4a3d-83b2-a6f03f26dc6d Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.22	50185	35.186.193.173	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	814	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:17 UTC	504	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_4460890557e74808b682bb9d52f355e1=1; path=/; domain=.ctnsnet.com; expires=Wed, 11 Dec 2024 20:40:17 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Tue, 12 Dec 2023 20:40:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.22	50196	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	1736	OUT	GET /merge?pid=58&3pid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; ljtrtb=eJwVjcFOwzAQRP8lZ1ay12vvmluSJlVVVCiCqOJSOXYiCOXQ0qoqiH%2FHuexh3tuZ3wKL%2B6IpW4%2FEqLRpqHELX7LVtV6U1nHVtm1xVyBnzxitA48GIlEESkZAtHeQYqCIvRpliNn1cyc6I8xekbC2wmKsyUhMRg9bfNHrxStohlW1dHNOOX%2FbTe26knC5bVL4bPRW3qtTuTzOlfP88y4vSaDBOTAoCKRGhiCWIWp2lFKGpgelbH6heWqabvv6%2FO3dIXRPfF1PX3joVv50udbdY19tP372t83xzNlnl%2F0eB7F2RIi9DKDcEAHDSGDzVV6SidoVf%2F%2B7wE96; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes
2023-12-12 20:40:17 UTC	2777	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:17 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjktvgzAQhP8L51rye9e9QYAooUpKmld7iYyBJIQe8kARrfrfa19Wq%2FlmZ%2Bc34tFrlMW54RI4ZSKTmU5NDIpNWBorDUme59FLxMH7hGDMQiuIk9IRWQskyIwmtbPS8Yq22DjvNSGTa4EAhkoEphBQKOERCo%2FeSr5mRbohDMgsmeqgS69%2F7bu8SNAO46K2l4yVeEpu8fQauPI8jhPxvECBnxe%2FruMU8Tgvw8NQbrX3PdDKRmsiOHIiaQvEogLiGGhZ1x6KilCqQqD2J7edtcfBmWWZ7c%2Fqo%2B%2F1UFTzbtqMxvKZTVa7tjA6q0%2FN3Z%2FI0L3rxsPkcTe6t9t3eBbdN%2B%2B3M3MbnpPtskrK889hXFwf4P0QXlS8QaVaTlyFDaG6cYTbVhLlJzVYC8d09PcPhGdnOw%3D%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:17 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.22	50200	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	636	OUT	GET /avatar/ea0e0b733362594417cccfb7e87d4799?s=80&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:17 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/png Content-Length: 2706 Connection: close Last-Modified: Tue, 26 Apr 2011 18:23:59 GMT Link: <https://gravatar.com/avatar/ea0e0b733362594417cccfb7e87d4799?s=80&d=identicon&r=g>; rel="canonical" Access-Control-Allow-Origin: * Expires: Tue, 12 Dec 2023 20:45:17 GMT Cache-Control: max-age=300 X-nc: HIT mia 2 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2023-12-12 20:40:17 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 0a 44 49 44 41 54 78 9c ed 9c 4f 6c 14 d7 1d c7 bf f3 6f d7 6b b2 e0 3f c1 d0 2c 01 bb 40 30 8d 71 53 29 8d 52 5a f5 e0 48 89 90 1a d5 bd 44 39 14 89 88 43 6f 89 d2 1b 3d 45 1c 7a c9 01 d1 43 aa 1e d2 a6 a2 87 aa 27 50 44 a3 70 70 d5 88 a0 88 2a aa ba 26 36 e0 c0 12 d7 0e f6 96 5d 1b 6f ec d9 dd f9 d7 c3 ee 1b 66 67 de 9b 79 33 f3 ac 22 75 be 27 7b e6 ed 9b 37 9f fd ee cc 9b df 77 f7 49 1b a7 fe e6 40 80 94 b1 22 72 d3 a3 68 7f f4 6f 38 f5 16 ec aa 9e aa 3f a9 a8 41 39 3a 08 00 b0 e6 d7 e0 34 8c 54 fd c9 23 05 48 43 79 e4 4e 3c 8d f6 c5 7b b0 2a 8d 54 fd 11 a9 69 3b 20 e0 d4 c9 61 00 40 f3 Data Ascii: PNGIHDRPPpHYs+DIDATxOlok?,@0qS)RZHD9Co=EzC'PDpp&6]ofgy3"u'{7wI@"rho8?A9:4T#HCyN<{Ti; a@
2023-12-12 20:40:17 UTC	1337	IN	Data Raw: e5 3a 1f 3c 77 00 12 b4 17 76 c3 ae 34 7a 66 10 66 b9 0e 79 a7 06 b3 5c ef 69 ee ac b5 a1 fd 60 4f e4 b9 c2 b4 a1 bf 37 17 88 09 82 cf c2 dd 0c 43 e2 08 81 68 f9 84 b5 bc 15 d8 26 8d 14 22 43 25 a5 d4 0f ff 4c cc 61 cc 45 95 52 44 86 a3 ca 9d 63 72 8c 2d 6d c6 12 38 ab b4 19 46 92 9b 43 d8 47 3e ee 75 8d b5 9f e5 da b4 19 8b ec 6f 94 24 c3 f0 2b 0e c4 c8 eb 65 cc eb 5a 1c 78 49 32 16 bf b9 7a 00 8a cc 30 78 20 72 df 6c 38 21 c6 81 17 36 76 96 68 2e 54 bd 3b 45 66 18 c0 a3 49 31 6d c2 ac 94 fa e3 dd 6c ba 10 f5 f3 37 a8 13 66 6b 79 2b 16 3c 51 19 8b 3b d2 b0 0c 43 3f 37 8b ad b3 9f 33 27 cc 61 ef 24 ef c7 39 ea 4e dd 69 c4 ff 71 0e bd 53 87 8c d9 2c d7 b0 75 f6 73 e8 e7 66 a9 a6 f0 bb 50 25 1b 45 66 18 7e d1 9c e8 15 17 3c b7 31 dd 89 5e 45 c1 13 99 b1 28 Data Ascii: :<wv4zffy\i`O7Ch&"C%LaERDcr-m8FCG>uo$+eZxI2z0x rl8!6vh.T;EfI1ml7fky+<Q;C?73'a$9NiqS,usfP%Ef~<1^E(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.22	50176	82.145.213.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	710	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	807	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU757f221e63b64927b1c7a11275bcba2c Pragma: no-cache Set-Cookie: UID=OPU757f221e63b64927b1c7a11275bcba2c; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2023-12-12 20:40:18 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 37 35 37 66 32 32 31 65 36 33 62 36 34 39 32 37 62 31 63 37 61 31 31 32 37 35 62 63 62 61 32 63 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU757f221e63b64927b1c7a11275bcba2c">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.22	50210	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	1650	OUT	GET /dsp/google/cookiematch/dv?gdpr=0&gdpr_consent= HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; ljtrtb=eJwVjk1PwkAQhv9Lz06y3zPrbUtbgjVoDRD0QrbbVi14ACEEjf%2Fd6WUymeeZmfc3U9l9VobKK4NKSF2a0hU%2BoJUzWQTrMK%2BqKrvLFLKntZQRBw3JmASm0wQkvYMuRZNUKwbqE7t%2BuqmcJkQvDKG0hKStZkSa0WOjVrIu1iARFvncTXPD87ftWNU5xctt2cV9KRv6yE9hfpy4ZR5Crq97rOl1z%2B0qFETvD830cAr3suUcFE3vHGhFCowYECJZhCTRma5jqFsQwvKKmYKM4203O397d4ibZ7zW45c6bBb%2BdLnONk9t3nz%2B7G7L4xnZR8d%2Bq3qydlCQWupBuD6BioMBy1V46nSSLvv7BzUiVzs%3D
2023-12-12 20:40:18 UTC	532	IN	HTTP/1.1 302 Found Connection: close Date: Tue, 12 Dec 2023 20:40:18 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=lijit_dbm&google_hm=SHozMmhMWkhCRkt4czN4clFVcXJ3MFFi&gdpr=0 Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type X-Sovrn-Pod: ad_ap2dca1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.22	50198	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	636	OUT	GET /avatar/3d15937d91acdbeec260742f36ecaf22?s=80&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/png Content-Length: 1190 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/3d15937d91acdbeec260742f36ecaf22?s=80&d=identicon&r=g>; rel="canonical" Access-Control-Allow-Origin: * Expires: Tue, 12 Dec 2023 20:45:17 GMT Cache-Control: max-age=300 X-nc: HIT mia 1 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2023-12-12 20:40:18 UTC	1190	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 58 49 44 41 54 78 9c ed 9c cd 4e 14 41 10 c7 ff fb 95 a0 72 58 34 c4 90 18 2e c4 8b 89 17 02 47 2f de 08 de 79 05 e1 ec 11 88 d1 67 00 79 01 4c 7c 00 e0 21 24 9e 8d 1f 17 a3 6c 08 ca 62 42 0c 61 67 69 0f a4 c9 30 4c 4f 57 77 d5 ec f6 2c fd 3b cf 76 cd fe b6 67 7b ba 6a a6 6a dd 8d 5d d5 5e 59 40 c4 9d 93 cd 3d d4 4f 77 f6 71 b2 b9 37 ec 73 a9 1c 27 9b 7b 38 dd d9 47 1d 00 a2 44 37 b4 3c 00 97 02 81 28 91 4a 5a 1e 90 12 08 44 89 36 b2 f2 80 8c 40 20 4a 34 91 27 0f c8 11 08 44 89 59 4c f2 00 83 40 20 4a d4 14 c9 03 0a 04 02 51 a2 4d 1e 60 11 08 dc 5e 89 14 79 00 d0 a4 0c 96 74 ba 50 bd 3e Data Ascii: PNGIHDRPPpHYs+XIDATxNArX4.G/ygyL\|!$lbBagi0LOWw,;vg{jj]^Y@=Owq7s'{8GD7<(JZD6@ J4'DYL@ JQM`^ytP>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.22	50183	216.200.232.253	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	873	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	708	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1237 600843f master ord ord-pixel-x8 config_version:"3667" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=26416578-c532-4500-add6-307cf0745029; domain=.mathtag.com; path=/; expires=Wed, 08-Jan-2025 20:40:18 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:26416578-c532-4500-add6-307cf0745029&gdpr=0&gdpr_consent= Expires: Tue, 12 Dec 2023 20:40:16 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.22	50184	172.105.220.23	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	689	OUT	GET /pubmatic HTTP/1.1 Host: gocm.c.appier.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	627	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 153 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=qL-zbSWCDwGtJkZ9MsV4ZQ P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=qL-zbSWCDwGtJkZ9MsV4ZQ; Path=/; Domain=c.appier.net; Expires=Thu, 12 Dec 2024 20:40:18 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None
2023-12-12 20:40:18 UTC	153	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 79 4d 44 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 71 4c 2d 7a 62 53 57 43 44 77 47 74 4a 6b 5a 39 4d 73 56 34 5a 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=qL-zbSWCDwGtJkZ9MsV4ZQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.22	50195	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	1766	OUT	GET /merge?pid=71&3pid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; ljtrtb=eJwVjk1PwkAQhv9Lz06y3zPrbUtbgjVoDRD0QrbbVi14ACEEjf%2Fd6WUymeeZmfc3U9l9VobKK4NKSF2a0hU%2BoJUzWQTrMK%2BqKrvLFLKntZQRBw3JmASm0wQkvYMuRZNUKwbqE7t%2BuqmcJkQvDKG0hKStZkSa0WOjVrIu1iARFvncTXPD87ftWNU5xctt2cV9KRv6yE9hfpy4ZR5Crq97rOl1z%2B0qFETvD830cAr3suUcFE3vHGhFCowYECJZhCTRma5jqFsQwvKKmYKM4203O397d4ibZ7zW45c6bBb%2BdLnONk9t3nz%2B7G7L4xnZR8d%2Bq3qydlCQWupBuD6BioMBy1V46nSSLvv7BzUiVzs%3D
2023-12-12 20:40:18 UTC	2777	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:18 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjktvgzAQhP8L51rye9e9QYAooUpKmld7iYyBJIQe8kARrfrfa19Wq%2FlmZ%2Bc34tFrlMW54RI4ZSKTmU5NDIpNWBorDUme59FLxMH7hGDMQiuIk9IRWQskyIwmtbPS8Yq22DjvNSGTa4EAhkoEphBQKOERCo%2FeSr5mRbohDMgsmeqgS69%2F7bu8SNAO46K2l4yVeEpu8fQauPI8jhPxvECBnxe%2FruMU8Tgvw8NQbrX3PdDKRmsiOHIiaQvEogLiGGhZ1x6KilCqQqD2J7edtcfBmWWZ7c%2Fqo%2B%2F1UFTzbtqMxvKZTVa7tjA6q0%2FN3Z%2FI0L3rxsPkcTe6t9t3eBbdN%2B%2B3M3MbnpPtskrK889hXFwf4P0QXlS8QaVaTlyFDaG6cYTbVhLlJzVYC8d09PcPhGdnOw%3D%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.22	50197	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	680	OUT	GET /xuid?mid=3335&xuid=2638779048715878353&dongle=4d58&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:18 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:18 GMT; Secure; SameSite=None
2023-12-12 20:40:18 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.22	50189	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	860	OUT	GET /sync?dsp_id=2&user_id=2c80b275-6a96-4623-a12b-c0c93c69aed9&expires=3&user_group=1&ssp=pubmatic HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:18 UTC	614	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.22	50199	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	1661	OUT	GET /merge?pid=26&3pid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; ljtrtb=eJwVjcFOwzAQRP8lZ1ay12vvmluSJlVVVCiCqOJSOXYiCOXQ0qoqiH%2FHuexh3tuZ3wKL%2B6IpW4%2FEqLRpqHELX7LVtV6U1nHVtm1xVyBnzxitA48GIlEESkZAtHeQYqCIvRpliNn1cyc6I8xekbC2wmKsyUhMRg9bfNHrxStohlW1dHNOOX%2FbTe26knC5bVL4bPRW3qtTuTzOlfP88y4vSaDBOTAoCKRGhiCWIWp2lFKGpgelbH6heWqabvv6%2FO3dIXRPfF1PX3joVv50udbdY19tP372t83xzNlnl%2F0eB7F2RIi9DKDcEAHDSGDzVV6SidoVf%2F%2B7wE96; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes
2023-12-12 20:40:18 UTC	2777	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:18 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjktvgzAQhP8L51rye9e9QYAooUpKmld7iYyBJIQe8kARrfrfa19Wq%2FlmZ%2Bc34tFrlMW54RI4ZSKTmU5NDIpNWBorDUme59FLxMH7hGDMQiuIk9IRWQskyIwmtbPS8Yq22DjvNSGTa4EAhkoEphBQKOERCo%2FeSr5mRbohDMgsmeqgS69%2F7bu8SNAO46K2l4yVeEpu8fQauPI8jhPxvECBnxe%2FruMU8Tgvw8NQbrX3PdDKRmsiOHIiaQvEogLiGGhZ1x6KilCqQqD2J7edtcfBmWWZ7c%2Fqo%2B%2F1UFTzbtqMxvKZTVa7tjA6q0%2FN3Z%2FI0L3rxsPkcTe6t9t3eBbdN%2B%2B3M3MbnpPtskrK889hXFwf4P0QXlS8QaVaTlyFDaG6cYTbVhLlJzVYC8d09PcPhGdnOw%3D%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.22	50216	142.250.189.132	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:17 UTC	758	OUT	GET /ads/measurement/l?ebcid=ALh7CaSMg3tX9_PIF4SY_sAcdMshRTnWzYLwVdLD_SdZBrHfpSI9R6MIe9QmIklaUEkSUYNQPIwNBVm1egUFc8lnS4Ta5jVsng HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 12 Dec 2023 20:40:18 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.22	50186	195.5.165.20	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	709	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	238	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: ragnarok-d0af3df6a3fc@version_1.578v2 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 1ms Date: Tue, 12 Dec 2023 20:40:18 GMT
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.22	50207	44.194.38.185	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	484	OUT	GET /match/ox?ex_uid=948745c2-768b-068b-3f56-623f7049407e HTTP/1.1 Host: match.justpremium.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: jpxumatched=ox; jpxumaster=um-4f6d4c28-27ff-4d51-8e1b-7edc0c421f1c-1702413613
2023-12-12 20:40:18 UTC	242	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: jpxumatched=ox; Path=/; Domain=justpremium.com; Expires=Wed, 13 Dec 2023 20:40:18 GMT; Secure; SameSite=None
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.22	50205	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	803	OUT	GET /w/1.0/sd?id=537123500&val=863968679737 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:18 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.22	50206	34.98.64.218	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	839	OUT	GET /w/1.0/sd?id=540394477&val=2527372694113908282&gdpr=0&gdpr_consent= HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:18 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.22	50219	18.232.190.152	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702
2023-12-12 20:40:18 UTC	456	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=f5b0331c-a87f-0a54-5161-c61233d96702; Path=/; Domain=kargo.com; Expires=Wed, 11 Dec 2024 20:40:18 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.22	50215	74.119.119.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	829	OUT	GET /syncframe?origin=publishertagids&topUrl=mathblog.com&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:18 UTC	410	IN	HTTP/1.1 200 OK content-type: text/html; charset=utf-8 date: Tue, 12 Dec 2023 20:40:17 GMT server: Kestrel cache-control: private, max-age=3600 transfer-encoding: chunked x-robots-tag: noindex cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp server-processing-duration-in-ticks: 1258507 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:40:18 UTC	15073	IN	Data Raw: 33 41 44 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 44 4f 4d 41 49 4e 5f 4e 41 4d 45 20 3d 20 22 63 73 6d 2e 76 61 2e 75 73 2e 63 72 69 74 65 6f 2e 6e 65 74 22 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 52 41 54 49 4f 20 3d 20 31 30 30 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 47 55 4d 5f 44 4f 4d 41 49 4e 20 3d 20 22 67 75 6d 2e 63 72 69 74 65 6f 2e 63 6f 6d 22 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 Data Ascii: 3AD4<!DOCTYPE html><html><head> <script type="text/javascript"> window.CONFIG_CSM_DOMAIN_NAME = "csm.va.us.criteo.net"; window.CONFIG_CSM_RATIO = 100; window.GUM_DOMAIN = "gum.criteo.com"; </script> <script type="te

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.22	50193	134.122.57.34	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	804	OUT	GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __kuid=bcb09ff6-3151-4b08-8f0d-11bcba91496e.471627613
2023-12-12 20:40:18 UTC	517	IN	HTTP/1.1 302 302 Date: Tue, 12 Dec 2023 20:40:18 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=bcb09ff6-3151-4b08-8f0d-11bcba91496e.471627618; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:bcb09ff6-3151-4b08-8f0d-11bcba91496e&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.22	50194	35.194.66.159	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	874	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=EAF92472013E4E6D9A751C1DA567BFFF
2023-12-12 20:40:18 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:EAF92472013E4E6D9A751C1DA567BFFF&gdpr=0&gdpr_consent= Expires: Mon, 11 Dec 2023 20:40:18 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2023-12-12 20:40:18 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.22	50234	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	820	OUT	GET /w/1.0/sd?id=537138692&val=di_1296d48b0e654caba2d72 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg
2023-12-12 20:40:18 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.22	50208	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	615	OUT	GET /w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD
2023-12-12 20:40:18 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.22	50203	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	1646	OUT	GET /merge?pid=80&3pid=LQ2T1KDU-17-IBG6&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; ljtrtb=eJwVjk1PwkAQhv9Lz06y3zPrbUtbgjVoDRD0QrbbVi14ACEEjf%2Fd6WUymeeZmfc3U9l9VobKK4NKSF2a0hU%2BoJUzWQTrMK%2BqKrvLFLKntZQRBw3JmASm0wQkvYMuRZNUKwbqE7t%2BuqmcJkQvDKG0hKStZkSa0WOjVrIu1iARFvncTXPD87ftWNU5xctt2cV9KRv6yE9hfpy4ZR5Crq97rOl1z%2B0qFETvD830cAr3suUcFE3vHGhFCowYECJZhCTRma5jqFsQwvKKmYKM4203O397d4ibZ7zW45c6bBb%2BdLnONk9t3nz%2B7G7L4xnZR8d%2Bq3qydlCQWupBuD6BioMBy1V46nSSLvv7BzUiVzs%3D
2023-12-12 20:40:18 UTC	2757	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:18 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjktvgzAQhP8L51rye9e9QYAooUpKmld7iYyBJIQe8kARrfrfa19Wq%2FlmZ%2Bc34tFrlMW54RI4ZSKTmU5NDIpNWBorDUme59FLxMH7hGDMQiuIk9IRWQskyIwmtbPS8Yq22DjvNSGTa4EAhkoEphBQKOERCo%2FeSr5mRbohDMgsmeqgS69%2F7bu8SNAO46K2l4yVeEpu8fQauPI8jhPxvECBnxe%2FruMU8Tgvw8NQbrX3PdDKRmsiOHIiaQvEogLiGGhZ1x6KilCqQqD2J7edtcfBmWWZ7c%2Fqo%2B%2F1UFTzbtqMxvKZTVa7tjA6q0%2FN3Z%2FI0L3rxsPkcTe6t9t3eBbdN%2B%2B3M3MbnpPtskrK889hXFwf4P0QXlS8QaVaTlyFDaG6cYTbVhLlJzVYC8d09PcPhGdnOw%3D%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.22	50225	3.213.9.240	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	970	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=0d2b585e-dbe9-4680-8c70-3d0a0e81332d; ss=7UkAu4JBMzE1aNIs%2BRMziitYfTqLIbZ70Kfc5Sb%2B0ClSOVKv2dEqydBwpceqeA9%2BkfM0T15N1I3TtwQrF5jmfg%3D%3D
2023-12-12 20:40:18 UTC	337	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=0d2b585e-dbe9-4680-8c70-3d0a0e81332d&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.22	50230	35.207.24.140	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	701	OUT	GET /ul_cb/sync?ssp=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=55927f38-2b7b-4f3f-958e-daf09ffe771c; c=1702413616; tuuid_lu=1702413616
2023-12-12 20:40:18 UTC	716	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Tue, 12 Dec 2023 20:40:18 GMT Location: //ce.lijit.com/merge?pid=87&3pid=55927f38-2b7b-4f3f-958e-daf09ffe771c Set-Cookie: tuuid=55927f38-2b7b-4f3f-958e-daf09ffe771c; path=/; expires=Thu, 11-Dec-2025 20:40:18 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1702413618; path=/; expires=Thu, 11-Dec-2025 20:40:18 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!sovrn,1702413618; path=/; expires=Thu, 11-Dec-2025 20:40:18 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.22	50221	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	2702	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=40260786&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:18 UTC	815	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=5; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1703548800%3A201_263_235_260_262_259_228_219_226_261_258_236_256_245%7C1702944000%3A253_252_265%7C1703376000%3A257%7C1702425600%3A248_255; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Length: 625 Connection: close
2023-12-12 20:40:18 UTC	625	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 6d 61 74 63 68 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 70 3d 4d 31 37 31 37 30 35 34 39 30 31 26 75 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 61 2e 61 67 6b 6e 2e 63 6f 6d 2f 61 64 73 63 6f 72 65 73 2f 67 2e 70 69 78 65 6c 3f 73 69 64 3d 39 32 31 32 33 30 38 32 37 38 26 70 75 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 Data Ascii: PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.22	50223	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	1395	OUT	GET /usersync/redirect?partner=pubmatic&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:18 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.22	50224	52.5.77.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	916	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; matchopenx=5; matchpubmatic=5
2023-12-12 20:40:18 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Tue, 12 Dec 2023 20:40:18 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:ViN9mkBO1Rd9xZ5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0a10dd62e034df3f5@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; Domain=.w55c.net; Expires=Sun, 12-Jan-2025 20:40:18 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Thu, 11-Jan-2024 20:40:18 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.22	50227	74.119.119.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	925	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:18 UTC	531	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:17 GMT server: Kestrel cache-control: no-cache expires: Tue, 12 Dec 2023 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 842497 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.22	50214	34.199.141.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	844	OUT	GET /map/c=14701/tp=MTAI/tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=a31bb17c5a71a653e40698b548c9c280; _cc_cc="ACZ4XmNQSDQ2TEoyNE82TTQ3TDQzNU41MTCztEgyNbFItkw2sjBgAILUiqN6IBoKAEyRCk4%3D"; _cc_aud="ABR4XmNgYGBIrTiqB6SgAAAW5gHR"
2023-12-12 20:40:18 UTC	315	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.52.161 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-12 20:40:18 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.22	50217	142.250.189.132	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	617	OUT	GET /pagead/drt/ui HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	426	IN	HTTP/1.1 302 Found Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 12 Dec 2023 20:40:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.22	50226	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	2711	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=40129352&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:18 UTC	820	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=5; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157108:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1703376000%3A257%7C1702425600%3A248_255%7C1703548800%3A235_262_261_260_236_263_245_219_201_256_226_259_258_228%7C1702944000%3A253_252_265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:40:17 GMT Content-Length: 625 Connection: close
2023-12-12 20:40:18 UTC	625	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 6d 61 74 63 68 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 70 3d 4d 31 37 31 37 30 35 34 39 30 31 26 75 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 61 2e 61 67 6b 6e 2e 63 6f 6d 2f 61 64 73 63 6f 72 65 73 2f 67 2e 70 69 78 65 6c 3f 73 69 64 3d 39 32 31 32 33 30 38 32 37 38 26 70 75 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 Data Ascii: PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.22	50218	142.250.189.132	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	758	OUT	GET /ads/measurement/l?ebcid=ALh7CaRz3LGlct3XrmYl2ypjDObVViS3xdwzhU2iqjvWGumdIrzaroZzk4S9mlbHm3MrwwDmUf_lr5lnL3x9nIsOlJbjhzYg7A HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 12 Dec 2023 20:40:18 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.22	50237	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	842	OUT	GET /w/1.0/sd?id=540290843&val=d6.c5bd044156be4b89a58d19d2b5fdecfd HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg
2023-12-12 20:40:18 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.22	50213	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	728	OUT	GET /712188.gif?partner_uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=Fz/V4byI2Z3hm+q0GvVSlp/Bhyt0rrFWvUk+bF1wm9I=; pxrc=CAA=
2023-12-12 20:40:18 UTC	743	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=c2e187b7ce3def9421212dce9daf6efba45272f5fcfcd3713d9103b6b4368b1e791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=FR56KNo2rWtopO3FtitlJp/Bhyt0rrFWvUk+bF1wm9I=; Path=/; Domain=rlcdn.com; Expires=Wed, 11 Dec 2024 20:40:18 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLKK46sGEgUI6EcQAA==; Path=/; Domain=rlcdn.com; Expires=Sat, 10 Feb 2024 20:40:18 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.22	50220	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	826	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%7D
2023-12-12 20:40:18 UTC	683	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:18 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:18 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=1747566440 etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:40:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.22	50212	18.67.39.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	719	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 36c050103b969d83a8b90ba7cba12542.cloudfront.net (CloudFront) X-Amz-Cf-Pop: YTO50-P2 X-Amz-Cf-Id: VHmohWZW7hKX99_tn6W_za845kpX7zmQBgkZ1VP1RD6IYcxMn5S9jQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.22	50177	82.145.213.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	710	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	807	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU69f6684a10134462a80749481aa6c408 Pragma: no-cache Set-Cookie: UID=OPU69f6684a10134462a80749481aa6c408; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2023-12-12 20:40:18 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 36 39 66 36 36 38 34 61 31 30 31 33 34 34 36 32 61 38 30 37 34 39 34 38 31 61 61 36 63 34 30 38 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU69f6684a10134462a80749481aa6c408">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.22	50236	34.96.105.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	679	OUT	GET /v1/redirect/openx?partner_device_id=6578C52C4BC40314243CDFDBBLIS HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b=6578C52C4BC40314243CDFDBBLIS
2023-12-12 20:40:18 UTC	258	IN	HTTP/1.1 307 Temporary Redirect Location: https://pixel.rubiconproject.com/exchange/sync.php?p=blismedia Content-Length: 0 Date: Tue, 12 Dec 2023 20:40:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.22	50233	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	1877	OUT	GET /merge?pid=71&3pid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; ljtrtb=eJwVjktvgzAQhP8L51rye9e9QYAooUpKmld7iYyBJIQe8kARrfrfa19Wq%2FlmZ%2Bc34tFrlMW54RI4ZSKTmU5NDIpNWBorDUme59FLxMH7hGDMQiuIk9IRWQskyIwmtbPS8Yq22DjvNSGTa4EAhkoEphBQKOERCo%2FeSr5mRbohDMgsmeqgS69%2F7bu8SNAO46K2l4yVeEpu8fQauPI8jhPxvECBnxe%2FruMU8Tgvw8NQbrX3PdDKRmsiOHIiaQvEogLiGGhZ1x6KilCqQqD2J7edtcfBmWWZ7c%2Fqo%2B%2F1UFTzbtqMxvKZTVa7tjA6q0%2FN3Z%2FI0L3rxsPkcTe6t9t3eBbdN%2B%2B3M3MbnpPtskrK889hXFwf4P0QXlS8QaVaTlyFDaG6cYTbVhLlJzVYC8d09PcPhGdnOw%3D%3D; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52
2023-12-12 20:40:18 UTC	2947	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:18 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjktPwzAQhP9Lzqzk96652U1SlaCW8CiFC3KcBJqWA6VVVRD%2FHfuyWu18szO%2FhSiui8rVVigUjMtKVaa0DjWf8dJpg76u6%2BKq0JQ4VylHM1kCZ9aA0taBZ5aD8K4sNWO21iKxAhMrJecBRwlRqQiqlwTEk6uPQUXRsZGGmFib84WRhGiZIuSakKSWSSKZpNtWPPKmfAKOsPBzk%2B8q3V83U914CqfLsg%2B7irf04Q9u%2FpV1nas6L887bOhll9ZHVxK937Q5MJe736QeFNRgDEhBAhQbEQJphMjRqL5PouyAMZ0fmmQ5PIfwfop21VabrX7Y782p6W6m%2BXCxQSyCv38eG2uq%2FmP4ThaVu0%2FT5W12%2FLZmH9Z3eG6mT7FfL%2BzhdJ6tV51vtz9vl%2BXXEROPOaITA2k9CogdDcDMEEGEUYFOk1nqZeSm%2BPsHk6lwfg%3D%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.22	50238	38.98.69.175	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	728	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000006578C52E00000000000000006578C52700000000000000000000000000000000000000006578C52B
2023-12-12 20:40:18 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Tue, 12 Dec 2023 20:40:17 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-385418418; includeSubDomains
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.22	50232	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	1672	OUT	GET /merge?pid=94&3pid=6578C52BA3E5B7861049C694BLIS&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; ljtrtb=eJwVjk1PwkAQhv9Lz06y3zPrbUtbgjVoDRD0QrbbVi14ACEEjf%2Fd6WUymeeZmfc3U9l9VobKK4NKSF2a0hU%2BoJUzWQTrMK%2BqKrvLFLKntZQRBw3JmASm0wQkvYMuRZNUKwbqE7t%2BuqmcJkQvDKG0hKStZkSa0WOjVrIu1iARFvncTXPD87ftWNU5xctt2cV9KRv6yE9hfpy4ZR5Crq97rOl1z%2B0qFETvD830cAr3suUcFE3vHGhFCowYECJZhCTRma5jqFsQwvKKmYKM4203O397d4ibZ7zW45c6bBb%2BdLnONk9t3nz%2B7G7L4xnZR8d%2Bq3qydlCQWupBuD6BioMBy1V46nSSLvv7BzUiVzs%3D
2023-12-12 20:40:18 UTC	2769	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:18 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjktvgzAQhP8L51rye9e9QYAooUpKmld7iYyBJIQe8kARrfrfa19Wq%2FlmZ%2Bc34tFrlMW54RI4ZSKTmU5NDIpNWBorDUme59FLxMH7hGDMQiuIk9IRWQskyIwmtbPS8Yq22DjvNSGTa4EAhkoEphBQKOERCo%2FeSr5mRbohDMgsmeqgS69%2F7bu8SNAO46K2l4yVeEpu8fQauPI8jhPxvECBnxe%2FruMU8Tgvw8NQbrX3PdDKRmsiOHIiaQvEogLiGGhZ1x6KilCqQqD2J7edtcfBmWWZ7c%2Fqo%2B%2F1UFTzbtqMxvKZTVa7tjA6q0%2FN3Z%2FI0L3rxsPkcTe6t9t3eBbdN%2B%2B3M3MbnpPtskrK889hXFwf4P0QXlS8QaVaTlyFDaG6cYTbVhLlJzVYC8d09PcPhGdnOw%3D%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.22	50231	35.214.160.165	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	820	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token} HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.22	50239	193.122.130.38	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	819	OUT	GET /services?uid=AAB3wk7K8YkAABTAD88gJQ&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D2527372694113908282%26bee_sync_partners%3Dox%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D4 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	1427	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://ssum-sec.casalemedia.com/usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D37F922BDC3D34268B74E8F2EE0CC4051%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fuserid%253D2527372694113908282%2526bee_sync_partners%253Dox%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dox%2526bee_sync_hop_count%253D4%26uid%3D Set-Cookie: tads_uidp_73=AAB3wk7K8YkAABTAD88gJQ; Max-Age=63072000; Expires=Thu, 11 Dec 2025 20:40:18 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=37F922BDC3D34268B74E8F2EE0CC4051; Max-Age=63072000; Expires=Thu, 11 Dec 2025 20:40:18 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20231212204018+0000; Max-Age=63072000; Expires=Thu, 11 Dec 2025 20:40:18 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Thu, 11 Dec 2025 20:40:18 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://u.openx.net/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 1058821837 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.22	50241	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	1694	OUT	GET /merge?pid=16&3pid=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; ljtrtb=eJwVjk1PwkAQhv9Lz06y3zPrbUtbgjVoDRD0QrbbVi14ACEEjf%2Fd6WUymeeZmfc3U9l9VobKK4NKSF2a0hU%2BoJUzWQTrMK%2BqKrvLFLKntZQRBw3JmASm0wQkvYMuRZNUKwbqE7t%2BuqmcJkQvDKG0hKStZkSa0WOjVrIu1iARFvncTXPD87ftWNU5xctt2cV9KRv6yE9hfpy4ZR5Crq97rOl1z%2B0qFETvD830cAr3suUcFE3vHGhFCowYECJZhCTRma5jqFsQwvKKmYKM4203O397d4ibZ7zW45c6bBb%2BdLnONk9t3nz%2B7G7L4xnZR8d%2Bq3qydlCQWupBuD6BioMBy1V46nSSLvv7BzUiVzs%3D
2023-12-12 20:40:18 UTC	2791	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:18 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjktvgzAQhP8L51rye9e9QYAooUpKmld7iYyBJIQe8kARrfrfa19Wq%2FlmZ%2Bc34tFrlMW54RI4ZSKTmU5NDIpNWBorDUme59FLxMH7hGDMQiuIk9IRWQskyIwmtbPS8Yq22DjvNSGTa4EAhkoEphBQKOERCo%2FeSr5mRbohDMgsmeqgS69%2F7bu8SNAO46K2l4yVeEpu8fQauPI8jhPxvECBnxe%2FruMU8Tgvw8NQbrX3PdDKRmsiOHIiaQvEogLiGGhZ1x6KilCqQqD2J7edtcfBmWWZ7c%2Fqo%2B%2F1UFTzbtqMxvKZTVa7tjA6q0%2FN3Z%2FI0L3rxsPkcTe6t9t3eBbdN%2B%2B3M3MbnpPtskrK889hXFwf4P0QXlS8QaVaTlyFDaG6cYTbVhLlJzVYC8d09PcPhGdnOw%3D%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:18 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.22	50211	162.55.120.196	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	815	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:18 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.3 Date: Tue, 12 Dec 2023 20:40:18 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.22	50251	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	831	OUT	GET /pixel/attr?d=AHNF13JBz4Q2eqcnz1pbVaCtg3DrAenSbdmYXUXznRCe3gvKjhAUWJpkKBBXTJuh4_8hzTBssy5zdA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:19 UTC	236	IN	HTTP/1.1 204 No Content Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: text/html Server: HTTP server (unknown) Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.22	50247	52.5.77.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	944	OUT	GET /ping_match.gif?ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEMGa8_lDPgEhdzWBcQgeXns&google_cver=1&google_push=AXcoOmQyCI2_46bKneXmQ0PypwJXrLUdUcaOG63RqnwUSbuQOCRmNPwVZtpIXht2_VQ25gObLB87X6MJo0LhKM5eQQDUOmC-d4M HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; matchopenx=5; matchpubmatic=5
2023-12-12 20:40:19 UTC	875	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Tue, 12 Dec 2023 20:40:18 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=VmlOOW1rQk8xUmQ5eFo1&google_gid=CAESEMGa8_lDPgEhdzWBcQgeXns&google_cver=1&google_push=AXcoOmQyCI2_46bKneXmQ0PypwJXrLUdUcaOG63RqnwUSbuQOCRmNPwVZtpIXht2_VQ25gObLB87X6MJo0LhKM5eQQDUOmC-d4M Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0d63ef07f1db9a08b@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; Domain=.w55c.net; Expires=Sun, 12-Jan-2025 20:40:19 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchgoogle=5; Domain=.w55c.net; Expires=Thu, 11-Jan-2024 20:40:19 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.22	50244	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:18 UTC	2801	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.22	50275	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	734	OUT	GET /pixel?google_nid=lijit_dbm&google_hm=SHozMmhMWkhCRkt4czN4clFVcXJ3MFFi&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:19 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:19 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.22	50271	35.186.193.173	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	814	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:19 UTC	504	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_4cce8881760848eca1d392fc50a0a285=1; path=/; domain=.ctnsnet.com; expires=Wed, 11 Dec 2024 20:40:19 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Tue, 12 Dec 2023 20:40:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.22	50272	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2809	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=863968679737 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:18 GMT; path=/ Set-Cookie: PugT=1702413618; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:18 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.22	50249	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	1919	OUT	GET /dsp/google/pixelmatch?google_gid=CAESEF13_8tZ8ShsNJtBPYvQBxM&google_cver=1&google_push=AXcoOmTmixh0MCaAmkBPl0U09GCspfj2pl3hnK_9eBTprDfGTKGXgo2lFp7mDUmnYwvacBGquna7v1Pd2mFntlOkICmUBKN5J2Y HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; ljtrtb=eJwVjktvgzAQhP8L51rye9e9QYAooUpKmld7iYyBJIQe8kARrfrfa19Wq%2FlmZ%2Bc34tFrlMW54RI4ZSKTmU5NDIpNWBorDUme59FLxMH7hGDMQiuIk9IRWQskyIwmtbPS8Yq22DjvNSGTa4EAhkoEphBQKOERCo%2FeSr5mRbohDMgsmeqgS69%2F7bu8SNAO46K2l4yVeEpu8fQauPI8jhPxvECBnxe%2FruMU8Tgvw8NQbrX3PdDKRmsiOHIiaQvEogLiGGhZ1x6KilCqQqD2J7edtcfBmWWZ7c%2Fqo%2B%2F1UFTzbtqMxvKZTVa7tjA6q0%2FN3Z%2FI0L3rxsPkcTe6t9t3eBbdN%2B%2B3M3MbnpPtskrK889hXFwf4P0QXlS8QaVaTlyFDaG6cYTbVhLlJzVYC8d09PcPhGdnOw%3D%3D; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52
2023-12-12 20:40:19 UTC	638	IN	HTTP/1.1 307 Temporary Redirect Connection: close Date: Tue, 12 Dec 2023 20:40:19 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_push=AXcoOmTmixh0MCaAmkBPl0U09GCspfj2pl3hnK_9eBTprDfGTKGXgo2lFp7mDUmnYwvacBGquna7v1Pd2mFntlOkICmUBKN5J2Y&google_hm=Hz32hLZHBFKxs3xrQUqrw0Qb Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type X-Sovrn-Pod: ad_ap2dca1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.22	50250	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	826	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%7D
2023-12-12 20:40:19 UTC	683	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:19 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:19 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=8211966367 etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:40:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.22	50242	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	883	OUT	GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=8735234982 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUYASABKAIyCwjmydrjqNe9PBAFOAFaB3N2eDl0NTBgAg..
2023-12-12 20:40:19 UTC	542	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Length: 181 Connection: close server: Kestrel location: https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUYASABKAIyCwjm-N2Uqde9PBAFOAFaC2FkY29uZHVjdG9yYAI.; expires=Thu, 12 Dec 2024 20:40:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:19 UTC	181	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec">https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.22	50256	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2882	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:04:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:04:22 GMT; path=/ Set-Cookie: PugT=1702379062; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:04:22 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:19 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.22	50252	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	1672	OUT	GET /merge?pid=49&3pid=4trFhcvjylTg&ev=1&pid=558511&gdpr_consent=&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; ljtrtb=eJwVjk1PwkAQhv9Lz06y3zPrbUtbgjVoDRD0QrbbVi14ACEEjf%2Fd6WUymeeZmfc3U9l9VobKK4NKSF2a0hU%2BoJUzWQTrMK%2BqKrvLFLKntZQRBw3JmASm0wQkvYMuRZNUKwbqE7t%2BuqmcJkQvDKG0hKStZkSa0WOjVrIu1iARFvncTXPD87ftWNU5xctt2cV9KRv6yE9hfpy4ZR5Crq97rOl1z%2B0qFETvD830cAr3suUcFE3vHGhFCowYECJZhCTRma5jqFsQwvKKmYKM4203O397d4ibZ7zW45c6bBb%2BdLnONk9t3nz%2B7G7L4xnZR8d%2Bq3qydlCQWupBuD6BioMBy1V46nSSLvv7BzUiVzs%3D
2023-12-12 20:40:19 UTC	2753	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:19 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJwVjktvgzAQhP8L51rye9e9QYAooUpKmld7iYyBJIQe8kARrfrfa19Wq%2FlmZ%2Bc34tFrlMW54RI4ZSKTmU5NDIpNWBorDUme59FLxMH7hGDMQiuIk9IRWQskyIwmtbPS8Yq22DjvNSGTa4EAhkoEphBQKOERCo%2FeSr5mRbohDMgsmeqgS69%2F7bu8SNAO46K2l4yVeEpu8fQauPI8jhPxvECBnxe%2FruMU8Tgvw8NQbrX3PdDKRmsiOHIiaQvEogLiGGhZ1x6KilCqQqD2J7edtcfBmWWZ7c%2Fqo%2B%2F1UFTzbtqMxvKZTVa7tjA6q0%2FN3Z%2FI0L3rxsPkcTe6t9t3eBbdN%2B%2B3M3MbnpPtskrK889hXFwf4P0QXlS8QaVaTlyFDaG6cYTbVhLlJzVYC8d09PcPhGdnOw%3D%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_49=4trFhcvjylTg; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.22	50258	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2814	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968625794546145592 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	582	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:06:14 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-968625794546145592; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:06:14 GMT; path=/ Set-Cookie: PugT=1702379174; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:06:14 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.22	50191	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	784	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:19 UTC	1095	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:19 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:19 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.22	50268	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	1875	OUT	GET /merge?pid=97&3pid=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; ljtrtb=eJwVjktvgzAQhP8L51rye9e9QYAooUpKmld7iYyBJIQe8kARrfrfa19Wq%2FlmZ%2Bc34tFrlMW54RI4ZSKTmU5NDIpNWBorDUme59FLxMH7hGDMQiuIk9IRWQskyIwmtbPS8Yq22DjvNSGTa4EAhkoEphBQKOERCo%2FeSr5mRbohDMgsmeqgS69%2F7bu8SNAO46K2l4yVeEpu8fQauPI8jhPxvECBnxe%2FruMU8Tgvw8NQbrX3PdDKRmsiOHIiaQvEogLiGGhZ1x6KilCqQqD2J7edtcfBmWWZ7c%2Fqo%2B%2F1UFTzbtqMxvKZTVa7tjA6q0%2FN3Z%2FI0L3rxsPkcTe6t9t3eBbdN%2B%2B3M3MbnpPtskrK889hXFwf4P0QXlS8QaVaTlyFDaG6cYTbVhLlJzVYC8d09PcPhGdnOw%3D%3D; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d
2023-12-12 20:40:19 UTC	3268	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:19 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyNkE1u2zAQhe%2BidQcgh3%2FD7EhLMhwVSZWmjttNQJFiEtldxIlhOEHuXvIG3QyIeR%2FnzZvPRlFz1bhOOlqJFjizGqSyDjyzHNC7tlWM2V5h861BXdiMGNGkACpwDjKIBCQmhKAzExl1ijpV1hRWCM6DyQKilBFkEgTEi0OKQUacWKY5VragnestSoOMi052urXOKL7irVPa%2BL7vC2Yrh1qQMZZJMlyRIaFEkQz%2F%2FxQkCvt9xHs%2BtL%2BAG9j4ta59Wfp%2Fdks%2FeAqny00K%2B46P9OyPbv1adVU9nBfnvRno9748711L9HQ91uVq3rtdiUZBzlqDQEKQLBsIpAxEbrRMqYhiAsZUHVjPeXwI4ekU7e3Y7V7Uz8NBn4bpelnPFxtwE%2FzdQx6s7tLz%2FFa%2ByLr7slweV%2B9vVh%2FC9oc5D8tfPGw39ng6r7a3kx9fPh4vN6%2Fvpt6lWkw4k1IZIU40A9NzBAxZgiqVWUoict18%2FQMALITT; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.22	50274	142.250.217.228	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	810	OUT	GET /ads/measurement/l?ebcid=ALh7CaSp0yqXZBZYEam7GwUV5tbX0WgBglkE8oiV8nTL1xB1RvvbmWcbmaTgoXn-VYiywgHNbkCrBr98dImvdDATL-e-BvrhVg HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:19 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 12 Dec 2023 20:40:19 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.22	50245	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2831	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU757f221e63b64927b1c7a11275bcba2c HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:05:37 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPU757f221e63b64927b1c7a11275bcba2c&KRTB&23485-OPU757f221e63b64927b1c7a11275bcba2c&KRTB&23524-OPU757f221e63b64927b1c7a11275bcba2c; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 26-Dec-2023 11:05:37 GMT; path=/ Set-Cookie: PugT=1702379137; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:05:37 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.22	50246	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2818	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7557000061611676171P HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.22	50270	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	908	OUT	GET /idsync/ex/receive?partner_id=3205&partner_device_id=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&partner_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D393%26user_id%3D0%26ssp%3Dtriplelift%26bsw_param%3Df22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:19 UTC	1410	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:19 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D393%252526user_id%25253D0%252526ssp%25253Dtriplelift%252526bsw_param%25253Df22c27da-5a11-4a3d-83b2-a6f03f26dc6d%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.22	50255	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2818	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=qL-zbSWCDwGtJkZ9MsV4ZQ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:05:37 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:05:37 GMT; path=/ Set-Cookie: PugT=1702379137; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:05:37 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.22	50284	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	841	OUT	GET /pixel?google_nid=rp&google_hm=TFEyVDFLRFUtMTctSUJHNg==&google_push=AXcoOmQZAqWr5dyrQJpkgAEcs-hHckVChMpfoE5lOENz-K8IrVugBkhsQ2FLgwEPRBrx41oawA1j0zZe0CHqHxq_5UDeAcPm2IU HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:19 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:19 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.22	50257	172.105.220.23	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	689	OUT	GET /pubmatic HTTP/1.1 Host: gocm.c.appier.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:19 UTC	627	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 153 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=fXwOVOsIAmGPyDvtM8V4ZQ P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=fXwOVOsIAmGPyDvtM8V4ZQ; Path=/; Domain=c.appier.net; Expires=Thu, 12 Dec 2024 20:40:19 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None
2023-12-12 20:40:19 UTC	153	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 79 4d 44 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 66 58 77 4f 56 4f 73 49 41 6d 47 50 79 44 76 74 4d 38 56 34 5a 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=fXwOVOsIAmGPyDvtM8V4ZQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.22	50281	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	728	OUT	GET /712188.gif?partner_uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=Fz/V4byI2Z3hm+q0GvVSlp/Bhyt0rrFWvUk+bF1wm9I=; pxrc=CAA=
2023-12-12 20:40:19 UTC	772	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=cgLD86381YhopO3FtitlJp/Bhyt0rrFWvUk+bF1wm9I=; Path=/; Domain=rlcdn.com; Expires=Wed, 11 Dec 2024 20:40:19 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLOK46sGEgYIuOsBEAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 10 Feb 2024 20:40:19 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.22	50294	74.119.119.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	925	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:19 UTC	532	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:19 GMT server: Kestrel cache-control: no-cache expires: Tue, 12 Dec 2023 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1107826 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.22	50269	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2859	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:26416578-c532-4500-add6-307cf0745029&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:18 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:18 GMT; path=/ Set-Cookie: PugT=1702413618; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:18 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.22	50254	82.145.213.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	710	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:19 UTC	809	IN	HTTP/1.1 302 Found Server: Tengine Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU175665e227ff427986c82272bce47fbb Pragma: no-cache Set-Cookie: UID=OPU175665e227ff427986c82272bce47fbb; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2023-12-12 20:40:19 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 31 37 35 36 36 35 65 32 32 37 66 66 34 32 37 39 38 36 63 38 32 32 37 32 62 63 65 34 37 66 62 62 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU175665e227ff427986c82272bce47fbb">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.22	50259	8.28.7.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2620	OUT	GET /AdServer/SPug?partnerID=137711&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:19 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1702413619; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.22	50300	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	1161	OUT	GET /idsync/ex/push?partner_id=2499&partner_device_id=c2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553&partner_url=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D1---%26xi%3D45%26xu%3Dc2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:19 UTC	1192	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:19 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://ssc-cms.33across.com/ps/?us_privacy=1---&xi=45&xu=c2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.22	50301	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	1743	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%2522%253A%252264%2522%252C%2522brands%2522%253A%255B%257B%2522brand%2522%253A%2522Not_A%2BBrand%2522%252C%2522version%2522%253A%252299%2522%257D%252C%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522109%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522109%2522%257D%255D%252C%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Not_A%2BBrand%2522%252C%2522version%2522%253A%252299.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522109.0.5414.120%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522109.0.5414.120%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%25220.1.0%2522%257D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pandg.tapad.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:19 UTC	1101	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:19 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!8324;Expires=Sat, 10 Feb 2024 20:40:19 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:19 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.22	50283	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	883	OUT	GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=1747566440 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUYASABKAIyCwjmydrjqNe9PBAFOAFaB3N2eDl0NTBgAg..
2023-12-12 20:40:19 UTC	542	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Length: 181 Connection: close server: Kestrel location: https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUYASABKAIyCwiQ2eGUqde9PBAFOAFaC2FkY29uZHVjdG9yYAI.; expires=Thu, 12 Dec 2024 20:40:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:19 UTC	181	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec">https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.22	50273	216.200.232.253	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	873	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:19 UTC	708	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1237 600843f master ord ord-pixel-x7 config_version:"3667" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=038a6578-c533-4e00-a051-cd933f905263; domain=.mathtag.com; path=/; expires=Wed, 08-Jan-2025 20:40:19 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:038a6578-c533-4e00-a051-cd933f905263&gdpr=0&gdpr_consent= Expires: Tue, 12 Dec 2023 20:40:18 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.22	50280	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	1049	OUT	GET /usersync2/rmpssp?sub=google&redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dr1%26google_push%3D%5BRX_SPD%5D%26google_hm%3D%5BRX_UUID_B64_BIN%5D&google_gid=CAESECrEg7Zw8ClRCjvgaXO_1oc&google_cver=1&google_push=AXcoOmQMrhqggjKOJtdybiG92OMegW-1z2y2Qb55hvd3etfOKmu4SbRSEAtoJK7a9rSRle3AWJp6OzlV0nv7ZBkRPbrVGTJNJ1s HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D
2023-12-12 20:40:19 UTC	534	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:19 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache location: https://sync.targeting.unrulymedia.com/csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dr1%26google_push%3DAXcoOmQMrhqggjKOJtdybiG92OMegW-1z2y2Qb55hvd3etfOKmu4SbRSEAtoJK7a9rSRle3AWJp6OzlV0nv7ZBkRPbrVGTJNJ1s%26google_hm%3DBdyKTmYygkD3qFfBdk3YpDs connection: close
2023-12-12 20:40:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.22	50288	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2818	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU69f6684a10134462a80749481aa6c408 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 26-Dec-2023 20:40:19 GMT; path=/ Set-Cookie: PugT=1702413619; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.22	50291	35.194.66.159	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	874	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=EAF92472013E4E6D9A751C1DA567BFFF
2023-12-12 20:40:19 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:EAF92472013E4E6D9A751C1DA567BFFF&gdpr=0&gdpr_consent= Expires: Mon, 11 Dec 2023 20:40:19 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2023-12-12 20:40:19 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.22	50285	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2689	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=70967970&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	815	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=5; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1702944000%3A265_253_252%7C1702425600%3A248_255%7C1703548800%3A259_258_201_235_260_261_256_263_226_262_236_245_228_219%7C1703376000%3A257; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Length: 625 Connection: close
2023-12-12 20:40:19 UTC	625	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 6d 61 74 63 68 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 70 3d 4d 31 37 31 37 30 35 34 39 30 31 26 75 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 61 2e 61 67 6b 6e 2e 63 6f 6d 2f 61 64 73 63 6f 72 65 73 2f 67 2e 70 69 78 65 6c 3f 73 69 64 3d 39 32 31 32 33 30 38 32 37 38 26 70 75 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 Data Ascii: PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.22	50278	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2849	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:EAF92472013E4E6D9A751C1DA567BFFF&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:19 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.22	50282	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	1897	OUT	GET /merge?pid=87&3pid=55927f38-2b7b-4f3f-958e-daf09ffe771c HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; ljtrtb=eJwVjktvgzAQhP8L51rye9e9QYAooUpKmld7iYyBJIQe8kARrfrfa19Wq%2FlmZ%2Bc34tFrlMW54RI4ZSKTmU5NDIpNWBorDUme59FLxMH7hGDMQiuIk9IRWQskyIwmtbPS8Yq22DjvNSGTa4EAhkoEphBQKOERCo%2FeSr5mRbohDMgsmeqgS69%2F7bu8SNAO46K2l4yVeEpu8fQauPI8jhPxvECBnxe%2FruMU8Tgvw8NQbrX3PdDKRmsiOHIiaQvEogLiGGhZ1x6KilCqQqD2J7edtcfBmWWZ7c%2Fqo%2B%2F1UFTzbtqMxvKZTVa7tjA6q0%2FN3Z%2FI0L3rxsPkcTe6t9t3eBbdN%2B%2B3M3MbnpPtskrK889hXFwf4P0QXlS8QaVaTlyFDaG6cYTbVhLlJzVYC8d09PcPhGdnOw%3D%3D; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; _ljtrtb_80=LQ2T1KDU-17-IBG6
2023-12-12 20:40:19 UTC	3385	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:19 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyNkE9v2zAMxb%2BLzyUgUf%2Bo3aTYDlIX7dx1abZLIUtWWyc7NG0QZMO%2B%2B6R7D7sIAt%2BPfOT70yhqvjSuk45WogXOrAaprAPPLAf0rm0VY7ZX2Fw1qAubESOaFEAFzkEGkYDEhBB0ZiKjTlGnyprCCsF5MFlAlDKCTIKAeHFIMciIE8s0x8oWtHO9RWmQcdHJTrfWGcVXvHVKG9%2F3fcGIFe5mxAc%2BtN%2BBG9j4tS51W%2FtRCzLGMkmGKzIklCiS4f9%2FHYnPx5Ms9Z%2B7pR88hdPlNoV9x0d68Ue3fqu6qh7Oi%2FPeDPRjX74PriV6vh7rcjWH%2B105mYKctQaBhCBZNhBIGYjcaJlSEcUEjKk6sMZ8fAzh%2BRTt3djtXtW3w0Gfhul6Wc8XG3AT%2FP1jHqzu0sv8Xlpk3X1ZLk%2Brj3erD2H71ZyH5Rcetht7PJ1X27vJj6%2B%2Fny63bx%2Bm5lItJpxJqYwQJ5qB6TkChixBlZdZSiJy3fz9B14Oiis%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:19 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.22	50286	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2699	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=15579515&p=137711&s=137812&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:19 UTC	820	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=5; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=137711:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Length: 625 Connection: close
2023-12-12 20:40:19 UTC	625	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 6d 61 74 63 68 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 70 3d 4d 31 37 31 37 30 35 34 39 30 31 26 75 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 46 35 32 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 61 2e 61 67 6b 6e 2e 63 6f 6d 2f 61 64 73 63 6f 72 65 73 2f 67 2e 70 69 78 65 6c 3f 73 69 64 3d 39 32 31 32 33 30 38 32 37 38 26 70 75 69 64 3d 41 45 34 41 38 43 33 44 2d 31 30 39 36 2d 34 35 39 41 2d 42 30 39 31 2d 32 42 41 44 44 35 30 30 39 Data Ascii: PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.22	50292	35.214.160.165	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	820	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token} HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.22	50296	34.199.141.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	844	OUT	GET /map/c=14701/tp=MTAI/tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=a31bb17c5a71a653e40698b548c9c280; _cc_cc="ACZ4XmNQSDQ2TEoyNE82TTQ3TDQzNU41MTCztEgyNbFItkw2sjBgAILUiqN6IBoKAEyRCk4%3D"; _cc_aud="ABR4XmNgYGBIrTiqB6SgAAAW5gHR"
2023-12-12 20:40:19 UTC	313	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.1.78 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-12 20:40:19 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.22	50287	82.145.213.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	674	OUT	GET /pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent= HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=OPU757f221e63b64927b1c7a11275bcba2c
2023-12-12 20:40:19 UTC	766	IN	HTTP/1.1 302 Found Server: Tengine Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 131 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://ce.lijit.com/merge?3pid=OPU757f221e63b64927b1c7a11275bcba2c&gdpr=0&gdpr_consent=&pid=103 Pragma: no-cache Set-Cookie: UID=OPU757f221e63b64927b1c7a11275bcba2c; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2023-12-12 20:40:19 UTC	131	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 6d 65 72 67 65 3f 33 70 69 64 3d 4f 50 55 37 35 37 66 32 32 31 65 36 33 62 36 34 39 32 37 62 31 63 37 61 31 31 32 37 35 62 63 62 61 32 63 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 69 64 3d 31 30 33 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ce.lijit.com/merge?3pid=OPU757f221e63b64927b1c7a11275bcba2c&gdpr=0&gdpr_consent=&pid=103">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.22	50297	18.67.39.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	719	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:19 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 a7af18c87ffc07d74544efce5f2b0f9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: YTO50-P2 X-Amz-Cf-Id: MPmQnSIQUU1dXY-czfeV_N0JbsgYEVcXS0dBqwSttzVkqc8LlROZUw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.22	50299	74.119.119.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	1035	OUT	GET /sid/json?origin=publishertagids&domain=mathblog.com&sn=ChromeSyncframe&so=3&topUrl=mathblog.com&bundle=onR1gl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkxFZWp5Sjh0THdhV3h6Z09Lalc5T1V3cSUyRkRvanhXekdLTGJCS1F4THRWcTdHZTBUQnlEZUlqeDhaZEdGJTJCcm1NRnVjUWM5Vko2elZzRzI0dGlnalduWVpUYUVlelR5JTJGRGVPZWhGNm5uMmFsVmpBZ2JFWEtWNXRudE9BJTJCemxDOHl3JTNEJTNE&cw=1&lsw=1&topicsavail=0&fledgeavail=0 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=mathblog.com&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:19 UTC	351	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:40:19 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 25756488 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:40:19 UTC	440	IN	Data Raw: 31 41 43 0d 0a 7b 22 73 69 64 22 3a 6e 75 6c 6c 2c 22 72 65 6d 6f 76 65 53 69 64 22 3a 66 61 6c 73 65 2c 22 62 75 6e 64 6c 65 22 3a 22 64 63 42 38 4f 46 39 6c 52 57 56 59 52 6a 46 4d 55 44 42 5a 61 53 55 79 52 6c 42 6f 56 55 78 53 52 47 31 6a 56 6b 4e 34 57 57 70 56 5a 55 35 6a 57 45 70 75 54 55 52 74 61 6b 70 6a 64 47 6c 46 55 6c 67 6c 4d 6b 5a 32 61 44 64 30 51 30 46 36 4e 44 6c 6f 4d 6c 5a 32 51 32 63 77 53 30 35 79 4d 45 4a 45 62 7a 4a 49 65 44 5a 33 63 6e 46 79 64 47 52 74 63 44 4e 56 65 46 49 6c 4d 6b 49 7a 52 30 56 43 57 46 68 53 61 6b 78 50 4e 48 70 78 51 31 56 78 63 54 5a 6a 51 57 78 4d 62 54 68 73 51 30 78 7a 4d 6a 56 72 4a 54 4a 43 55 6c 70 77 4e 57 46 36 4e 30 6b 34 65 45 31 43 62 44 6c 4c 61 57 4a 6a 52 6e 52 4a 51 32 77 35 4d 48 46 49 64 33 Data Ascii: 1AC{"sid":null,"removeSid":false,"bundle":"dcB8OF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkN4WWpVZU5jWEpuTURtakpjdGlFUlglMkZ2aDd0Q0F6NDloMlZ2Q2cwS05yMEJEbzJIeDZ3cnFydGRtcDNVeFIlMkIzR0VCWFhSakxPNHpxQ1VxcTZjQWxMbThsQ0xzMjVrJTJCUlpwNWF6N0k4eE1CbDlLaWJjRnRJQ2w5MHFId3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.22	50293	134.122.57.34	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	804	OUT	GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __kuid=bcb09ff6-3151-4b08-8f0d-11bcba91496e.471627613
2023-12-12 20:40:20 UTC	517	IN	HTTP/1.1 302 302 Date: Tue, 12 Dec 2023 20:40:19 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=bcb09ff6-3151-4b08-8f0d-11bcba91496e.471627619; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:bcb09ff6-3151-4b08-8f0d-11bcba91496e&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.22	50267	34.199.75.211	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	645	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:19 UTC	490	IN	HTTP/1.1 303 See Other Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Length: 0 Connection: close Location: /s/75145?bidder_id=195755&bidder_uuid=AE4A8C3D-1096-459A-B091-2BADD5009F52&_li_chk=true&previous_uuid=83a0af498fc848d18f90ce801edd9fe1 Set-Cookie: lidid=83a0af49-8fc8-48d1-8f90-ce801edd9fe1; Max-Age=63072000; Expires=Thu, 11 Dec 2025 20:40:19 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.22	50277	195.5.165.20	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	709	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:20 UTC	236	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: komodo-25e73b70ccf9@version_1.578v2 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 0ms Date: Tue, 12 Dec 2023 20:40:20 GMT
2023-12-12 20:40:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.22	50303	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	2848	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:ViN9mkBO1Rd9xZ5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617; chkChromeAb67Sec=5; pi=0:3; DPSync3=1703548800%3A201_263_235_260_262_259_228_219_226_261_258_236_256_245%7C1702944000%3A253_252_265%7C1703376000%3A257%7C1702425600%3A248_255
2023-12-12 20:40:20 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:19 GMT; path=/ Set-Cookie: PugT=1702413619; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.22	50264	38.68.201.140	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	901	OUT	GET /sn.ashx?google_gid=CAESEDOGCvf74r4DzScTh1ezTw4&google_cver=1&google_push=AXcoOmTRp2Qg41CFQgMvCldw0tahTVzpz1Zt6r664qm2RGkEQ9DN4nAS9c7VlV7k2e5TuybDeug2yMNnAtJAmsHSrq_4q9t6Y38 HTTP/1.1 Host: aep.mxptint.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.00000000000000006578C52E00000000000000006578C52700000000000000000000000000000000000000006578C52B
2023-12-12 20:40:19 UTC	765	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmTRp2Qg41CFQgMvCldw0tahTVzpz1Zt6r664qm2RGkEQ9DN4nAS9c7VlV7k2e5TuybDeug2yMNnAtJAmsHSrq_4q9t6Y38&google_hm=UjM1Q0E5XzEwRDk3RjhFM183QTU2MDlCRQ%3D%3D P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.6578C533000000006578C52E00000000000000006578C52700000000000000000000000000000000000000006578C52B; domain=mxptint.net; expires=Fri, 12-Dec-2025 20:40:19 GMT; path=/; secure; SameSite=None Date: Tue, 12 Dec 2023 20:40:19 GMT Connection: close Content-Length: 345 Strict-Transport-Security: max-age=-385418419; includeSubDomains
2023-12-12 20:40:19 UTC	345	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 66 38 62 33 7a 68 34 6b 79 77 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 54 52 70 32 51 67 34 31 43 46 51 67 4d 76 43 6c 64 77 30 74 61 68 54 56 7a 70 7a 31 5a 74 36 72 36 36 34 71 6d 32 52 47 6b 45 51 39 44 4e 34 6e 41 53 39 63 37 56 6c 56 37 6b 32 65 35 54 75 79 62 44 65 75 67 32 79 4d 4e 6e 41 74 4a 41 6d 73 48 53 72 71 5f 34 71 39 74 36 59 33 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmTRp2Qg41CFQgMvCldw0tahTVzpz1Zt6r664qm2RGkEQ9DN4nAS9c7VlV7k2e5TuybDeug2yMNnAtJAmsHSrq_4q9t6Y3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.22	50266	3.93.251.5	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	658	OUT	GET /tag/?id=20909&user_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:19 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2023-12-12 20:40:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.22	50298	162.55.120.196	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	815	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:20 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.3 Date: Tue, 12 Dec 2023 20:40:20 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.22	50302	107.178.254.65	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:19 UTC	681	OUT	GET /api/sync?pid=5324&it=1&iv=c2e187b7ce3def9421212dce9daf6efba45272f5fcfcd3713d9103b6b4368b1e791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:19 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=c2e187b7ce3def9421212dce9daf6efba45272f5fcfcd3713d9103b6b4368b1e791426b5417dce21&rand=01074996 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=YSkJC_k00HvAkmzB; Path=/; Domain=pippio.com; Expires=Wed, 11 Dec 2024 20:40:19 GMT; Secure; SameSite=None Set-Cookie: didts=1702413619; Path=/; Domain=pippio.com; Expires=Wed, 11 Dec 2024 20:40:19 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Sat, 10 Feb 2024 20:40:19 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLOK46sGEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Sat, 10 Feb 2024 20:40:19 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:19 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.22	50316	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	909	OUT	GET /pagead/drt/s?v=r20120211 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:20 UTC	427	IN	HTTP/1.1 200 OK Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Date: Tue, 12 Dec 2023 20:24:44 GMT Cache-Control: public, max-age=3600 Content-Type: text/html; charset=UTF-8 Age: 936 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-12 20:40:20 UTC	154	IN	Data Raw: 38 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 64 72 74 2f 75 69 22 20 2f 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 8f<!DOCTYPE HTML PUBLIC><html> <head> <meta http-equiv="refresh" content="0;url=https://www.google.com/pagead/drt/ui" /> </head></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.22	50315	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	2919	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=0d2b585e-dbe9-4680-8c70-3d0a0e81332d&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617; chkChromeAb67Sec=5; pi=157108:4; DPSync3=1703376000%3A257%7C1702425600%3A248_255%7C1703548800%3A235_262_261_260_236_263_245_219_201_256_226_259_258_228%7C1702944000%3A253_252_265
2023-12-12 20:40:20 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 11:05:38 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:05:38 GMT; path=/ Set-Cookie: PugT=1702379138; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:05:38 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=AE4A8C3D-1096-459A-B091-2BADD5009F52 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.22	50314	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	2812	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617; chkChromeAb67Sec=5; pi=0:3; DPSync3=1703548800%3A201_263_235_260_262_259_228_219_226_261_258_236_256_245%7C1702944000%3A253_252_265%7C1703376000%3A257%7C1702425600%3A248_255
2023-12-12 20:40:20 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 10:54:43 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.22	50313	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	2734	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=8152669554817989381 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:20 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 10:54:43 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 10:54:43 GMT; path=/ Set-Cookie: PugT=1702378483; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 10:54:43 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.22	50323	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	728	OUT	GET /712188.gif?partner_uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=Fz/V4byI2Z3hm+q0GvVSlp/Bhyt0rrFWvUk+bF1wm9I=; pxrc=CAA=
2023-12-12 20:40:20 UTC	677	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=ZtUbftNDg7VopO3FtitlJp/Bhyt0rrFWvUk+bF1wm9I=; Path=/; Domain=rlcdn.com; Expires=Wed, 11 Dec 2024 20:40:20 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLSK46sGEgYIuuoBEAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 10 Feb 2024 20:40:20 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:20 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.22	50326	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	2805	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7557000061611676171P HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:20 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:20 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.22	50325	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	1021	OUT	GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D37F922BDC3D34268B74E8F2EE0CC4051%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fuserid%253D2527372694113908282%2526bee_sync_partners%253Dox%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dox%2526bee_sync_hop_count%253D4%26uid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:21 UTC	1298	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:21 GMT Content-Length: 0 Connection: close Location: https://sync.technoratimedia.com/services?srv=cs&nuid=37F922BDC3D34268B74E8F2EE0CC4051&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D2527372694113908282%26bee_sync_partners%3Dox%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D4&uid=ZXjEurXK3YbtORulaCkY0QAA%26633 CF-Ray: 8348c82a3ea574ba-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; Path=/; Domain=casalemedia.com; Expires=Wed, 11 Dec 2024 20:40:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=633; Path=/; Domain=casalemedia.com; Expires=Mon, 11 Mar 2024 20:40:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=13Vayp21GBnh9Ib25VC%2BReDk6VqJppSXvoc4umghQNshxkxVzum2YXXxsJlElPM9O%2FQY04nstWcAR%2BGllKRFPXAbCDIQiEzPmcZW4ws%2Bjd5CqYl02WR4Dzt6DFfKSlOWHt7Rum8l64vXug%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.22	50322	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	2825	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968625794546145592 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617; chkChromeAb67Sec=5; pi=0:3; DPSync3=1703548800%3A201_263_235_260_262_259_228_219_226_261_258_236_256_245%7C1702944000%3A253_252_265%7C1703376000%3A257%7C1702425600%3A248_255
2023-12-12 20:40:20 UTC	582	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 10:54:44 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-968625794546145592; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 10:54:44 GMT; path=/ Set-Cookie: PugT=1702378484; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 10:54:44 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.22	50329	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	788	OUT	GET /usersync?b=pbm&i=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:21 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:20 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:21 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.22	50334	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	883	OUT	GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=8211966367 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUYASABKAIyCwjmydrjqNe9PBAFOAFaB3N2eDl0NTBgAg..
2023-12-12 20:40:20 UTC	542	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:20 GMT Content-Length: 181 Connection: close server: Kestrel location: https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUYASABKAIyCwiSn4yiqde9PBAFOAFaC2FkY29uZHVjdG9yYAI.; expires=Thu, 12 Dec 2024 20:40:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:20 UTC	181	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec">https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.22	50321	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	2809	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=863968679737 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; pi=156212:4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:21 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:04:24 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:04:24 GMT; path=/ Set-Cookie: PugT=1702379064; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:04:24 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.22	50333	52.70.100.39	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	732	OUT	GET /ul_cb/bsw_sync?ssp=gumgum2&bsw_user_id=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: t.pswec.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=5f42ecf1-af84-4b6f-9802-40b4e18c102a; c=1702413617; tuuid_lu=1702413617
2023-12-12 20:40:21 UTC	665	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 12 Dec 2023 20:40:21 GMT Location: https://x.bidswitch.net/sync?dsp_id=2&user_id=5f42ecf1-af84-4b6f-9802-40b4e18c102a&expires=3&user_group=1&ssp=gumgum2 P3P: CP="NON DSP ADMo DEVo TAIo PSAo PSDo IVAo IVDo CONo OUR UNRo IND ONL UNI PUR COM NAV INT DEM STA PRE" Set-Cookie: tuuid=5f42ecf1-af84-4b6f-9802-40b4e18c102a; path=/; expires=Thu, 11-Dec-2025 20:40:21 GMT; domain=.pswec.com; samesite=none; secure Set-Cookie: tuuid_lu=1702413621; path=/; expires=Thu, 11-Dec-2025 20:40:21 GMT; domain=.pswec.com; samesite=none; secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.22	50353	35.194.66.159	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	874	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=EAF92472013E4E6D9A751C1DA567BFFF
2023-12-12 20:40:21 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Tue, 12 Dec 2023 20:40:21 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:EAF92472013E4E6D9A751C1DA567BFFF&gdpr=0&gdpr_consent= Expires: Mon, 11 Dec 2023 20:40:21 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2023-12-12 20:40:21 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.22	50338	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	864	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODE1MjY2OTU1NDgxNzk4OTM4MQ&google_push=AXcoOmTNdrdX0hYNjh7c4KjxmH-URiNlWl24f2m5pl719bowU6SFBqXHt9mhAbGdqCQ_eE4n18Fmxh5kaT5VKkZ4Z0XRwr5ve-E HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:21 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:21 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.22	50339	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	3205	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU175665e227ff427986c82272bce47fbb HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; pi=157108:4; DPSync3=1703376000%3A257%7C1702425600%3A248_255%7C1703548800%3A235_262_261_260_236_263_245_219_201_256_226_259_258_228%7C1702944000%3A253_252_265; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; PugT=1702413619
2023-12-12 20:40:21 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:21 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 26-Dec-2023 20:40:21 GMT; path=/ Set-Cookie: PugT=1702413621; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.22	50367	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:20 UTC	895	OUT	GET /pixel?google_nid=9675309&google_hm=VmlOOW1rQk8xUmQ5eFo1&google_gid=CAESEMGa8_lDPgEhdzWBcQgeXns&google_cver=1&google_push=AXcoOmQyCI2_46bKneXmQ0PypwJXrLUdUcaOG63RqnwUSbuQOCRmNPwVZtpIXht2_VQ25gObLB87X6MJo0LhKM5eQQDUOmC-d4M HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:21 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:21 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.22	50345	3.161.188.78	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:21 UTC	645	OUT	GET /adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:21 UTC	836	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 12 Dec 2023 20:40:21 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AXUsipbPIr15Rr8tI2UhlozG4wDy%2Fh1N5; Path=/; Domain=.agkn.com; Expires=Thu, 12-Dec-2024 20:40:21 GMT; Max-Age=31536000; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 1bb882f081498a19fb2b991e6c0046aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: G0pY9hNrJ5am34IbetjdOE4L_r-rlfs9aobFjO5rUq8uSsHbFV_QyA==
2023-12-12 20:40:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.22	50348	35.186.193.173	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:21 UTC	814	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:21 UTC	504	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_63eb56a9cff64869a7d1c8485fc9b385=1; path=/; domain=.ctnsnet.com; expires=Wed, 11 Dec 2024 20:40:21 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Tue, 12 Dec 2023 20:40:20 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.22	50332	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:21 UTC	675	OUT	GET /usersync?b=pln&i=4trFhcvjylTg&ev=1&pid=558355 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:21 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:21 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:21 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.22	50328	8.28.7.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:21 UTC	2998	OUT	GET /AdServer/SPug?partnerID=157108&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; pi=157108:4; DPSync3=1703376000%3A257%7C1702425600%3A248_255%7C1703548800%3A235_262_261_260_236_263_245_219_201_256_226_259_258_228%7C1702944000%3A253_252_265; KRTBCOOKIE_1323=23480-OPU757f221e63b64927b1c7a11275bcba2c&KRTB&23485-OPU757f221e63b64927b1c7a11275bcba2c&KRTB&23524-OPU757f221e63b64927b1c7a11275bcba2c; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; PugT=1702413618
2023-12-12 20:40:21 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:21 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1702413621; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.22	50331	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:21 UTC	666	OUT	GET /usersync?b=sad&i=2527372694113908282 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:21 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:21 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:21 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.22	50369	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	855	OUT	GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmQvhaun51zVgmHcgfujMOsT9Ybkkp-qqVmvrU-XAcbPjwvHuZ4pAI7CeMPTLGXLcCnfFifgwHHQ0Q3CawCtjKut1G6rtrk&google_hm=OTY4NjI1Nzk0NTQ2MTQ1NTky HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.22	50327	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	844	OUT	GET /pixel?google_nid=sovrn&google_push=AXcoOmTmixh0MCaAmkBPl0U09GCspfj2pl3hnK_9eBTprDfGTKGXgo2lFp7mDUmnYwvacBGquna7v1Pd2mFntlOkICmUBKN5J2Y&google_hm=Hz32hLZHBFKxs3xrQUqrw0Qb HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.22	50341	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	963	OUT	GET /csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dr1%26google_push%3DAXcoOmQMrhqggjKOJtdybiG92OMegW-1z2y2Qb55hvd3etfOKmu4SbRSEAtoJK7a9rSRle3AWJp6OzlV0nv7ZBkRPbrVGTJNJ1s%26google_hm%3DBdyKTmYygkD3qFfBdk3YpDs HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
2023-12-12 20:40:22 UTC	674	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:22 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:22 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://cm.g.doubleclick.net/pixel?google_nid=r1&google_push=AXcoOmQMrhqggjKOJtdybiG92OMegW-1z2y2Qb55hvd3etfOKmu4SbRSEAtoJK7a9rSRle3AWJp6OzlV0nv7ZBkRPbrVGTJNJ1s&google_hm=BdyKTmYygkD3qFfBdk3YpDs etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:40:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.22	50350	74.119.119.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	925	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:22 UTC	532	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:22 GMT server: Kestrel cache-control: no-cache expires: Tue, 12 Dec 2023 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1746670 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.22	50337	192.178.50.66	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	829	OUT	GET /pixel/attr?d=AHNF13JMSAV5M_VrZMeZj-t6YUHQkv6NfPrVS3ZNJ37EbJr0j_IoyHgn_6QKZPK6Sbgmexsfiq3v HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:22 UTC	236	IN	HTTP/1.1 204 No Content Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: text/html Server: HTTP server (unknown) Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.22	50349	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	784	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:22 UTC	1095	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:22 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:22 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:22 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sat, 10 Feb 2024 20:40:22 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:22 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.22	50318	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	854	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D
2023-12-12 20:40:22 UTC	683	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:22 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:22 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=1006383552 etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:40:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.22	50330	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	907	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg
2023-12-12 20:40:22 UTC	579	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:22 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://idsync.rlcdn.com/396846.gif?served_by=evergreen&partner_uid=8bc0f454-ec7d-0a81-3231-64fa48a7629c Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.22	50336	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	3192	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=fXwOVOsIAmGPyDvtM8V4ZQ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; pi=157108:4; DPSync3=1703376000%3A257%7C1702425600%3A248_255%7C1703548800%3A235_262_261_260_236_263_245_219_201_256_226_259_258_228%7C1702944000%3A253_252_265; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; PugT=1702413619
2023-12-12 20:40:22 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:22 GMT; path=/ Set-Cookie: PugT=1702413622; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:22 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.22	50354	34.199.141.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	844	OUT	GET /map/c=14701/tp=MTAI/tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=a31bb17c5a71a653e40698b548c9c280; _cc_cc="ACZ4XmNQSDQ2TEoyNE82TTQ3TDQzNU41MTCztEgyNbFItkw2sjBgAILUiqN6IBoKAEyRCk4%3D"; _cc_aud="ABR4XmNgYGBIrTiqB6SgAAAW5gHR"
2023-12-12 20:40:22 UTC	314	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.5.120 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-12 20:40:22 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.22	50355	18.67.39.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	719	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 b734db9b28028c2ed717c3d72b3b45b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: YTO50-P2 X-Amz-Cf-Id: s3xjt5OsWxVkidLgdh4MbrHb5flqwyhurecGidkf5BNvQCnRT7caDw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.22	50375	3.213.9.240	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	896	OUT	GET /pbmtc.gif?puid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=0d2b585e-dbe9-4680-8c70-3d0a0e81332d; ss=7UkAu4JBMzE1aNIs%2BRMziitYfTqLIbZ70Kfc5Sb%2B0ClSOVKv2dEqydBwpceqeA9%2BkfM0T15N1I3TtwQrF5jmfg%3D%3D
2023-12-12 20:40:22 UTC	444	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=0d2b585e-dbe9-4680-8c70-3d0a0e81332d; expires=Thu, 12 Dec 2024 20:40:22 GMT; path=/; secure; samesite=none Set-Cookie: ss=gwj8BFqd9vc8Lv34sjKLtX1Q0cqMbuwuCxzU%2BIiAvoi%2Bbuo4mnEBQaekNmkdft1MkQwlZjyDivgzDHUmQ2vpog%3D%3D; expires=Thu, 12 Dec 2024 20:40:22 GMT; path=/; secure; samesite=none
2023-12-12 20:40:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.22	50351	216.200.232.253	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	873	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	709	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1237 600843f master ord ord-pixel-x58 config_version:"3667" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=c9ce6578-c536-4400-bb93-d22416541d01; domain=.mathtag.com; path=/; expires=Wed, 08-Jan-2025 20:40:22 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:c9ce6578-c536-4400-bb93-d22416541d01&gdpr=0&gdpr_consent= Expires: Tue, 12 Dec 2023 20:40:21 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.22	50361	38.68.201.140	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	901	OUT	GET /sn.ashx?google_gid=CAESEDOGCvf74r4DzScTh1ezTw4&google_cver=1&google_push=AXcoOmQwViH5imfCrQKK_65QAQgX_vTURMXdERw6kmd_ESZjOhg9VUjVIQ_0ztSOtP_3BRh_xUYCQLrG_-AGgwjqEqb1nezDgW8 HTTP/1.1 Host: aep.mxptint.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.6578C533000000006578C52E00000000000000006578C52700000000000000000000000000000000000000006578C52B
2023-12-12 20:40:22 UTC	765	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmQwViH5imfCrQKK_65QAQgX_vTURMXdERw6kmd_ESZjOhg9VUjVIQ_0ztSOtP_3BRh_xUYCQLrG_-AGgwjqEqb1nezDgW8&google_hm=UjM1Q0E5XzEwRDk3RjhFM183QTU2MDlCRQ%3D%3D P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.6578C536000000006578C52E00000000000000006578C52700000000000000000000000000000000000000006578C52B; domain=mxptint.net; expires=Fri, 12-Dec-2025 20:40:22 GMT; path=/; secure; SameSite=None Date: Tue, 12 Dec 2023 20:40:21 GMT Connection: close Content-Length: 345 Strict-Transport-Security: max-age=-385418422; includeSubDomains
2023-12-12 20:40:22 UTC	345	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 66 38 62 33 7a 68 34 6b 79 77 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 51 77 56 69 48 35 69 6d 66 43 72 51 4b 4b 5f 36 35 51 41 51 67 58 5f 76 54 55 52 4d 58 64 45 52 77 36 6b 6d 64 5f 45 53 5a 6a 4f 68 67 39 56 55 6a 56 49 51 5f 30 7a 74 53 4f 74 50 5f 33 42 52 68 5f 78 55 59 43 51 4c 72 47 5f 2d 41 47 67 77 6a 71 45 71 62 31 6e 65 7a 44 67 57 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmQwViH5imfCrQKK_65QAQgX_vTURMXdERw6kmd_ESZjOhg9VUjVIQ_0ztSOtP_3BRh_xUYCQLrG_-AGgwjqEqb1nezDgW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.22	50358	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	3233	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:038a6578-c533-4e00-a051-cd933f905263&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; PugT=1702413619; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235
2023-12-12 20:40:22 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:22 GMT; path=/ Set-Cookie: PugT=1702413622; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:22 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.22	50360	104.18.24.173	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	1158	OUT	GET /i.match?p=b6&u=CAESEHCCewI25ZU6x_gSD7iZ3Og&google_cver=1&google_push=AXcoOmS8U-mCw4GwijVyuN3KkrhhTJLkufULnCgFPEKiy10x4o2QDq1c4gk6dLWBJB_2Va8eYLsISoBbOQtab6dUFFJjbZbRfCm-&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmS8U-mCw4GwijVyuN3KkrhhTJLkufULnCgFPEKiy10x4o2QDq1c4gk6dLWBJB_2Va8eYLsISoBbOQtab6dUFFJjbZbRfCm-%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=avnxY1tMPmFUTgUpyTVoqR4CLx92iB4gZcZcKmAyQjr9qFnhW7JhytAS1dE9Vb7FWslB5oPUXl5vVTtTETuJpjisGRRiBLbf5OeGeD5REjNXN9iXehpEMXUbWS38AW3pZdFUVG4Iso4
2023-12-12 20:40:22 UTC	985	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aMnOnIR3YWj7UXuRudrpeW3sZd3ZaZaEDUMc996ZaVPNF05HAA5CvWXsu41TMg3VbGZbrVOVtCxta6WHZd1eiDb7iRlLjxRvjG60oWyuwOrZcW38a0PFwqR5YZcs5gICU4csZcyah5gNYDc8cpcCIo2rqAp8uWU3YLBhIZcZcWEaXGReiy0CZcQD; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:22 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aMnOnIR3YWj7UXuRudrpeW3sZd3ZaZaEDUMc996ZaVPNF05HAA5CvWXsu41TMg3VbGZbrVOVtCxta6WHZd1eiDb7iRlLjxRvjG60oWyuwOrZcW38a0PFwqR5YZcs5gICU4csZcyah5gNYDc8cpcCIo2rqAp8uWU3YLBhIZcZcWEaXGReiy0CZcQD; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:22 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8348c832a966b3f1-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.22	50335	172.105.220.23	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	689	OUT	GET /pubmatic HTTP/1.1 Host: gocm.c.appier.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	627	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 153 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=y0wla96ADdG3uE5kNsV4ZQ P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=y0wla96ADdG3uE5kNsV4ZQ; Path=/; Domain=c.appier.net; Expires=Thu, 12 Dec 2024 20:40:22 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None
2023-12-12 20:40:22 UTC	153	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 79 4d 44 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 79 30 77 6c 61 39 36 41 44 64 47 33 75 45 35 6b 4e 73 56 34 5a 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=y0wla96ADdG3uE5kNsV4ZQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.22	50357	69.194.240.13	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	870	OUT	GET /usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D
2023-12-12 20:40:22 UTC	784	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:22 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Wed, 11 Dec 2024 20:40:22 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 connection: close
2023-12-12 20:40:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.22	50359	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	866	OUT	GET /pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmTRp2Qg41CFQgMvCldw0tahTVzpz1Zt6r664qm2RGkEQ9DN4nAS9c7VlV7k2e5TuybDeug2yMNnAtJAmsHSrq_4q9t6Y38&google_hm=UjM1Q0E5XzEwRDk3RjhFM183QTU2MDlCRQ%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0
2023-12-12 20:40:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.22	50340	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	2282	OUT	GET /merge?pid=58&3pid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; _ljtrtb_80=LQ2T1KDU-17-IBG6; _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; _ljtrtb_49=4trFhcvjylTg; ljtrtb=eJyNkE9v2zAMxb%2BLzyUgUf%2Bo3aTYDlIX7dx1abZLIUtWWyc7NG0QZMO%2B%2B6R7D7sIAt%2BPfOT70yhqvjSuk45WogXOrAaprAPPLAf0rm0VY7ZX2Fw1qAubESOaFEAFzkEGkYDEhBB0ZiKjTlGnyprCCsF5MFlAlDKCTIKAeHFIMciIE8s0x8oWtHO9RWmQcdHJTrfWGcVXvHVKG9%2F3fcGIFe5mxAc%2BtN%2BBG9j4tS51W%2FtRCzLGMkmGKzIklCiS4f9%2FHYnPx5Ms9Z%2B7pR88hdPlNoV9x0d68Ue3fqu6qh7Oi%2FPeDPRjX74PriV6vh7rcjWH%2B105mYKctQaBhCBZNhBIGYjcaJlSEcUEjKk6sMZ8fAzh%2BRTt3djtXtW3w0Gfhul6Wc8XG3AT%2FP1jHqzu0sv8Xlpk3X1ZLk%2Brj3erD2H71ZyH5Rcetht7PJ1X27vJj6%2B%2Fny63bx%2Bm5lItJpxJqYwQJ5qB6TkChixBlZdZSiJy3fz9B14Oiis%3D; _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c
2023-12-12 20:40:22 UTC	4027	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:22 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_49=4trFhcvjylTg; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyNkU1v2zAMhv%2BLzyMgUaJE7WbHdpC6aJc2S7NdClmykibZoWmyIhv23yvtPmAXQSCflx8vf1fE1eeq7nTNM9WCFM6AJldDI5wEbOq2JSFcT1h9qtBkNiEGtNEDeSlBexWB1YjgTRIqoYnBxMzKwnIIOaIMqGAC6MlH8CpoSBon4zCYhASGLAdCBiJSWaldVurzqd%2BFn%2FvrcbUtnW2OKSWlt0lB0DpXi4qBZZ43Bq8DjiLxFAqb0a7uHWqLQqpOd6Z1tSU5k21NxjZ932eMReZul7iSQ%2FsVpIVFMzc57oo%2BD83WOqHZSmLL6u9kVv6%2FV6z%2BUV7neFl5RlmhOmosGym0mxmnm9vFY9EW5vtm3w8N%2B8v1LvpDJ5e8a071%2FLXkqcxRN%2Br9YAf%2BdsjfVd0yb2%2BWpUPx6mGTbWGvJ5PNR0bQIlnwTBaCtEbHmJNqBCGoFCzHOj15v70Ed7%2FsNi%2F0eDyayzDe7OfT1Xlc%2BObhKQ3OdHE3vZUrlf32%2B%2Bvz7PzmzNGvv9j3Yf8Dj%2BuFO13eZ%2Bv7sVm%2B%2FHq%2B3r2ebfGutBhxYqKEEEaeQJgpAPqkgfIrHEcVZPGIywZEDvOxGXC0I%2BikEjjKqljQlCZrZaj%2BfADRY7Fb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:22 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:22 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:22 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:22 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.22	50363	8.28.7.81	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	3624	OUT	GET /AdServer/UCookieSetPug?oid=1&rd=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dpmeb%26google_sc%3D1%26google_hm%3D%23%23B64_16B_PM_UID%26google_redir%3Dhttps%25253A%25252F%25252Fimage8.pubmatic.com%25252FAdServer%25252FImgSync%25253Fsec%25253D1%252526p%25253D156578%252526mpc%25253D4%252526fp%25253D1%252526pu%25253Dhttps%2525253A%2525252F%2525252Fimage4.pubmatic.com%2525252FAdServer%2525252FSPug%2525253Fp%2525253D156578%25252526sc%2525253D1&google_gid=CAESENFpz-1i6jf5LwpWn3ajfwQ&google_cver=1&google_push=AXcoOmSDU0aQBzLDmZzR5__EMa8CUEGMXEWP1aXKf1gYt6WuNRhtf0Nrf9BwZ9Q0lLoyaO2_YWq3GgMQlhKBgEmOy-SugJXk12ld HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; PugT=1702413619; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235
2023-12-12 20:40:22 UTC	697	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=rkqMPRCWRZqwkSut1QCfUg%3D%3D&google_redir=https%3A%2F%2Fimage8.pubmatic.com%2FAdServer%2FImgSync%3Fsec%3D1%26p%3D156578%26mpc%3D4%26fp%3D1%26pu%3Dhttps%253A%252F%252Fimage4.pubmatic.com%252FAdServer%252FSPug%253Fp%253D156578%2526sc%253D1&google_push=AXcoOmSDU0aQBzLDmZzR5__EMa8CUEGMXEWP1aXKf1gYt6WuNRhtf0Nrf9BwZ9Q0lLoyaO2_YWq3GgMQlhKBgEmOy-SugJXk12ld P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Date: Tue, 12 Dec 2023 20:40:21 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.22	50364	3.93.99.238	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	844	OUT	GET /qmap?c=240&tp=PUBM&tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=a31bb17c5a71a653e40698b548c9c280; _cc_cc="ACZ4XmNQSDQ2TEoyNE82TTQ3TDQzNU41MTCztEgyNbFItkw2sjBgAILUiqN6IBoKAEyRCk4%3D"; _cc_aud="ABR4XmNgYGBIrTiqB6SgAAAW5gHR"
2023-12-12 20:40:22 UTC	314	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.10.41 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-12 20:40:22 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.22	50366	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	2325	OUT	GET /dsp/google/pixelmatch?google_gid=CAESEF13_8tZ8ShsNJtBPYvQBxM&google_cver=1&google_push=AXcoOmT1E_W7BkDWZ0GqWWcsM2Dvzz5AyIQ-kRPwoGESfgHKIahEoz8JUl1IrF9gK0GWIlZb_NfRjFFF_cOArg_EyARjYSUiNCym HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; _ljtrtb_80=LQ2T1KDU-17-IBG6; _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; _ljtrtb_49=4trFhcvjylTg; ljtrtb=eJyNkE9v2zAMxb%2BLzyUgUf%2Bo3aTYDlIX7dx1abZLIUtWWyc7NG0QZMO%2B%2B6R7D7sIAt%2BPfOT70yhqvjSuk45WogXOrAaprAPPLAf0rm0VY7ZX2Fw1qAubESOaFEAFzkEGkYDEhBB0ZiKjTlGnyprCCsF5MFlAlDKCTIKAeHFIMciIE8s0x8oWtHO9RWmQcdHJTrfWGcVXvHVKG9%2F3fcGIFe5mxAc%2BtN%2BBG9j4tS51W%2FtRCzLGMkmGKzIklCiS4f9%2FHYnPx5Ms9Z%2B7pR88hdPlNoV9x0d68Ue3fqu6qh7Oi%2FPeDPRjX74PriV6vh7rcjWH%2B105mYKctQaBhCBZNhBIGYjcaJlSEcUEjKk6sMZ8fAzh%2BRTt3djtXtW3w0Gfhul6Wc8XG3AT%2FP1jHqzu0sv8Xlpk3X1ZLk%2Brj3erD2H71ZyH5Rcetht7PJ1X27vJj6%2B%2Fny63bx%2Bm5lItJpxJqYwQJ5qB6TkChixBlZdZSiJy3fz9B14Oiis%3D; _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c
2023-12-12 20:40:22 UTC	639	IN	HTTP/1.1 307 Temporary Redirect Connection: close Date: Tue, 12 Dec 2023 20:40:22 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_push=AXcoOmT1E_W7BkDWZ0GqWWcsM2Dvzz5AyIQ-kRPwoGESfgHKIahEoz8JUl1IrF9gK0GWIlZb_NfRjFFF_cOArg_EyARjYSUiNCym&google_hm=Hz32hLZHBFKxs3xrQUqrw0Qb Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type X-Sovrn-Pod: ad_ap2dca1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.22	50368	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	1018	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%252Chttps%25253A%25252F%25252Fx.bidswitch.net%25252Fsync%25253Fdsp_id%25253D393%252526user_id%25253D0%252526ssp%25253Dtriplelift%252526bsw_param%25253Df22c27da-5a11-4a3d-83b2-a6f03f26dc6d%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUYASABKAIyCwiQ2eGUqde9PBAFOAFaC2FkY29uZHVjdG9yYAI.
2023-12-12 20:40:22 UTC	810	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Length: 677 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D393%2526user_id%253D0%2526ssp%253Dtriplelift%2526bsw_param%253Df22c27da-5a11-4a3d-83b2-a6f03f26dc6d%2C set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUSFAoFdGFwYWQSCwigurmDk9e9PBAFGAEgASgCMgsIjrC8sKnXvTwQBTgBWgV0YXBhZGAC; expires=Thu, 12 Dec 2024 20:40:22 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:22 UTC	677	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 26 74 74 64 5f 70 75 69 64 3d 65 33 31 62 38 65 30 65 2d 62 65 61 32 2d 34 39 35 66 2d 38 64 32 37 2d 63 32 32 37 65 65 38 32 65 30 35 34 25 32 43 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 25 32 35 32 46 73 79 6e 63 25 32 35 33 46 64 73 70 5f 69 64 25 32 35 33 44 33 39 33 25 32 35 32 36 75 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D393%2526u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.22	50371	34.96.105.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	648	OUT	GET /v1/dpusync/6?uid=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b=6578C52C4BC40314243CDFDBBLIS
2023-12-12 20:40:22 UTC	219	IN	HTTP/1.1 200 OK Content-Type: image/gif Cache-Control: no-cache Content-Length: 49 Date: Tue, 12 Dec 2023 20:40:22 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:22 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 00 00 00 00 00 ff ff ff ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.22	50365	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	929	OUT	GET /usermatchredir?s=184023&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dindex%26google_hm%3D&google_gid=CAESEFPCnVy-MdM24V1UiTwtzXI&google_cver=1&google_push=AXcoOmQVv-1iqxp4Oad_sJ3k5oVBpdXwVNjFtxAk4sNeME9jf1DMbpLep94Mp5rN4ra8RjY20UGlh0zNkMxM3eRlz0esMAkOrqKL HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:22 UTC	1234	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_cver=1&google_gid=CAESEFPCnVy-MdM24V1UiTwtzXI&google_hm=ZXjEurXK3YbtORulaCkY0QAAAnkAAAIB&google_nid=index&google_push=AXcoOmQVv-1iqxp4Oad_sJ3k5oVBpdXwVNjFtxAk4sNeME9jf1DMbpLep94Mp5rN4ra8RjY20UGlh0zNkMxM3eRlz0esMAkOrqKL CF-Ray: 8348c832aa3f2293-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; Path=/; Domain=casalemedia.com; Expires=Wed, 11 Dec 2024 20:40:22 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=633; Path=/; Domain=casalemedia.com; Expires=Mon, 11 Mar 2024 20:40:22 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xcCxQX6mgSc6n9VE9iXDvgIxdvSYp45Hz74P%2Fwz5pkow9C%2FTON3AtzZDdYyeguVpiVmwnBKw6fJoL5lHB6IeRokn9OJ1UgF1D6%2FUtwTYEJbz%2BrhlWpQgtIzeNmcdnlu81i6Rffv10qqy3g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.22	50370	8.28.7.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	2994	OUT	GET /AdServer/SPug?partnerID=156212&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; PugT=1702413619; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235
2023-12-12 20:40:22 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:05:30 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1702379130; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:05:30 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.22	50372	34.199.75.211	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	757	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=AE4A8C3D-1096-459A-B091-2BADD5009F52&_li_chk=true&previous_uuid=83a0af498fc848d18f90ce801edd9fe1 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=83a0af49-8fc8-48d1-8f90-ce801edd9fe1
2023-12-12 20:40:22 UTC	633	IN	HTTP/1.1 303 See Other Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Length: 0 Connection: close Location: https://dis.criteo.com/dis/usersync.aspx?r=77&p=311&cp=liveintent&cu=1&url=https://i.liadm.com/s/28292?bidder_id%3D71340%26bidder_uuid%3D@@CRITEO_USERID@@ Set-Cookie: _li_ss=CggKBgjdARDbFg; Max-Age=2592000; Expires=Thu, 11 Jan 2024 20:40:22 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=83a0af49-8fc8-48d1-8f90-ce801edd9fe1; Max-Age=63072000; Expires=Thu, 11 Dec 2025 20:40:22 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 3 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.22	50319	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	3236	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:EAF92472013E4E6D9A751C1DA567BFFF&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; PugT=1702413619; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235
2023-12-12 20:40:22 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.22	50324	82.145.213.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	710	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	807	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUb5d1f3b8746f478f8bbe11a7db7b8734 Pragma: no-cache Set-Cookie: UID=OPUb5d1f3b8746f478f8bbe11a7db7b8734; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2023-12-12 20:40:22 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 62 35 64 31 66 33 62 38 37 34 36 66 34 37 38 66 38 62 62 65 31 31 61 37 64 62 37 62 38 37 33 34 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUb5d1f3b8746f478f8bbe11a7db7b8734">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.22	50374	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	3175	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; PugT=1702413619; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235
2023-12-12 20:40:22 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:04:25 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.22	50380	195.5.165.20	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	709	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	238	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: ragnarok-2430810c36d1@version_1.578v2 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 0ms Date: Tue, 12 Dec 2023 20:40:22 GMT
2023-12-12 20:40:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.22	50379	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	2111	OUT	GET /pagead/interaction/?ai=Cfqd-LMV4ZalW49uP7w_vsYqACoGOj9904Maj77ASmcDNkqsOEAEg1LGHJGDJhoCA3KPcEKABocCY8SjIAQmpAkYQa7Dps4I-4AIAqAMByAPLBKoE4AJP0Pzi09AkutJTCevWVdxkV1vkNW0S9Krb-Vs-HCbA4HhEJ75k0zazhxTtQKYqJ5R9QmilI0QjaU8_0E2M111yZS-qNyWS5p-QGYbtRG2S_r4oHeZ3ZtjgS63RyQDxX0nbdOCXdSe2DTHIS4Zaq4U7wbALqP7YlRmwApHdLAGK7PiN_id9bB8Rm266tFa_M6zWhbuh9I5f7AQox3zqCoFdTXgp5lFvtSgyfDhkOLAVlpU8dkfFIPu85qNGigxmXSSR72bjJYiJG_aEMZKOO0_jA24KYpNt_2Idf_DVZF_hryuzYvekW5eRlpWBjw_s7RtY4cqvQBmwsZqViPuYD5jIL1fVxpcE-lkEc_nBxIFERG8H4cYJbPElyTTLQNLDF3M9hzDbS82C7hyK01XlbGdH8Lmn7KagA_GJSzD2fbYmu3Od3miUV4CL0iZEFRhTQJiQQYPt63gnVxUVzlkkLOaxwATHhsKKzATgBAGIBcKWlZVNoAYugAfw6umSBKgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcA0ggfCIBhEAEYHTICigI6BIBAgEBIvf3BOljwgOn04IqDA_IIG2FkeC1zdWJzeW4tMzcxOTc3MTI4ODI3NzI2MbEJseZQRL5pMiyACgOYCwHICwGADAGiDBwqGgoY5LSxAu61sQK1uLEC5LSxAu61sQK7u7EC2gwRCgsQkIjXlZ_C65WzARICAQOqDQJVU8gNAeINEwjRuOn04IqDAxXj7eMHHe-YAqDYEwugFOvayN2qnIPsE6AUlNuT-5Dou83CAaAU7aTTzIHdzaGSAaAU1pObvb2g7s_xAaAU9MGtwcjJ1LMHoBTZ6tvVraqzv9sBoBSAgvqZwP3Tpv8BoBTT3efB3s3pqPMB0BUB-BYBgBcB&sigh=0Z3OCUy4kKo&cid=CAQSTQAvHhf_RhMZvVTJZzJDxVtKbwjEMCcgpuLyeteHPEifzmLygz2ZC93-sZNCpqoTCn_ZxQjsWpXXg3p09btofr9A16QbohAPSz9oO6rM&label=window_focus&gqid&qqid=CKmc6_TgioMDFePt4wcd75gCoA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:22 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Dec 2023 20:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.22	50382	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	2196	OUT	GET /merge?3pid=OPU757f221e63b64927b1c7a11275bcba2c&gdpr=0&gdpr_consent=&pid=103 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ce.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; _ljtrtb_80=LQ2T1KDU-17-IBG6; _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; _ljtrtb_49=4trFhcvjylTg; ljtrtb=eJyNkE9v2zAMxb%2BLzyUgUf%2Bo3aTYDlIX7dx1abZLIUtWWyc7NG0QZMO%2B%2B6R7D7sIAt%2BPfOT70yhqvjSuk45WogXOrAaprAPPLAf0rm0VY7ZX2Fw1qAubESOaFEAFzkEGkYDEhBB0ZiKjTlGnyprCCsF5MFlAlDKCTIKAeHFIMciIE8s0x8oWtHO9RWmQcdHJTrfWGcVXvHVKG9%2F3fcGIFe5mxAc%2BtN%2BBG9j4tS51W%2FtRCzLGMkmGKzIklCiS4f9%2FHYnPx5Ms9Z%2B7pR88hdPlNoV9x0d68Ue3fqu6qh7Oi%2FPeDPRjX74PriV6vh7rcjWH%2B105mYKctQaBhCBZNhBIGYjcaJlSEcUEjKk6sMZ8fAzh%2BRTt3djtXtW3w0Gfhul6Wc8XG3AT%2FP1jHqzu0sv8Xlpk3X1ZLk%2Brj3erD2H71ZyH5Rcetht7PJ1X27vJj6%2B%2Fny63bx%2Bm5lItJpxJqYwQJ5qB6TkChixBlZdZSiJy3fz9B14Oiis%3D; _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c
2023-12-12 20:40:22 UTC	4027	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:22 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_49=4trFhcvjylTg; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyNkU1v2zAMhv%2BLzyMgUaJE7WbHdpC6aJc2S7NdClmykibZoWmyIhv23yvtPmAXQSCflx8vf1fE1eeq7nTNM9WCFM6AJldDI5wEbOq2JSFcT1h9qtBkNiEGtNEDeSlBexWB1YjgTRIqoYnBxMzKwnIIOaIMqGAC6MlH8CpoSBon4zCYhASGLAdCBiJSWaldVurzqd%2BFn%2FvrcbUtnW2OKSWlt0lB0DpXi4qBZZ43Bq8DjiLxFAqb0a7uHWqLQqpOd6Z1tSU5k21NxjZ932eMReZul7iSQ%2FsVpIVFMzc57oo%2BD83WOqHZSmLL6u9kVv6%2FV6z%2BUV7neFl5RlmhOmosGym0mxmnm9vFY9EW5vtm3w8N%2B8v1LvpDJ5e8a071%2FLXkqcxRN%2Br9YAf%2BdsjfVd0yb2%2BWpUPx6mGTbWGvJ5PNR0bQIlnwTBaCtEbHmJNqBCGoFCzHOj15v70Ed7%2FsNi%2F0eDyayzDe7OfT1Xlc%2BObhKQ3OdHE3vZUrlf32%2B%2Bvz7PzmzNGvv9j3Yf8Dj%2BuFO13eZ%2Bv7sVm%2B%2FHq%2B3r2ebfGutBhxYqKEEEaeQJgpAPqkgfIrHEcVZPGIywZEDvOxGXC0I%2BikEjjKqljQlCZrZaj%2BfADRY7Fb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:22 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:22 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:22 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:22 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap2dca1
2023-12-12 20:40:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.22	50383	142.250.217.228	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	767	OUT	GET /pagead/drt/ui HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	426	IN	HTTP/1.1 302 Found Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 12 Dec 2023 20:40:22 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.22	50376	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	2805	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7557000061611676171P HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; chkChromeAb67Sec=4; DPSync3=1702944000%3A252_265_253%7C1702425600%3A248_255%7C1703376000%3A257%7C1703548800%3A260_262_261_259_258_236_201_256_245_263; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617
2023-12-12 20:40:22 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.22	50381	162.55.120.196	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	815	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.3 Date: Tue, 12 Dec 2023 20:40:22 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.22	50386	142.250.217.228	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	810	OUT	GET /ads/measurement/l?ebcid=ALh7CaRGtddEaR5Irl5b3iwfF_caegGKM9vBUBYz7d1rBpzpzSw6oqZayOSkEgeAws8HGedIijLpEGDIAftnX8izFaXWeWKnow HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 12 Dec 2023 20:40:22 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.22	50391	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	1975	OUT	GET /pagead/interaction/?ai=CNLR6KsV4ZZCNBf_70_wPivqMcP-6zdJz7LO05N8QofGzzcQ4EAEg1LGHJGDJhoCA3KPcEKABnO-AwgLIAQGpAioyK9LIwEk-4AIAqAMByAPLBKoE3gJP0ElGcDcsHUniv7DhRhxvb_muXNqE5HDu99oiv72IyiCApmzQwsdPB7l6NFbKPtFtfP4ZyAoOV8F1nhAervwm8SuFyJA9iUmv47oDKNHpa90gQdYNRFjinkXjwi0omOIpJKO-Z20Z28oWRSXK42kcYEs8RMBeYPDARYr0ufG1azMCgQB5J1bkJMCV4UH165Pa4v15XpH66V-jrqGtNVzvl-UV4brKU8QiC0zSp3ebyqj62bf0VoMngUI3XhJemfpUsgdhBKk34GjdenKg1dpcUs1qoDxGRp01X02N7GdaW5yU40Wg6udX5dJPR8yxrtPHvuxeuZ0IwBzpzEYjaMBuYcAQeFd7tiJ9IGL6V9qA2Kp0gUy_o7rceGQyHOuYRTxtDROewBdm12bTt7YUTpDQoQyx64GZhwR0joIQnNrDSo2RZmdjDCsJBqMxUyrqkXPEoffWG3dYws569JWp5cAEqI64p58E4AQBiAX2kJn6SIAHzJD_vQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHTICigI6BIBAgEBIvf3BOlj79vPz4IqDA_IIG2FkeC1zdWJzeW4tMzcxOTc3MTI4ODI3NzI2MbEJSrzMqb6fuPKACgOYCwHICwGiDBQqEgoQ5LSxAu61sQK1uLECu7uxAtoMEQoLEKC-iPvNp-am6wESAgEDqg0CVVPIDQHiDRMInan08-CKgwMV__2UCR0KPQMO2BMCiBQH0BUB-BYBgBcB&sigh=Mj_62OByYyg&cid=CAQSTQAvHhf_irivc2k7iCP4UVmgA07GvR0JSS0MfjvVpPwcmIn8H6IMznE1faWDMxGeeHVlGQGmYiB4qAqZpLwM119dbrX-pccDmmgImKA5&label=window_focus&gqid&qqid=CJDK9fPgioMDFf_9lAkdCj0DDg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:22 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Dec 2023 20:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.22	50390	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	2825	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=863968679737 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; PugT=1702413615; SPugT=1702413617; chkChromeAb67Sec=5; pi=157108:4; DPSync3=1703376000%3A257%7C1702425600%3A248_255%7C1703548800%3A235_262_261_260_236_263_245_219_201_256_226_259_258_228%7C1702944000%3A253_252_265
2023-12-12 20:40:22 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:07:38 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:07:38 GMT; path=/ Set-Cookie: PugT=1702379258; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:07:38 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.22	50392	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	3188	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968625794546145592 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; PugT=1702413619; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235
2023-12-12 20:40:22 UTC	582	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:21 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-968625794546145592; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:21 GMT; path=/ Set-Cookie: PugT=1702413621; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.22	50387	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	728	OUT	GET /712188.gif?partner_uid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=Fz/V4byI2Z3hm+q0GvVSlp/Bhyt0rrFWvUk+bF1wm9I=; pxrc=CAA=
2023-12-12 20:40:22 UTC	683	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=liveramp&ttd_tpi=1 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=Of9vFa5pfFBopO3FtitlJp/Bhyt0rrFWvUk+bF1wm9I=; Path=/; Domain=rlcdn.com; Expires=Wed, 11 Dec 2024 20:40:22 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLaK46sGEgYIwuoBEAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 10 Feb 2024 20:40:22 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.22	50393	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	3183	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=863968679737 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; pi=157108:4; DPSync3=1703376000%3A257%7C1702425600%3A248_255%7C1703548800%3A235_262_261_260_236_263_245_219_201_256_226_259_258_228%7C1702944000%3A253_252_265; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; PugT=1702413619
2023-12-12 20:40:22 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:21 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:21 GMT; path=/ Set-Cookie: PugT=1702413621; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.22	50347	141.94.171.215	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	658	OUT	GET /?partner=214&mapped=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	572	IN	HTTP/1.1 302 Found set-cookie: cookie=95cb27def9651c04; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:22 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects104=1; Max-Age=86400; Expires=Wed, 13 Dec 2023 20:40:22 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=95cb27def9651c04/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.22	50399	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	710	OUT	GET /pixel?google_nid=epsilon&google_cm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:22 UTC	658	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://idsync.rlcdn.com/362358.gif?google_gid=CAESEFkoJOl6KUyDe-EX-YXDuVc&google_cver=1 Date: Tue, 12 Dec 2023 20:40:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 289 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:22 UTC	289	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 33 36 32 33 35 38 2e 67 69 66 3f 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 46 6b 6f 4a 4f 6c 36 4b 55 79 44 65 2d 45 58 2d 59 58 44 75 56 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://idsync.rlcdn.com/362358.gif?google_gid=CAESEFkoJOl6KUyDe-EX-YXDuVc&google_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.22	50401	172.67.164.44	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	595	OUT	GET /update?cats=687,687,687,687,687 HTTP/1.1 Host: sda.fyi Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_sda=2023-12-12_687_30
2023-12-12 20:40:22 UTC	773	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: application/json Content-Length: 25 Connection: close Access-Control-Allow-Origin: https://mathblog.com Set-Cookie: mv_sda=2023-12-12_687_35; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8fAVCDwRUCWE7NfFZQbZLX0G88PwblkGBXHbaFAqzc6KEq%2BH0L9LcILGU%2FSqTT9zxS3wZszSSyJUjG9m5Rty7nTK0IGJTsal20I3FeRcuRROnTv9oKxOrE2n"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c8359a99571e-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:22 UTC	25	IN	Data Raw: 7b 22 32 30 32 33 2d 31 32 2d 31 32 22 3a 7b 22 36 38 37 22 3a 33 35 7d 7d Data Ascii: {"2023-12-12":{"687":35}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.22	50400	35.186.193.173	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	814	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	504	IN	HTTP/1.1 200 OK Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_6e6be6fd2f0c4be4af67ea3b0e9970ca=1; path=/; domain=.ctnsnet.com; expires=Wed, 11 Dec 2024 20:40:22 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Tue, 12 Dec 2023 20:40:22 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.22	50398	3.161.188.78	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	645	OUT	GET /adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	836	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 12 Dec 2023 20:40:22 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AVCHuRG3IDQ9Rr8tI2Uhlo4UqmvwxaQ%2Fn; Path=/; Domain=.agkn.com; Expires=Thu, 12-Dec-2024 20:40:22 GMT; Max-Age=31536000; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 edaf4756fa7dc5536754ab33d538a4ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: T5BcDHInM_tHhT64hXO-wCXNiRgiu0mMZhVebdjKSbvWKIPnK0BTGQ==
2023-12-12 20:40:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.22	50395	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	788	OUT	GET /usersync?b=pbm&i=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:22 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.22	50396	8.28.7.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	2998	OUT	GET /AdServer/SPug?partnerID=157108&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; pi=157108:4; DPSync3=1703376000%3A257%7C1702425600%3A248_255%7C1703548800%3A235_262_261_260_236_263_245_219_201_256_226_259_258_228%7C1702944000%3A253_252_265; KRTBCOOKIE_1323=23480-OPU757f221e63b64927b1c7a11275bcba2c&KRTB&23485-OPU757f221e63b64927b1c7a11275bcba2c&KRTB&23524-OPU757f221e63b64927b1c7a11275bcba2c; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; PugT=1702413618
2023-12-12 20:40:22 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:21 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1702413621; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.22	50397	67.202.105.21	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	994	OUT	GET /ps/?us_privacy=1---&xi=45&xu=c2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553 HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:22 UTC	710	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234; Domain=.33across.com; Expires=Wed, 11-Dec-2024 20:40:22 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP011 location: https://events-ssc.33across.com/match?bidder_id=45&external_user_id=c2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553&ts=1702413622&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- content-length: 0 date: Tue, 12 Dec 2023 20:40:22 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.22	50346	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	697	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	689	IN	HTTP/1.1 302 Found Location: /pubmatic/1/info2?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 13 Set-Cookie: SEUNCY=425AD20A89F13897; Expires=Wed, 11 Dec 2024 20:40:22 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.22	50344	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	738	OUT	GET /match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=ghhhlLKf8OmTjCq1x-ObVM1mw!20220908!1702413501136!ip#102.129.152.212
2023-12-12 20:40:22 UTC	823	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:22 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=ar101281&google_hm=Z2hoaGxMS2Y4T21UakNxMXgtT2JWTTFtdw==&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%253D%253D%26gdpr%3D0%26gdpr_consent%3D Server: nginx/1.22.1 Set-Cookie: arcki2_pubmatic=AE4A8C3D-1096-459A-B091-2BADD5009F52!20220908!1702413622660; Max-Age=1296000; Expires=Wed, 27 Dec 2023 20:40:22 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.22	50378	54.234.86.126	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	642	OUT	GET /?companyId=673&id=pubmatic_id:AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	391	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:22 GMT Location: https://io.narrative.io/?io.narrative.guid.v2=abdf7d80-992e-11ee-b479-0e71178f036d&companyId=673&id=pubmatic_id:AE4A8C3D-1096-459A-B091-2BADD5009F52 Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=abdf7d80-992e-11ee-b479-0e71178f036d; Max-Age=47278080; SameSite=None; Secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.22	50402	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	3340	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:EAF92472013E4E6D9A751C1DA567BFFF&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; SPugT=1702379130; KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; PugT=1702379258
2023-12-12 20:40:22 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.22	50405	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	784	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:22 UTC	1095	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:22 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:22 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:22 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sat, 10 Feb 2024 20:40:22 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:22 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.22	50394	35.214.160.165	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	820	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token} HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.22	50403	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	870	OUT	GET /usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D
2023-12-12 20:40:22 UTC	784	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:22 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Wed, 11 Dec 2024 20:40:22 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 connection: close
2023-12-12 20:40:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.22	50407	34.199.141.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	844	OUT	GET /map/c=14701/tp=MTAI/tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=a31bb17c5a71a653e40698b548c9c280; _cc_cc="ACZ4XmNQSDQ2TEoyNE82TTQ3TDQzNU41MTCztEgyNbFItkw2sjBgAILUiqN6IBoKAEyRCk4%3D"; _cc_aud="ABR4XmNgYGBIrTiqB6SgAAAW5gHR"
2023-12-12 20:40:22 UTC	314	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.8.108 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-12 20:40:22 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.22	50406	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	3129	OUT	GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:bcb09ff6-3151-4b08-8f0d-11bcba91496e&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; pi=157108:4; DPSync3=1703376000%3A257%7C1702425600%3A248_255%7C1703548800%3A235_262_261_260_236_263_245_219_201_256_226_259_258_228%7C1702944000%3A253_252_265; KRTBCOOKIE_1323=23480-OPU757f221e63b64927b1c7a11275bcba2c&KRTB&23485-OPU757f221e63b64927b1c7a11275bcba2c&KRTB&23524-OPU757f221e63b64927b1c7a11275bcba2c; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; PugT=1702413618
2023-12-12 20:40:22 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:04:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.22	50409	18.67.39.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	719	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:23 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 12aa3fefbdb5e80269e58f34f94a99e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: YTO50-P2 X-Amz-Cf-Id: nml7jz0-Vgmxvo0IqUWXCo4u-Sh8-6zpeKEQe0vWbAbxKNjAMmgWTw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.22	50408	216.200.232.253	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	873	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:22 UTC	709	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1237 600843f master ord ord-pixel-x50 config_version:"3667" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=dd3f6578-c536-4100-b21a-6e3bd7e898ab; domain=.mathtag.com; path=/; expires=Wed, 08-Jan-2025 20:40:22 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab&gdpr=0&gdpr_consent= Expires: Tue, 12 Dec 2023 20:40:21 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.22	50415	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	3108	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=8152669554817989381 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; pi=157108:4; DPSync3=1703376000%3A257%7C1702425600%3A248_255%7C1703548800%3A235_262_261_260_236_263_245_219_201_256_226_259_258_228%7C1702944000%3A253_252_265; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; PugT=1702413619
2023-12-12 20:40:23 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:21 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:21 GMT; path=/ Set-Cookie: PugT=1702413621; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.22	50410	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	754	OUT	GET /sync?dsp_id=2&user_id=5f42ecf1-af84-4b6f-9802-40b4e18c102a&expires=3&user_group=1&ssp=gumgum2 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:23 UTC	537	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //usersync.gumgum.com/usersync?b=bsw&i=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=&gdpr_consent=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.22	50412	195.5.165.20	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:22 UTC	709	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:23 UTC	235	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: molok-bd6d7f998a4c@version_1.578v2 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 0ms Date: Tue, 12 Dec 2023 20:40:23 GMT
2023-12-12 20:40:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.22	50419	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	879	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODE1MjY2OTU1NDgxNzk4OTM4MQ&google_push=AXcoOmS0U17fB1ynTaPgBYTLKOhrEfgwSfQUU05LJUqwG9GdErBEN99JTV33UdtlsdnRtmsEA848lNmeqA3E4Tqt5rzSVY2eKzK3 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.22	50414	172.105.220.23	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	689	OUT	GET /pubmatic HTTP/1.1 Host: gocm.c.appier.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:23 UTC	627	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:23 GMT Content-Type: text/html; charset=utf-8 Content-Length: 153 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=lD1EGcujD9GlzdZxN8V4ZQ P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=lD1EGcujD9GlzdZxN8V4ZQ; Path=/; Domain=c.appier.net; Expires=Thu, 12 Dec 2024 20:40:23 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None
2023-12-12 20:40:23 UTC	153	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 79 4d 44 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 6c 44 31 45 47 63 75 6a 44 39 47 6c 7a 64 5a 78 4e 38 56 34 5a 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=lD1EGcujD9GlzdZxN8V4ZQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.22	50416	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	859	OUT	GET /pixel?google_nid=sovrn&google_push=AXcoOmT1E_W7BkDWZ0GqWWcsM2Dvzz5AyIQ-kRPwoGESfgHKIahEoz8JUl1IrF9gK0GWIlZb_NfRjFFF_cOArg_EyARjYSUiNCym&google_hm=Hz32hLZHBFKxs3xrQUqrw0Qb HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.22	50421	3.161.188.78	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	645	OUT	GET /adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:23 UTC	834	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 12 Dec 2023 20:40:23 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AbKDZOT6uqO9Rr8tI2Uhlo5dU0mZ85CD5; Path=/; Domain=.agkn.com; Expires=Thu, 12-Dec-2024 20:40:23 GMT; Max-Age=31536000; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 ab36a19cbebfafa013306497524434c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: P6rvbhhLmENZD_d84kqjgEqjjYhjLerfsiBBdIFkCLQKyOTQSr3a6w==
2023-12-12 20:40:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.22	50418	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	880	OUT	GET /pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmQwViH5imfCrQKK_65QAQgX_vTURMXdERw6kmd_ESZjOhg9VUjVIQ_0ztSOtP_3BRh_xUYCQLrG_-AGgwjqEqb1nezDgW8&google_hm=UjM1Q0E5XzEwRDk3RjhFM183QTU2MDlCRQ%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.22	50420	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	697	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:23 UTC	689	IN	HTTP/1.1 302 Found Location: /pubmatic/1/info2?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 11 Set-Cookie: SEUNCY=3188772FF701BE1D; Expires=Wed, 11 Dec 2024 20:40:23 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Tue, 12 Dec 2023 20:40:23 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.22	50423	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	971	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%2Chttps%253A%252F%252Fx.bidswitch.net%252Fsync%253Fdsp_id%253D393%2526user_id%253D0%2526ssp%253Dtriplelift%2526bsw_param%253Df22c27da-5a11-4a3d-83b2-a6f03f26dc6d%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:23 UTC	1201	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:23 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:23 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:23 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!8324;Expires=Sat, 10 Feb 2024 20:40:23 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://x.bidswitch.net/sync?dsp_id=393&user_id=0&ssp=triplelift&bsw_param=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.22	50417	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	920	OUT	GET /pixel?google_cver=1&google_gid=CAESEFPCnVy-MdM24V1UiTwtzXI&google_hm=ZXjEurXK3YbtORulaCkY0QAAAnkAAAIB&google_nid=index&google_push=AXcoOmQVv-1iqxp4Oad_sJ3k5oVBpdXwVNjFtxAk4sNeME9jf1DMbpLep94Mp5rN4ra8RjY20UGlh0zNkMxM3eRlz0esMAkOrqKL HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.22	50427	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	788	OUT	GET /usersync?b=pbm&i=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:23 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:23 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:23 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.22	50422	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	1083	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=rkqMPRCWRZqwkSut1QCfUg%3D%3D&google_redir=https%3A%2F%2Fimage8.pubmatic.com%2FAdServer%2FImgSync%3Fsec%3D1%26p%3D156578%26mpc%3D4%26fp%3D1%26pu%3Dhttps%253A%252F%252Fimage4.pubmatic.com%252FAdServer%252FSPug%253Fp%253D156578%2526sc%253D1&google_push=AXcoOmSDU0aQBzLDmZzR5__EMa8CUEGMXEWP1aXKf1gYt6WuNRhtf0Nrf9BwZ9Q0lLoyaO2_YWq3GgMQlhKBgEmOy-SugJXk12ld HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.22	50424	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	854	OUT	GET /pixel?google_nid=r1&google_push=AXcoOmQMrhqggjKOJtdybiG92OMegW-1z2y2Qb55hvd3etfOKmu4SbRSEAtoJK7a9rSRle3AWJp6OzlV0nv7ZBkRPbrVGTJNJ1s&google_hm=BdyKTmYygkD3qFfBdk3YpDs HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.22	50425	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	907	OUT	GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=1006383552 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUSFAoFdGFwYWQSCwigurmDk9e9PBAFGAEgASgCMgsIjrC8sKnXvTwQBTgBWgV0YXBhZGAC
2023-12-12 20:40:23 UTC	570	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:23 GMT Content-Length: 181 Connection: close server: Kestrel location: https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:23 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUSFAoFdGFwYWQSCwigurmDk9e9PBAFGAEgASgCMgsIxoGluqnXvTwQBTgBWgthZGNvbmR1Y3RvcmAC; expires=Thu, 12 Dec 2024 20:40:23 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:23 UTC	181	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec">https://sync.1rx.io/usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.22	50430	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	886	OUT	GET /pagead/drt/si?st=NO_DATA HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:23 UTC	664	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 12 Dec 2023 20:40:23 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: DSID=NO_DATA; expires=Tue, 12-Dec-2023 21:40:23 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Tue, 12 Dec 2023 20:40:23 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.22	50436	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	3292	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968625794546145592 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; PugT=1702413621; SPugT=1702413621
2023-12-12 20:40:23 UTC	582	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-968625794546145592; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:22 GMT; path=/ Set-Cookie: PugT=1702413622; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:22 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.22	50428	141.94.171.215	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	658	OUT	GET /?partner=214&mapped=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:23 UTC	419	IN	HTTP/1.1 302 Found set-cookie: cookie=872da16551953746; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:23 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects219=1; Max-Age=86400; Expires=Wed, 13 Dec 2023 20:40:23 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://spl.zeotap.com?zdid=1332&zcluid=872da16551953746 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.22	50426	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	1007	OUT	GET /csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
2023-12-12 20:40:23 UTC	628	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:23 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:23 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:40:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.22	50429	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	738	OUT	GET /match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=ghhhlLKf8OmTjCq1x-ObVM1mw!20220908!1702413501136!ip#102.129.152.212
2023-12-12 20:40:25 UTC	823	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:24 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=ar101281&google_hm=Z2hoaGxMS2Y4T21UakNxMXgtT2JWTTFtdw==&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%253D%253D%26gdpr%3D0%26gdpr_consent%3D Server: nginx/1.22.1 Set-Cookie: arcki2_pubmatic=AE4A8C3D-1096-459A-B091-2BADD5009F52!20220908!1702413624857; Max-Age=1296000; Expires=Wed, 27 Dec 2023 20:40:24 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.22	50435	193.122.130.38	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	1005	OUT	GET /services?srv=cs&nuid=37F922BDC3D34268B74E8F2EE0CC4051&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fuserid%3D2527372694113908282%26bee_sync_partners%3Dox%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dox%26bee_sync_hop_count%3D4&uid=ZXjEurXK3YbtORulaCkY0QAA%26633 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AAB3wk7K8YkAABTAD88gJQ; tads_uid=37F922BDC3D34268B74E8F2EE0CC4051; tads_uid_cd=20231212204018+0000; tads_zora=2
2023-12-12 20:40:23 UTC	1175	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Tue, 12 Dec 2023 20:40:23 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://match.prod.bidr.io/cookie-sync?userid=2527372694113908282&bee_sync_partners=ox&bee_sync_current_partner=syn&bee_sync_initiator=ox&bee_sync_hop_count=4 Set-Cookie: tads_uidp_82=ZXjEurXK3YbtORulaCkY0QAA&633; Max-Age=259200; Expires=Fri, 15 Dec 2023 20:40:23 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=37F922BDC3D34268B74E8F2EE0CC4051; Max-Age=63072000; Expires=Thu, 11 Dec 2025 20:40:23 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20231212204018+0000; Max-Age=63072000; Expires=Thu, 11 Dec 2025 20:40:23 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Thu, 11 Dec 2025 20:40:23 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://u.openx.net/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 1065880245 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.22	50442	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	784	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:23 UTC	1095	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:23 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:23 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:23 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sat, 10 Feb 2024 20:40:23 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:23 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.22	50437	74.119.119.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	832	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&bundle=dcB8OF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkN4WWpVZU5jWEpuTURtakpjdGlFUlglMkZ2aDd0Q0F6NDloMlZ2Q2cwS05yMEJEbzJIeDZ3cnFydGRtcDNVeFIlMkIzR0VCWFhSakxPNHpxQ1VxcTZjQWxMbThsQ0xzMjVrJTJCUlpwNWF6N0k4eE1CbDlLaWJjRnRJQ2w5MHFId3FUQTdHQSUzRCUzRA&cw=1&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://mathblog.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:23 UTC	519	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:40:23 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://mathblog.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 542602 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:40:23 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.22	50431	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	3279	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; PugT=1702413621; SPugT=1702413621
2023-12-12 20:40:23 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:05:42 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.22	50440	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	870	OUT	GET /usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%2C%22zdxidn%22%3A%221508%22%7D
2023-12-12 20:40:23 UTC	784	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:23 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Wed, 11 Dec 2024 20:40:23 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 connection: close
2023-12-12 20:40:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.22	50433	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	3337	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:c9ce6578-c536-4400-bb93-d22416541d01&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; PugT=1702413621; SPugT=1702413621
2023-12-12 20:40:23 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 10:54:47 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:c9ce6578-c536-4400-bb93-d22416541d01; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 10:54:47 GMT; path=/ Set-Cookie: PugT=1702378487; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 10:54:47 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.22	50447	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	1920	OUT	GET /usersync/sync?origin=https://mathblog.com&src=//exchange.mediavine.com&s2sVersion=production&mv_uuid=6120f800-992e-11ee-8a65-3f15d911ca60&version=invalidate-verizon-pushes&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22centro%22%3Atrue%2C%22emx_digital%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%7D HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:23 UTC	1126	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:23 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2423 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache Set-Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:40:23 GMT; Secure; SameSite=None Set-Cookie: mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:40:23 GMT; Secure; SameSite=None Set-Cookie: am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:40:23 GMT; Secure; SameSite=None Set-Cookie: am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Tue, 26 Dec 2023 20:40:23 GMT; Secure; SameSite=None
2023-12-12 20:40:23 UTC	2423	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 0a 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 3a 20 27 73 79 6e 63 55 72 6c 73 27 2c 0a 20 20 20 20 20 20 20 20 74 6f 6b 65 6e 73 3a 20 7b 22 6d 76 5f 75 75 69 64 22 3a 22 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 7d 2c 0a 20 20 20 20 20 20 20 20 73 79 6e 63 55 72 6c 73 3a 20 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f Data Ascii: <script> window.parent.postMessage({ message: 'syncUrls', tokens: {"mv_uuid":"6120f800-992e-11ee-8a65-3f15d911ca60","version":"invalidate-verizon-pushes"}, syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.22	50432	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	3309	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUb5d1f3b8746f478f8bbe11a7db7b8734 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; PugT=1702413621; SPugT=1702413621
2023-12-12 20:40:23 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:06:44 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23485-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23524-OPUb5d1f3b8746f478f8bbe11a7db7b8734; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 26-Dec-2023 11:06:44 GMT; path=/ Set-Cookie: PugT=1702379204; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:06:44 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.22	50450	35.241.45.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	623	OUT	GET /js/pandg-sdk.js HTTP/1.1 Host: pghub.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"47a886353056caf33a998c6041e20896" If-Modified-Since: Mon, 05 Jun 2023 16:36:50 GMT
2023-12-12 20:40:23 UTC	254	IN	HTTP/1.1 304 Not Modified Date: Tue, 12 Dec 2023 20:40:03 GMT ETag: W/"47a886353056caf33a998c6041e20896" Vary: Accept-Encoding Age: 20 Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.22	50445	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	3337	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; PugT=1702413621; SPugT=1702413621
2023-12-12 20:40:23 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:22 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:22 GMT; path=/ Set-Cookie: PugT=1702413622; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:22 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.22	50441	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	3129	OUT	GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:bcb09ff6-3151-4b08-8f0d-11bcba91496e&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_1278=23329-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23340-a4552c04-658f-4c5b-8dc8-e09b6c6982fb&KRTB&23498-a4552c04-658f-4c5b-8dc8-e09b6c6982fb; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_904=16787-qL-zbSWCDwGtJkZ9MsV4ZQ; SPugT=1702413619; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; KRTBCOOKIE_27=16735-uid:26416578-c532-4500-add6-307cf0745029; KRTBCOOKIE_1323=23480-OPU69f6684a10134462a80749481aa6c408&KRTB&23485-OPU69f6684a10134462a80749481aa6c408&KRTB&23524-OPU69f6684a10134462a80749481aa6c408; PugT=1702413619; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235
2023-12-12 20:40:23 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:23 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.22	50448	18.173.219.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	589	OUT	GET /cs/27053452/beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=199cfdd76753ef1245eedde1702413613
2023-12-12 20:40:23 UTC	383	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Tue, 12 Dec 2023 20:40:23 GMT Location: /internal-cs/27053452/beacon.js Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 86f58a7ba760944d1efd0f2fe2242e1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: XCTFZ9itzgUXb5aaWW7yew7ZNTDkiNH5Eh_GtNxT2CDD-5_Hn-v3wQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.22	50434	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	3296	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=y0wla96ADdG3uE5kNsV4ZQ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; PugT=1702413621; SPugT=1702413621
2023-12-12 20:40:23 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:23 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=16787-y0wla96ADdG3uE5kNsV4ZQ; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:23 GMT; path=/ Set-Cookie: PugT=1702413623; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:23 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.22	50446	35.172.99.217	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	715	OUT	GET /usersync?b=bsw&i=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:23 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:23 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:23 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.22	50451	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	946	OUT	GET /pixel?google_nid=media&google_hm=MzQ1NDE1MDk4NjkzMDAzOTA4NFYxMA%3d%3d&mn_hm=MzQ1NDE1MDk4NjkzMDAzOTA4NFYxMA%3d%3d&google_sc=1&google_push=AXcoOmSEOjzqBLsFQxnOP7xUrG2cF5BaguQvqtr9-KDgYXuNjgpQTFGXGylpIKzpBeiGZkhUYxX4P-9KHOpt41KuoeejsR5BLJnE&gdpr=&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.22	50452	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	1191	OUT	POST /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Content-Length: 8955 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:23 UTC	8955	OUT	Data Raw: 7b 22 63 6f 6e 6e 65 63 74 49 64 22 3a 22 22 2c 22 75 75 69 64 22 3a 22 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 22 2c 22 75 75 69 64 56 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 2c 22 64 65 76 69 63 65 22 3a 7b 22 6f 73 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 76 22 3a 22 4e 54 20 31 30 2e 30 22 2c 22 64 6e 74 22 3a 30 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 75 61 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b Data Ascii: {"connectId":"","uuid":"6120f800-992e-11ee-8a65-3f15d911ca60","uuidVersion":"invalidate-verizon-pushes","device":{"os":"Windows","osv":"NT 10.0","dnt":0,"h":1024,"w":1280,"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck
2023-12-12 20:40:24 UTC	267	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:24 GMT Content-Type: application/json; charset=utf-8 Content-Length: 15739 Connection: close Access-Control-Allow-Origin: https://mathblog.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true
2023-12-12 20:40:24 UTC	15739	IN	Data Raw: 5b 7b 22 69 64 22 3a 22 33 36 63 66 36 38 30 31 36 63 65 33 62 65 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 31 39 34 35 30 37 33 30 36 34 31 31 30 39 37 31 33 39 38 38 35 36 30 22 2c 22 69 6d 70 69 64 22 3a 22 33 36 63 66 36 38 30 31 36 63 65 33 62 65 22 2c 22 70 72 69 63 65 22 3a 30 2e 34 30 36 39 35 34 39 39 39 39 39 39 39 39 39 39 36 2c 22 61 64 6d 22 3a 22 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 49 4d 47 27 29 2e 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 74 6c 78 2e 33 6c 69 66 74 2e 63 6f 6d 2f 73 32 73 2f 6e 6f 74 69 66 79 3f 70 78 3d 31 26 70 72 3d 30 2e 34 30 39 26 74 73 3d 31 37 30 32 34 31 33 36 32 33 26 61 69 64 3d 31 39 34 35 30 37 33 30 36 34 31 Data Ascii: [{"id":"36cf68016ce3be","seatbid":[{"bid":[{"id":"19450730641109713988560","impid":"36cf68016ce3be","price":0.40695499999999996,"adm":"<script>document.createElement('IMG').src=\"https://tlx.3lift.com/s2s/notify?px=1&pr=0.409&ts=1702413623&aid=19450730641

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.22	50453	172.64.151.101	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	673	OUT	POST /openrtb/pbjs?s=502649 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2721 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:23 UTC	2721	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 39 36 36 62 30 66 61 33 32 32 30 38 63 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 70 6f 6c 79 6e 6f 6d 69 61 6c 2d 72 6f 6f 74 2d 66 69 6e 64 69 6e 67 2d 77 69 74 68 2d 74 68 65 2d 6a 65 6e 6b 69 6e 73 2d 74 72 61 75 62 2d 61 6c 67 6f 72 69 74 68 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 4d 61 74 68 20 42 6c 6f 67 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 70 61 67 65 63 61 74 22 3a 5b 22 49 41 42 35 22 5d Data Ascii: {"id":"5966b0fa32208c","site":{"page":"https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/","domain":"mathblog.com","publisher":{"domain":"mathblog.com"},"name":"Math Blog","cat":["IAB5"],"sectioncat":["IAB5"],"pagecat":["IAB5"]
2023-12-12 20:40:24 UTC	711	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:23 GMT Content-Type: application/json Content-Length: 36 Connection: close CF-Ray: 8348c83d2a438db4-MIA CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://mathblog.com Cache-Control: no-cache Expires: 0 Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gdTZbqNNpSVOyaZTxF%2FPbQ9ZhHqioeEYfvjzHf2r2%2BaCn2bUq9SJ2vf4wTM0tXZc%2Bdw3JKo2tfVVFDdHdHTmdlKNJuo%2F8reYcLBODyZtSZseZkKBsMng6lkyZm6YpEtavXneLz1g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:24 UTC	36	IN	Data Raw: 7b 22 69 64 22 3a 22 35 39 36 36 62 30 66 61 33 32 32 30 38 63 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"5966b0fa32208c","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.22	50454	172.64.151.101	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	673	OUT	POST /openrtb/pbjs?s=502649 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2779 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:23 UTC	2779	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 39 36 36 62 30 66 61 33 32 32 30 38 63 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 70 6f 6c 79 6e 6f 6d 69 61 6c 2d 72 6f 6f 74 2d 66 69 6e 64 69 6e 67 2d 77 69 74 68 2d 74 68 65 2d 6a 65 6e 6b 69 6e 73 2d 74 72 61 75 62 2d 61 6c 67 6f 72 69 74 68 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 4d 61 74 68 20 42 6c 6f 67 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 70 61 67 65 63 61 74 22 3a 5b 22 49 41 42 35 22 5d Data Ascii: {"id":"5966b0fa32208c","site":{"page":"https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/","domain":"mathblog.com","publisher":{"domain":"mathblog.com"},"name":"Math Blog","cat":["IAB5"],"sectioncat":["IAB5"],"pagecat":["IAB5"]
2023-12-12 20:40:24 UTC	705	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:24 GMT Content-Type: application/json Content-Length: 36 Connection: close CF-Ray: 8348c83d2c7d67ea-MIA CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://mathblog.com Cache-Control: no-cache Expires: 0 Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MMvnAKMVNBkCTLim3plpQ5prrEyXiJJZYcxjtffwT9ibHCVPdtPtaZqrO1h96OH4%2Fy5hgjU3IglAODkRE4jQwsHZoOXQBbOAlXWkh9KQUMap67VrSAyEGRrz07J34ooWSlojS9pX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:24 UTC	36	IN	Data Raw: 7b 22 69 64 22 3a 22 35 39 36 36 62 30 66 61 33 32 32 30 38 63 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"5966b0fa32208c","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.22	50456	3.161.188.78	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	645	OUT	GET /adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:24 UTC	836	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 12 Dec 2023 20:40:23 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AoPQryju%2FgTlRr8tI2Uhlow2gmPUueMTE; Path=/; Domain=.agkn.com; Expires=Thu, 12-Dec-2024 20:40:23 GMT; Max-Age=31536000; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 221ee5ec812ed71353497211271896dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: lY2VbZ5UDHZYMf9SUWlXYBI0ERs9q0L7ECJR7JXWl71C9Oxqo7TvAA==
2023-12-12 20:40:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.22	50455	104.36.115.111	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	3140	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2953 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; PugT=1702413621; SPugT=1702413621
2023-12-12 20:40:23 UTC	2953	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 32 34 31 33 36 32 33 30 36 33 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 33 66 37 32 64 36 37 64 64 65 64 63 37 61 22 2c 22 74 61 67 69 64 22 3a 22 73 74 69 63 6b 79 5f 6f 75 74 73 74 72 65 61 6d 5f 64 65 73 6b 74 6f 70 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 31 2e 32 34 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 38 32 34 2f 6d 61 74 68 62 6c 6f 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 6c 61 79 65 72 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 Data Ascii: {"id":"1702413623063","at":1,"cur":["USD"],"imp":[{"id":"13f72d67ddedc7a","tagid":"sticky_outstream_desktop","bidfloor":1.24,"secure":1,"ext":{"data":{"pbadslot":"/1030006,1037824/mathblog/universal_player","adserver":{"name":"gam","adslot":"/1030006,1037
2023-12-12 20:40:24 UTC	226	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://mathblog.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 12 Dec 2023 20:40:23 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.22	50458	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	697	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:24 UTC	688	IN	HTTP/1.1 302 Found Location: /pubmatic/1/info2?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 9 Set-Cookie: SEUNCY=FB697C20CE040E9A; Expires=Wed, 11 Dec 2024 20:40:24 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Tue, 12 Dec 2023 20:40:24 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.22	50457	3.163.87.30	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	2430	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=OGvIOOwZEX0AX&cb=0&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:24 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 539 Connection: close Server: Server Date: Tue, 12 Dec 2023 20:40:24 GMT x-amz-rid: G35J5PQ21MG7V8K5DQAV Access-Control-Allow-Origin: https://mathblog.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Strict-Transport-Security: max-age=47474747; includeSubDomains; preload Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 dc58b273ef46a25eae399cc2a3f90854.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: 3MEBcY2w9PADCGx5cTTOED4qyOks8qUlUDpWnYDAWBPrH3fk3Nlm-A==
2023-12-12 20:40:24 UTC	539	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 66 69 66 22 3a 22 31 22 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 4c 57 50 4c 71 69 32 4c 75 4c 71 30 73 75 35 76 58 49 35 63 6d 6b 41 41 41 47 4d 58 38 4a 6a 74 77 45 41 41 41 4a 59 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 42 4d 37 50 35 4e 22 2c 22 73 69 7a 65 22 3a 22 37 32 38 78 39 30 22 2c 22 63 72 69 64 22 3a 22 35 30 33 34 31 36 31 32 36 22 2c 22 6d 65 74 61 Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JLWPLqi2LuLq0su5vXI5cmkAAAGMX8JjtwEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICBM7P5N","size":"728x90","crid":"503416126","meta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.22	50460	3.231.136.235	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	781	OUT	POST /header/auction?lib=prebid&v=8.20.0&referrer=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&tmax=2801&us_privacy=1--- HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 3272 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:23 UTC	3272	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 76 69 6e 65 5f 72 6f 6e 5f 61 64 68 65 73 69 6f 6e 5f 64 65 73 6b 74 6f 70 5f 37 32 38 78 39 30 5f 50 72 65 62 69 64 22 2c 22 66 6c 6f 6f 72 22 3a 30 2e 31 32 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 2c 7b 22 77 22 3a 34 36 38 2c 22 68 22 3a 36 30 7d 2c 7b 22 77 22 3a 33 32 30 2c 22 68 22 3a 31 30 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 38 32 34 2f 6d 61 74 68 62 6c 6f 67 2f 61 64 68 65 73 69 6f 6e 22 2c 22 61 64 73 65 72 Data Ascii: {"imp":[{"id":0,"tagid":"Mediavine_ron_adhesion_desktop_728x90_Prebid","floor":0.12,"banner":{"format":[{"w":728,"h":90},{"w":970,"h":90},{"w":468,"h":60},{"w":320,"h":100}]},"fpd":{"context":{"data":{"pbadslot":"/1030006,1037824/mathblog/adhesion","adser
2023-12-12 20:40:24 UTC	663	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:24 GMT Content-Type: application/json; charset=utf-8 Content-Length: 19 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 15 Oct 1992 20:10:00 GMT Pragma: no-cache X-XSS-Protection: 0 P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Access-Control-Allow-Origin: https://mathblog.com Access-Control-Allow-Credentials: true x-auction-status: 29 Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:24 GMT; Secure; SameSite=None
2023-12-12 20:40:24 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.22	50464	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	2123	OUT	GET /merge?pid=76&3pid=b2e855f2-cb8e-06ec-2af4-52af098d3c16 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; _ljtrtb_80=LQ2T1KDU-17-IBG6; _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; _ljtrtb_49=4trFhcvjylTg; _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; ljtrtb=eJyNkU1v2zAMhv%2BLzyMgUaJE7WbHdpC6aJc2S7NdClmykibZoWmyIhv23yvtPmAXQSCflx8vf1fE1eeq7nTNM9WCFM6AJldDI5wEbOq2JSFcT1h9qtBkNiEGtNEDeSlBexWB1YjgTRIqoYnBxMzKwnIIOaIMqGAC6MlH8CpoSBon4zCYhASGLAdCBiJSWaldVurzqd%2BFn%2FvrcbUtnW2OKSWlt0lB0DpXi4qBZZ43Bq8DjiLxFAqb0a7uHWqLQqpOd6Z1tSU5k21NxjZ932eMReZul7iSQ%2FsVpIVFMzc57oo%2BD83WOqHZSmLL6u9kVv6%2FV6z%2BUV7neFl5RlmhOmosGym0mxmnm9vFY9EW5vtm3w8N%2B8v1LvpDJ5e8a071%2FLXkqcxRN%2Br9YAf%2BdsjfVd0yb2%2BWpUPx6mGTbWGvJ5PNR0bQIlnwTBaCtEbHmJNqBCGoFCzHOj15v70Ed7%2FsNi%2F0eDyayzDe7OfT1Xlc%2BObhKQ3OdHE3vZUrlf32%2B%2Bvz7PzmzNGvv9j3Yf8Dj%2BuFO13eZ%2Bv7sVm%2B%2FHq%2B3r2ebfGutBhxYqKEEEaeQJgpAPqkgfIrHEcVZPGIywZEDvOxGXC0I%2BikEjjKqljQlCZrZaj%2BfADRY7Fb; _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c
2023-12-12 20:40:24 UTC	4187	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:24 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_49=4trFhcvjylTg; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:24 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:24 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:24 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:24 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.22	50466	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:23 UTC	618	OUT	GET /w/1.0/sd?id=540245193&val=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg
2023-12-12 20:40:24 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:24 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.22	50463	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	2116	OUT	GET /merge?3pid=AAB3wk7K8YkAABTAD88gJQ&pid=85&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; _ljtrtb_80=LQ2T1KDU-17-IBG6; _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; _ljtrtb_49=4trFhcvjylTg; _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; ljtrtb=eJyNkU1v2zAMhv%2BLzyMgUaJE7WbHdpC6aJc2S7NdClmykibZoWmyIhv23yvtPmAXQSCflx8vf1fE1eeq7nTNM9WCFM6AJldDI5wEbOq2JSFcT1h9qtBkNiEGtNEDeSlBexWB1YjgTRIqoYnBxMzKwnIIOaIMqGAC6MlH8CpoSBon4zCYhASGLAdCBiJSWaldVurzqd%2BFn%2FvrcbUtnW2OKSWlt0lB0DpXi4qBZZ43Bq8DjiLxFAqb0a7uHWqLQqpOd6Z1tSU5k21NxjZ932eMReZul7iSQ%2FsVpIVFMzc57oo%2BD83WOqHZSmLL6u9kVv6%2FV6z%2BUV7neFl5RlmhOmosGym0mxmnm9vFY9EW5vtm3w8N%2B8v1LvpDJ5e8a071%2FLXkqcxRN%2Br9YAf%2BdsjfVd0yb2%2BWpUPx6mGTbWGvJ5PNR0bQIlnwTBaCtEbHmJNqBCGoFCzHOj15v70Ed7%2FsNi%2F0eDyayzDe7OfT1Xlc%2BObhKQ3OdHE3vZUrlf32%2B%2Bvz7PzmzNGvv9j3Yf8Dj%2BuFO13eZ%2Bv7sVm%2B%2FHq%2B3r2ebfGutBhxYqKEEEaeQJgpAPqkgfIrHEcVZPGIywZEDvOxGXC0I%2BikEjjKqljQlCZrZaj%2BfADRY7Fb; _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c
2023-12-12 20:40:24 UTC	4173	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:24 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_49=4trFhcvjylTg; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:24 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:24 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:24 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:24 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.22	50467	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	588	OUT	GET /w/1.0/sd?id=539237773&val=985ce834-0b5c-1dd8-f7d7179d HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg
2023-12-12 20:40:24 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:24 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.22	50461	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	747	OUT	GET /sync?dsp_id=393&user_id=0&ssp=triplelift&bsw_param=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:24 UTC	542	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:24 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //eb2.3lift.com/xuid?mid=2409&xuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&dongle=d3d3&gdpr=&gdpr_consent=&gdpr_pd= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.22	50468	162.248.18.37	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	3005	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; PugT=1702413621; SPugT=1702413621
2023-12-12 20:40:24 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:24 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:24 GMT; path=/ Set-Cookie: PugT=1702413624; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:24 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.22	50469	23.105.12.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	554	OUT	GET /getuid?gdpr=0&url=https://pixel.rubiconproject.com/tap.php?v=32128&nid=2915&put=[sas_uid]&cklb=1 HTTP/1.1 Host: sync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=2527372694113908282; csync=104:LQ2T1KDU-17-IBG6; TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100
2023-12-12 20:40:24 UTC	94	IN	HTTP/1.1 200 OK content-length: 0 date: Tue, 12 Dec 2023 20:40:24 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.22	50470	52.71.16.59	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	588	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=962260ae-2017-4479-84d2-c2601faa687e HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6Ijk2MjI2MGFlLTIwMTctNDQ3OS04NGQyLWMyNjAxZmFhNjg3ZSIsImwiOjE3MDI0MTM2MTY2NzUsInQiOjF9
2023-12-12 20:40:24 UTC	353	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6Ijk2MjI2MGFlLTIwMTctNDQ3OS04NGQyLWMyNjAxZmFhNjg3ZSIsImwiOjE3MDI0MTM2MjQzODUsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Sat, 29 Jun 2024 20:40:24 GMT; Secure; SameSite=None
2023-12-12 20:40:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.22	50471	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	3296	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=lD1EGcujD9GlzdZxN8V4ZQ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; SPugT=1702413621; PugT=1702413622
2023-12-12 20:40:24 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:04:27 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=16787-lD1EGcujD9GlzdZxN8V4ZQ; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:04:27 GMT; path=/ Set-Cookie: PugT=1702379067; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:04:27 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.22	50474	74.119.119.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	959	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&bundle=dcB8OF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkN4WWpVZU5jWEpuTURtakpjdGlFUlglMkZ2aDd0Q0F6NDloMlZ2Q2cwS05yMEJEbzJIeDZ3cnFydGRtcDNVeFIlMkIzR0VCWFhSakxPNHpxQ1VxcTZjQWxMbThsQ0xzMjVrJTJCUlpwNWF6N0k4eE1CbDlLaWJjRnRJQ2w5MHFId3FUQTdHQSUzRCUzRA&cw=1&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:24 UTC	475	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:40:24 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: https://mathblog.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 922823 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:40:24 UTC	438	IN	Data Raw: 31 41 41 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 30 4d 73 2d 39 56 39 6c 52 57 56 59 52 6a 46 4d 55 44 42 5a 61 53 55 79 52 6c 42 6f 56 55 78 53 52 47 31 6a 56 6b 68 4c 5a 45 49 32 4f 56 5a 4a 53 32 64 4c 51 55 64 46 62 6a 5a 42 56 7a 68 76 59 30 31 7a 59 55 6f 35 62 33 64 50 54 45 55 79 52 54 4a 53 4d 58 51 79 63 30 74 4f 55 45 68 48 52 7a 45 35 4f 48 4d 35 4e 6d 68 77 4d 47 38 30 53 6c 59 79 53 6d 39 71 61 46 52 7a 63 55 70 78 56 47 35 34 56 6d 46 52 4e 30 52 5a 54 48 46 49 56 33 41 35 59 6d 31 53 4e 6a 42 53 64 54 4e 32 52 6d 52 78 4d 56 70 32 57 46 4e 43 5a 43 55 79 51 6b 64 6e 5a 58 6c 74 54 6d 39 6c 62 47 5a 78 55 44 52 46 52 30 46 52 4f 44 41 6c 4d 6b 4a 42 62 31 5a 6b 65 47 63 6c 4d 30 51 6c 4d 30 51 22 2c 22 62 69 64 49 64 22 3a 22 74 65 43 73 4d Data Ascii: 1AA{"bundle":"0Ms-9V9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkhLZEI2OVZJS2dLQUdFbjZBVzhvY01zYUo5b3dPTEUyRTJSMXQyc0tOUEhHRzE5OHM5NmhwMG80SlYySm9qaFRzcUpxVG54VmFRN0RZTHFIV3A5Ym1SNjBSdTN2RmRxMVp2WFNCZCUyQkdnZXltTm9lbGZxUDRFR0FRODAlMkJBb1ZkeGclM0QlM0Q","bidId":"teCsM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.22	50473	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	3318	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; KRTBCOOKIE_1323=23480-OPU175665e227ff427986c82272bce47fbb&KRTB&23485-OPU175665e227ff427986c82272bce47fbb&KRTB&23524-OPU175665e227ff427986c82272bce47fbb; KRTBCOOKIE_904=16787-fXwOVOsIAmGPyDvtM8V4ZQ; KRTBCOOKIE_27=16735-uid:038a6578-c533-4e00-a051-cd933f905263; SPugT=1702413621; PugT=1702413622
2023-12-12 20:40:24 UTC	663	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:04:27 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_594=17105-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005&KRTB&17107-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:04:27 GMT; path=/ Set-Cookie: PugT=1702379067; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:04:27 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.22	50475	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	1007	OUT	GET /csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
2023-12-12 20:40:24 UTC	628	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:24 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:24 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:40:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.22	50476	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	842	OUT	GET /usersync/tradedesk/3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%2C%22nxtrdr%22%3Afalse%7D
2023-12-12 20:40:24 UTC	313	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:24 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache location: https://sync.targeting.unrulymedia.com/csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 connection: close
2023-12-12 20:40:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.22	50477	141.94.171.215	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	658	OUT	GET /?partner=214&mapped=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:24 UTC	572	IN	HTTP/1.1 302 Found set-cookie: cookie=f269c62134f650ff; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:24 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects104=1; Max-Age=86400; Expires=Wed, 13 Dec 2023 20:40:24 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=f269c62134f650ff/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.22	50479	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:24 UTC	697	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:24 UTC	688	IN	HTTP/1.1 302 Found Location: /pubmatic/1/info2?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 5 Set-Cookie: SEUNCY=E5721A91FA508ECA; Expires=Wed, 11 Dec 2024 20:40:24 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Tue, 12 Dec 2023 20:40:24 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.22	50482	172.240.155.68	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	940	OUT	GET /ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D HTTP/1.1 Host: sync.colossusssp.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gtm_usr=77ed72d2-2d26-4504-96ec-f9c2a46444c1; lmg_r=15
2023-12-12 20:40:25 UTC	736	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 12 Dec 2023 20:40:25 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: gtm_usr=77ed72d2-2d26-4504-96ec-f9c2a46444c1; path=/; domain=.colossusssp.com; expires=Wed, 11 Dec 2024 20:40:25 GMT;SameSite=None;Secure Set-Cookie: lmg_r=15; path=/; domain=.colossusssp.com; expires=Wed, 11 Dec 2024 20:40:25 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://exchange.mediavine.com/usersync/redirect?partner=huddled_masses&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=77ed72d2-2d26-4504-96ec-f9c2a46444c1 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
2023-12-12 20:40:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.22	50487	74.119.119.150	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	756	OUT	GET /dis/usersync.aspx?r=77&p=311&cp=liveintent&cu=1&url=https://i.liadm.com/s/28292?bidder_id%3D71340%26bidder_uuid%3D@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:25 UTC	519	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 12 Dec 2023 20:40:24 GMT server: Kestrel cache-control: no-cache expires: Tue, 12 Dec 2023 00:00:00 GMT location: https://i.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-fhwftuctXCl5NbsUxOmWvuZclHy6ltjSMWIT1w pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1283328 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.22	50491	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	743	OUT	GET /396846.gif?served_by=evergreen&partner_uid=8bc0f454-ec7d-0a81-3231-64fa48a7629c HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=Of9vFa5pfFBopO3FtitlJp/Bhyt0rrFWvUk+bF1wm9I=; pxrc=CLaK46sGEgYIwuoBEAA=
2023-12-12 20:40:25 UTC	612	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=cnLy2OqyO55opO3FtitlJp/Bhyt0rrFWvUk+bF1wm9I=; Path=/; Domain=rlcdn.com; Expires=Wed, 11 Dec 2024 20:40:25 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLaK46sGEgYIwuoBEAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 10 Feb 2024 20:40:25 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.22	50486	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	727	OUT	GET /362358.gif?google_gid=CAESEFkoJOl6KUyDe-EX-YXDuVc&google_cver=1 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=Of9vFa5pfFBopO3FtitlJp/Bhyt0rrFWvUk+bF1wm9I=; pxrc=CLaK46sGEgYIwuoBEAA=
2023-12-12 20:40:25 UTC	612	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=cnLy2OqyO55opO3FtitlJp/Bhyt0rrFWvUk+bF1wm9I=; Path=/; Domain=rlcdn.com; Expires=Wed, 11 Dec 2024 20:40:25 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLaK46sGEgYIwuoBEAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 10 Feb 2024 20:40:25 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.22	50481	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	928	OUT	GET /getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:25 UTC	602	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Length: 0 Connection: close Location: https://exchange.mediavine.com/usersync/redirect?partner=triplelift&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3571062816453612499566 Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:25 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.22	50488	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	792	OUT	GET /track/cmf/generic?ttd_pid=liveramp&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUSFAoFdGFwYWQSCwigurmDk9e9PBAFGAEgASgCMgsIxoGluqnXvTwQBTgBWgthZGNvbmR1Y3RvcmAC
2023-12-12 20:40:25 UTC	611	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Length: 199 Connection: close server: Kestrel location: https://idsync.rlcdn.com/362588.gif?partner_uid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:25 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUSFAoFdGFwYWQSCwigurmDk9e9PBAFEhcKCGxpdmVyYW1wEgsI3vH5npPXvTwQBRgBIAEoAjILCKzo_Mup1708EAU4AVoIbGl2ZXJhbXBgAg..; expires=Thu, 12 Dec 2024 20:40:25 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:25 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 33 36 32 35 38 38 2e 67 69 66 3f 70 61 72 74 6e 65 72 5f 75 69 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 22 3e 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 33 36 32 35 38 38 2e 67 69 66 3f 70 61 72 74 6e 65 72 5f 75 69 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://idsync.rlcdn.com/362588.gif?partner_uid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec">https://idsync.rlcdn.com/362588.gif?partner_uid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.22	50480	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	705	OUT	GET /xuid?mid=2409&xuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&dongle=d3d3&gdpr=&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:25 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:25 GMT; Secure; SameSite=None
2023-12-12 20:40:25 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.22	50485	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	3212	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=8152669554817989381 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; SPugT=1702413621; KRTBCOOKIE_1323=23480-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23485-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23524-OPUb5d1f3b8746f478f8bbe11a7db7b8734; KRTBCOOKIE_27=16735-uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab; KRTBCOOKIE_904=16787-y0wla96ADdG3uE5kNsV4ZQ; PugT=1702413623
2023-12-12 20:40:25 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:24 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:24 GMT; path=/ Set-Cookie: PugT=1702413624; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:24 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.22	50489	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	731	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=FB697C20CE040E9A
2023-12-12 20:40:25 UTC	581	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 15 Set-Cookie: SEUNCY=FB697C20CE040E9A; Expires=Wed, 11 Dec 2024 20:40:25 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2023-12-12 20:40:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.22	50490	3.93.99.238	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	945	OUT	GET /map/c=8587/tp=CLOD/tpid=95cb27def9651c04/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=a31bb17c5a71a653e40698b548c9c280; _cc_cc="ACZ4XmNQSDQ2TEoyNE82TTQ3TDQzNU41MTCztEgyNbFItkw2sjBgAILUiqN6IBoKAEyRCk4%3D"; _cc_aud="ABR4XmNgYGBIrTiqB6SgAAAW5gHR"
2023-12-12 20:40:25 UTC	367	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.0.51 Location: https://pixel.onaudience.com/?partner=104&icm&cver&mapped=a31bb17c5a71a653e40698b548c9c280&gdpr=0 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.22	50483	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	936	OUT	GET /check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:25 UTC	365	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://exchange.mediavine.com/usersync/redirect?partner=mediagrid&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.22	50484	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	762	OUT	GET /sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=6120f800-992e-11ee-8a65-3f15d911ca60 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:25 UTC	358	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //stags.bluekai.com/site/92145?id=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&redir=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D452%26ssp%3Dthemediagrid%26user_id%3D&limit=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.22	50493	3.210.17.75	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	986	OUT	GET /pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=3zzUbmittUiV3rjzJy9H%7C1702339200000%7C0; ptrrc=LQ2T1KDU-17-IBG6
2023-12-12 20:40:26 UTC	836	IN	HTTP/1.1 302 Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=3zzUbmittUiV3rjzJy9H%7C1702339200000%7C0; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:25 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Location: https://exchange.mediavine.com/usersync/redirect?partner=yieldmo&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3zzUbmittUiV3rjzJy9H&gdpr=&gdpr_consent=&us_privacy=1--- Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.22	50492	34.98.64.218	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	1096	OUT	GET /w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId= HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg
2023-12-12 20:40:26 UTC	749	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; Version=1; Expires=Wed, 11-Dec-2024 20:40:25 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1702413498.3.1.102.3.2.4.3.9\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg.wswcsTwgw7wHlkwB; Version=1; Expires=Wed, 27-Dec-2023 20:40:25 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Type: text/html Content-Length: 1215 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:26 UTC	1215	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 6f 70 65 6e 78 26 75 75 69 64 3d 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 26 73 32 73 56 65 72 73 69 6f 6e 3d 70 72 6f 64 75 63 74 69 6f 6e 26 70 61 72 74 6e 65 72 49 64 3d 31 30 34 66 31 62 35 37 2d 39 37 65 39 2d 30 62 38 64 2d 30 64 35 37 2d 30 32 32 61 63 33 36 38 36 65 66 39 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 6d Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=104f1b57-97e9-0b8d-0d57-022ac3686ef9"><img src="https://dm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.22	50495	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	920	OUT	GET /pixel?google_nid=ar101281&google_hm=Z2hoaGxMS2Y4T21UakNxMXgtT2JWTTFtdw==&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%253D%253D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:25 UTC	704	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%3D%3D&gdpr=0&gdpr_consent= Date: Tue, 12 Dec 2023 20:40:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 339 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:25 UTC	339	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 64 64 70 3f 72 65 64 3d 65 79 4a 31 49 6a 6f 69 61 48 52 30 63 48 4d 36 4c 79 39 68 4c 6d 46 31 5a 48 4a 30 5a 53 35 6a 62 32 30 36 4e 44 51 7a 4c 33 41 69 4c 43 4a 6b 49 6a 70 62 65 79 4a 75 59 57 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.22	50497	54.159.220.191	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	759	OUT	GET /cookie-sync?userid=2527372694113908282&bee_sync_partners=ox&bee_sync_current_partner=syn&bee_sync_initiator=ox&bee_sync_hop_count=4 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AAB3wk7K8YkAABTAD88gJQ; bitoIsSecure=ok
2023-12-12 20:40:25 UTC	392	IN	HTTP/1.1 303 See Other Date: Tue, 12 Dec 2023 20:40:25 GMT location: https://us-u.openx.net/w/1.0/sd?val=AAB3wk7K8YkAABTAD88gJQ&id=537125688 Server: gunicorn set-cookie: bito=AAB3wk7K8YkAABTAD88gJQ; Domain=bidr.io; expires=Fri, 10 Jan 2025 15:40:25 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.22	50494	54.234.86.126	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	767	OUT	GET /?io.narrative.guid.v2=abdf7d80-992e-11ee-b479-0e71178f036d&companyId=673&id=pubmatic_id:AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io.narrative.guid.v2=abdf7d80-992e-11ee-b479-0e71178f036d
2023-12-12 20:40:25 UTC	242	IN	HTTP/1.1 204 No Content Cache-Control: no-cache Date: Tue, 12 Dec 2023 20:40:25 GMT Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=abdf7d80-992e-11ee-b479-0e71178f036d; Max-Age=47278080; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.22	50504	68.67.160.186	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	869	OUT	GET /async_usersync?cbfn=queuePixels HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acdn.adnxs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353; anj=dTM7k!M4/YDunaTF']wIg2Il]g0G:u!]tbP6j2F-.aDE7BAf@@gm4K$irqLdY0RJjGe!qfQhRXjFGXt9jGEOGdD1J%q)3RK#-s; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIzNTcxMDYyODE2NDUzNjEyNDk5NTY2IiwiZXhwaXJlcyI6IjIwMjQtMDMtMTFUMjA6NDA6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMTJUMjA6NDA6MTZaIn0=
2023-12-12 20:40:25 UTC	858	IN	HTTP/1.1 200 OK Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: cbe30b88-fda9-47af-9869-08f43c6bc7a7 Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:25 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.22	50498	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	832	OUT	GET /csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
2023-12-12 20:40:25 UTC	387	IN	HTTP/1.1 200 OK date: Tue, 12 Dec 2023 20:40:25 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:25 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2023-12-12 20:40:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.22	50505	3.93.99.238	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	945	OUT	GET /map/c=8587/tp=CLOD/tpid=f269c62134f650ff/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=a31bb17c5a71a653e40698b548c9c280; _cc_cc="ACZ4XmNQSDQ2TEoyNE82TTQ3TDQzNU41MTCztEgyNbFItkw2sjBgAILUiqN6IBoKAEyRCk4%3D"; _cc_aud="ABR4XmNgYGBIrTiqB6SgAAAW5gHR"
2023-12-12 20:40:25 UTC	368	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.2.224 Location: https://pixel.onaudience.com/?partner=104&icm&cver&mapped=a31bb17c5a71a653e40698b548c9c280&gdpr=0 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.22	50507	172.64.151.101	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	673	OUT	POST /openrtb/pbjs?s=179872 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 3365 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:25 UTC	3365	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 32 39 63 32 63 39 64 63 30 38 34 65 64 34 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 2f 70 6f 6c 79 6e 6f 6d 69 61 6c 2d 72 6f 6f 74 2d 66 69 6e 64 69 6e 67 2d 77 69 74 68 2d 74 68 65 2d 6a 65 6e 6b 69 6e 73 2d 74 72 61 75 62 2d 61 6c 67 6f 72 69 74 68 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 61 74 68 62 6c 6f 67 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 4d 61 74 68 20 42 6c 6f 67 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 35 22 5d 2c 22 70 61 67 65 63 61 74 22 3a 5b 22 49 41 42 35 22 Data Ascii: {"id":"329c2c9dc084ed4","site":{"page":"https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/","domain":"mathblog.com","publisher":{"domain":"mathblog.com"},"name":"Math Blog","cat":["IAB5"],"sectioncat":["IAB5"],"pagecat":["IAB5"
2023-12-12 20:40:25 UTC	713	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:25 GMT Content-Type: application/json Content-Length: 37 Connection: close CF-Ray: 8348c8493c4c74a0-MIA CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://mathblog.com Cache-Control: no-cache Expires: 0 Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xkIwR8HEzAbSgyNHccbzLvU0ISuFjQK1JmfTj0L4g57Db6w846JNs%2FhTk9Nh%2FpfXJ9INchjc1O5W1W0oPNGQ%2FKqv3uLJfjWk6NCQsieuY6KgvUGL2V5bS9KYsicTGiKw%2B6VT3k%2B4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:25 UTC	37	IN	Data Raw: 7b 22 69 64 22 3a 22 33 32 39 63 32 63 39 64 63 30 38 34 65 64 34 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"329c2c9dc084ed4","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.22	50503	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	3439	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; SPugT=1702413621; KRTBCOOKIE_1323=23480-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23485-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23524-OPUb5d1f3b8746f478f8bbe11a7db7b8734; KRTBCOOKIE_27=16735-uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab; KRTBCOOKIE_904=16787-lD1EGcujD9GlzdZxN8V4ZQ; PugT=1702379067; KRTBCOOKIE_594=17105-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005&KRTB&17107-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005
2023-12-12 20:40:25 UTC	663	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:05:44 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_594=17105-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005&KRTB&17107-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 11:05:44 GMT; path=/ Set-Cookie: PugT=1702379144; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:05:44 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.22	50510	3.163.87.30	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	2391	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=OGvIOOwZEX0AX&cb=1&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22sd%22%3A%22sidebar_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%2C%7B%22sd%22%3A%22content_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:26 UTC	609	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 537 Connection: close Server: Server Date: Tue, 12 Dec 2023 20:40:26 GMT x-amz-rid: JJ1GBBP4TK3H1N7JP41K Access-Control-Allow-Origin: https://mathblog.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Strict-Transport-Security: max-age=47474747; includeSubDomains; preload Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 8bbe7c07d8e2840e2ed8c589e1566126.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: fbUgIvSo6XBDW905_Ku-opZtVwOw5bgi9rx03_n_K0izWiK9IrKG-w==
2023-12-12 20:40:26 UTC	537	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 66 69 66 22 3a 22 31 22 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 4a 75 4e 62 35 66 34 48 51 6b 6b 66 36 71 6f 6a 4a 56 4f 48 63 41 41 41 41 47 4d 58 38 4a 72 71 67 45 41 41 41 4a 59 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 43 36 6f 37 5f 48 22 2c 22 73 69 7a 65 22 3a 22 33 30 30 78 32 35 30 22 2c 22 63 72 69 64 22 3a 22 35 30 33 34 31 35 37 32 36 22 2c 22 6d 65 74 Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"fif":"1","amzniid":"JJuNb5f4HQkkf6qojJVOHcAAAAGMX8JrqgEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICC6o7_H","size":"300x250","crid":"503415726","met

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.22	50509	3.231.136.235	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	781	OUT	POST /header/auction?lib=prebid&v=8.20.0&referrer=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F&tmax=2801&us_privacy=1--- HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 3763 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:25 UTC	3763	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 76 69 6e 65 5f 72 6f 6e 5f 73 69 64 65 62 61 72 5f 62 74 66 5f 33 30 30 78 36 30 30 5f 50 72 65 62 69 64 22 2c 22 66 6c 6f 6f 72 22 3a 30 2e 31 32 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 31 36 30 2c 22 68 22 3a 36 30 30 7d 2c 7b 22 77 22 3a 31 32 30 2c 22 68 22 3a 36 30 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 38 32 34 2f 6d 61 74 68 62 6c 6f 67 2f 73 74 69 63 6b 79 5f 73 69 64 65 62 61 72 22 2c 22 Data Ascii: {"imp":[{"id":0,"tagid":"Mediavine_ron_sidebar_btf_300x600_Prebid","floor":0.12,"banner":{"format":[{"w":300,"h":250},{"w":300,"h":600},{"w":160,"h":600},{"w":120,"h":600}]},"fpd":{"context":{"data":{"pbadslot":"/1030006,1037824/mathblog/sticky_sidebar","
2023-12-12 20:40:26 UTC	641	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Type: application/json; charset=utf-8 Content-Length: 19 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 15 Oct 1992 20:10:00 GMT Pragma: no-cache X-XSS-Protection: 0 P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Access-Control-Allow-Origin: https://mathblog.com Access-Control-Allow-Credentials: true Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:26 GMT; Secure; SameSite=None
2023-12-12 20:40:26 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.22	50508	104.36.115.111	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	3261	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2803 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; SPugT=1702413621; KRTBCOOKIE_1323=23480-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23485-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23524-OPUb5d1f3b8746f478f8bbe11a7db7b8734; KRTBCOOKIE_27=16735-uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab; KRTBCOOKIE_904=16787-lD1EGcujD9GlzdZxN8V4ZQ; PugT=1702379067; KRTBCOOKIE_594=17105-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005&KRTB&17107-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005
2023-12-12 20:40:25 UTC	2803	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 32 34 31 33 36 32 34 38 32 36 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 34 30 61 30 61 38 66 66 64 36 32 61 34 62 39 22 2c 22 74 61 67 69 64 22 3a 22 73 69 64 65 62 61 72 5f 62 74 66 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 31 32 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 38 32 34 2f 6d 61 74 68 62 6c 6f 67 2f 73 74 69 63 6b 79 5f 73 69 64 65 62 61 72 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 31 30 33 37 38 32 34 2f 6d 61 74 68 62 6c 6f 67 2f 73 74 Data Ascii: {"id":"1702413624826","at":1,"cur":["USD"],"imp":[{"id":"40a0a8ffd62a4b9","tagid":"sidebar_btf","bidfloor":0.12,"secure":1,"ext":{"data":{"pbadslot":"/1030006,1037824/mathblog/sticky_sidebar","adserver":{"name":"gam","adslot":"/1030006,1037824/mathblog/st
2023-12-12 20:40:26 UTC	226	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://mathblog.com Cache-Control: no-cache, no-store, must-revalidate Date: Tue, 12 Dec 2023 20:40:25 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.22	50500	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	1007	OUT	GET /csync/RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D
2023-12-12 20:40:26 UTC	628	IN	HTTP/1.1 302 Found date: Tue, 12 Dec 2023 20:40:26 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005%22%7D; path=/; expires=Wed, 11 Dec 2024 20:40:26 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 etag: RXdc8a4e66328240f7a857c1764dd8a43b005 connection: close
2023-12-12 20:40:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.22	50502	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	738	OUT	GET /match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=ghhhlLKf8OmTjCq1x-ObVM1mw!20220908!1702413501136!ip#102.129.152.212
2023-12-12 20:40:26 UTC	823	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:26 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=ar101281&google_hm=Z2hoaGxMS2Y4T21UakNxMXgtT2JWTTFtdw==&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%253D%253D%26gdpr%3D0%26gdpr_consent%3D Server: nginx/1.22.1 Set-Cookie: arcki2_pubmatic=AE4A8C3D-1096-459A-B091-2BADD5009F52!20220908!1702413626157; Max-Age=1296000; Expires=Wed, 27 Dec 2023 20:40:26 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.22	50501	141.94.171.215	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	712	OUT	GET /?partner=214&mapped=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=95cb27def9651c04; done_redirects104=1
2023-12-12 20:40:26 UTC	419	IN	HTTP/1.1 302 Found set-cookie: cookie=95cb27def9651c04; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:26 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects219=1; Max-Age=86400; Expires=Wed, 13 Dec 2023 20:40:26 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://spl.zeotap.com?zdid=1332&zcluid=95cb27def9651c04 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.22	50506	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	1191	OUT	POST /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Content-Length: 9655 sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://mathblog.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:25 UTC	9655	OUT	Data Raw: 7b 22 63 6f 6e 6e 65 63 74 49 64 22 3a 22 22 2c 22 75 75 69 64 22 3a 22 36 31 32 30 66 38 30 30 2d 39 39 32 65 2d 31 31 65 65 2d 38 61 36 35 2d 33 66 31 35 64 39 31 31 63 61 36 30 22 2c 22 75 75 69 64 56 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 2c 22 64 65 76 69 63 65 22 3a 7b 22 6f 73 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 76 22 3a 22 4e 54 20 31 30 2e 30 22 2c 22 64 6e 74 22 3a 30 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 75 61 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b Data Ascii: {"connectId":"","uuid":"6120f800-992e-11ee-8a65-3f15d911ca60","uuidVersion":"invalidate-verizon-pushes","device":{"os":"Windows","osv":"NT 10.0","dnt":0,"h":1024,"w":1280,"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck
2023-12-12 20:40:26 UTC	268	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Type: application/json; charset=utf-8 Content-Length: 117511 Connection: close Access-Control-Allow-Origin: https://mathblog.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true
2023-12-12 20:40:26 UTC	8652	IN	Data Raw: 5b 7b 22 69 64 22 3a 22 32 37 64 32 61 37 35 66 38 64 34 66 30 64 39 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 36 36 64 62 37 61 33 33 2d 38 39 62 37 2d 34 34 34 33 2d 38 64 34 30 2d 34 32 36 31 39 39 37 33 37 36 32 32 22 2c 22 69 6d 70 69 64 22 3a 22 32 37 64 32 61 37 35 66 38 64 34 66 30 64 39 22 2c 22 70 72 69 63 65 22 3a 30 2e 31 32 39 37 34 2c 22 61 64 69 64 22 3a 22 31 30 37 37 34 33 34 31 22 2c 22 61 64 6d 22 3a 22 3c 69 6d 67 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 61 33 37 33 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 69 6d 70 72 65 73 73 69 6f 6e 2f 76 32 2f 36 33 30 39 39 31 2f 38 35 2f 63 6c 73 63 61 65 6c 33 6e 66 30 73 76 67 34 61 65 67 68 67 2f 36 36 64 62 37 61 33 33 2d 38 39 62 37 2d Data Ascii: [{"id":"27d2a75f8d4f0d9","seatbid":[{"bid":[{"id":"66db7a33-89b7-4443-8d40-426199737622","impid":"27d2a75f8d4f0d9","price":0.12974,"adid":"10774341","adm":"<img src=\"https://a373.casalemedia.com/impression/v2/630991/85/clscael3nf0svg4aeghg/66db7a33-89b7-
2023-12-12 20:40:26 UTC	16384	IN	Data Raw: 46 51 42 6d 73 68 4a 6a 6a 47 39 56 6c 68 50 52 61 47 68 58 62 49 42 38 67 63 47 30 4e 49 73 43 68 34 47 30 6c 58 6c 65 52 4a 49 49 72 6c 62 55 73 48 73 33 5a 45 68 51 34 75 4e 36 4d 75 43 30 68 6b 76 79 63 62 5a 64 6d 53 2d 70 5a 55 4b 50 70 6b 57 55 46 64 70 54 4f 6a 4f 49 52 36 6b 67 6f 59 49 77 4c 65 79 65 69 36 43 44 42 76 59 70 31 54 6a 4d 73 75 75 71 4d 62 72 49 66 41 30 78 51 67 54 78 67 4e 61 77 66 76 36 66 71 72 71 31 35 43 56 37 66 6f 54 67 55 43 6a 42 6c 4f 39 7a 55 5a 42 68 39 44 76 43 45 38 69 6c 65 6e 51 4d 39 70 36 6c 6c 64 5f 32 61 35 58 56 61 66 72 62 6d 33 73 55 74 4e 70 63 39 5a 6f 63 4a 73 4d 68 58 67 4b 44 48 70 7a 66 45 6c 71 6c 37 67 6f 49 76 48 6a 6c 71 64 54 5a 44 36 4f 59 6d 6a 69 6e 34 6e 72 43 7a 6b 37 6c 65 6e 74 41 6a 61 73 Data Ascii: FQBmshJjjG9VlhPRaGhXbIB8gcG0NIsCh4G0lXleRJIIrlbUsHs3ZEhQ4uN6MuC0hkvycbZdmS-pZUKPpkWUFdpTOjOIR6kgoYIwLeyei6CDBvYp1TjMsuuqMbrIfA0xQgTxgNawfv6fqrq15CV7foTgUCjBlO9zUZBh9DvCE8ilenQM9p6lld_2a5XVafrbm3sUtNpc9ZocJsMhXgKDHpzfElql7goIvHjlqdTZD6OYmjin4nrCzk7lentAjas
2023-12-12 20:40:26 UTC	16384	IN	Data Raw: 71 57 32 42 79 39 46 76 43 74 73 65 41 42 51 64 2d 77 79 73 42 65 56 48 4d 6b 33 4e 68 6d 74 47 35 43 45 74 78 66 36 51 56 4d 62 66 50 70 4b 6b 46 43 4f 35 49 54 53 6b 6f 6b 49 6f 47 35 4e 67 61 61 31 71 77 6c 64 7a 43 55 37 34 5a 79 72 75 70 73 57 71 35 45 4e 59 66 6f 65 42 69 58 67 33 51 4a 33 79 75 69 53 4d 59 72 65 61 4e 67 37 72 69 51 73 73 42 6e 68 45 62 74 51 49 45 36 61 61 67 30 69 73 69 57 51 4e 4e 4f 31 6e 49 37 6c 36 6a 63 52 33 63 71 2d 48 74 6f 51 4a 77 4c 45 79 4d 56 55 56 6c 39 77 63 6d 35 51 70 6d 67 45 6d 49 79 35 4f 70 38 51 6b 37 65 78 43 62 58 6f 4c 77 76 43 6a 72 6c 7a 62 46 7a 76 4b 53 78 69 66 4c 43 68 79 33 6e 2d 6d 4f 48 6c 6c 4b 7a 34 75 58 74 54 4e 69 36 61 44 38 6b 68 48 74 67 68 37 70 79 6c 6d 4d 69 35 46 76 38 64 6e 57 54 30 Data Ascii: qW2By9FvCtseABQd-wysBeVHMk3NhmtG5CEtxf6QVMbfPpKkFCO5ITSkokIoG5Ngaa1qwldzCU74ZyrupsWq5ENYfoeBiXg3QJ3yuiSMYreaNg7riQssBnhEbtQIE6aag0isiWQNNO1nI7l6jcR3cq-HtoQJwLEyMVUVl9wcm5QpmgEmIy5Op8Qk7exCbXoLwvCjrlzbFzvKSxifLChy3n-mOHllKz4uXtTNi6aD8khHtgh7pylmMi5Fv8dnWT0
2023-12-12 20:40:26 UTC	16384	IN	Data Raw: 65 4a 51 45 56 45 75 31 6f 50 6b 48 4c 32 2d 6b 49 51 5a 53 57 69 74 79 68 6c 57 41 6f 6b 78 78 58 41 57 6f 50 42 39 50 63 64 41 57 35 71 58 72 56 4a 33 6f 79 71 53 30 76 2d 57 33 69 37 33 7a 41 6c 37 2d 69 6c 42 6c 5a 33 77 5a 31 51 66 34 34 59 38 36 65 41 37 62 77 64 68 48 4d 72 49 4f 79 34 6d 44 35 4a 74 39 2d 4a 6a 76 7a 52 65 44 37 54 38 7a 64 68 50 52 4f 6e 37 4c 63 57 38 58 31 61 4b 79 6a 47 70 55 34 4b 55 71 38 35 65 4b 68 4e 6e 43 59 67 38 36 68 43 56 70 4c 69 56 68 6d 58 72 4e 46 49 68 4a 78 45 32 68 58 64 50 75 35 30 46 71 47 36 43 6c 63 66 63 42 45 4a 34 63 64 57 36 47 52 6f 71 70 42 4d 77 57 65 46 6f 72 32 53 6d 5a 61 39 68 57 41 64 58 56 4f 4f 32 30 65 48 7a 63 4a 42 4a 55 46 64 44 36 30 74 54 4e 66 70 4b 59 31 39 35 44 67 59 42 47 65 41 75 Data Ascii: eJQEVEu1oPkHL2-kIQZSWityhlWAokxxXAWoPB9PcdAW5qXrVJ3oyqS0v-W3i73zAl7-ilBlZ3wZ1Qf44Y86eA7bwdhHMrIOy4mD5Jt9-JjvzReD7T8zdhPROn7LcW8X1aKyjGpU4KUq85eKhNnCYg86hCVpLiVhmXrNFIhJxE2hXdPu50FqG6ClcfcBEJ4cdW6GRoqpBMwWeFor2SmZa9hWAdXVOO20eHzcJBJUFdD60tTNfpKY195DgYBGeAu
2023-12-12 20:40:26 UTC	16384	IN	Data Raw: 6a 41 30 50 32 6c 6b 50 58 68 69 61 57 51 6d 5a 47 4a 74 58 32 49 39 51 55 74 42 62 57 59 74 52 47 70 44 59 57 74 61 4e 32 52 42 56 44 46 50 5a 48 70 70 56 48 55 79 52 31 6b 79 61 55 4e 5a 65 6e 46 46 4e 31 4d 35 61 6c 51 74 4f 54 56 79 63 48 4e 55 53 56 4e 45 5a 30 4d 79 56 45 38 79 52 32 64 53 4d 33 52 44 4f 47 46 32 61 58 64 77 64 6b 6c 6e 55 45 31 43 62 57 46 34 55 48 46 54 4f 54 42 5a 63 33 6f 32 63 54 52 78 58 33 5a 43 62 7a 46 4c 55 32 5a 59 54 31 5a 58 61 55 70 32 5a 30 35 57 62 31 52 53 55 44 4a 52 57 45 34 74 53 57 35 4e 64 45 45 6c 4d 6a 49 6c 4d 6a 42 43 54 31 4a 45 52 56 49 39 4d 43 55 79 4d 46 64 4a 52 46 52 49 50 54 45 6c 4d 6a 42 49 52 55 6c 48 53 46 51 39 4d 53 55 79 4d 45 46 4d 56 44 30 6c 4d 6a 49 6c 4d 6a 49 6c 4d 6a 42 54 56 46 6c 4d Data Ascii: jA0P2lkPXhiaWQmZGJtX2I9QUtBbWYtRGpDYWtaN2RBVDFPZHppVHUyR1kyaUNZenFFN1M5alQtOTVycHNUSVNEZ0MyVE8yR2dSM3RDOGF2aXdwdklnUE1CbWF4UHFTOTBZc3o2cTRxX3ZCbzFLU2ZYT1ZXaUp2Z05Wb1RSUDJRWE4tSW5NdEElMjIlMjBCT1JERVI9MCUyMFdJRFRIPTElMjBIRUlHSFQ9MSUyMEFMVD0lMjIlMjIlMjBTVFlM
2023-12-12 20:40:27 UTC	15005	IN	Data Raw: 48 41 7a 62 57 56 78 54 6e 4e 46 61 46 39 6d 52 44 46 57 4c 54 42 61 51 58 5a 45 61 57 70 6b 54 31 56 74 57 46 4e 47 65 48 6b 32 64 6b 31 42 4e 55 56 79 51 69 31 76 4d 6b 70 30 4e 7a 4a 36 61 7a 52 56 59 32 56 6c 64 6a 56 76 55 48 5a 49 55 57 38 35 51 57 6c 66 5a 6c 4e 71 53 32 70 31 4e 6e 56 42 61 6a 68 68 4d 33 4e 44 54 47 4e 32 62 56 39 31 4f 47 34 77 61 44 52 78 62 56 5a 36 55 54 56 6f 53 6b 46 69 52 6e 56 68 53 6d 64 4a 61 48 6c 4a 65 47 4a 44 55 55 31 6f 4f 47 35 44 54 7a 4a 66 54 6d 67 30 53 30 4e 47 64 54 51 35 57 44 42 42 62 54 68 46 63 45 39 7a 55 56 52 72 54 48 42 6e 64 44 4a 49 61 32 4a 72 65 6d 46 6e 64 48 56 4f 59 33 4e 76 63 58 68 6b 4c 56 68 6d 62 58 5a 6e 4e 55 39 51 55 47 39 5a 56 7a 46 53 63 45 63 30 4e 6a 6c 75 61 6d 74 71 53 54 4a 4d Data Ascii: HAzbWVxTnNFaF9mRDFWLTBaQXZEaWpkT1VtWFNGeHk2dk1BNUVyQi1vMkp0NzJ6azRVY2VldjVvUHZIUW85QWlfZlNqS2p1NnVBajhhM3NDTGN2bV91OG4waDRxbVZ6UTVoSkFiRnVhSmdJaHlJeGJDUU1oOG5DTzJfTmg0S0NGdTQ5WDBBbThFcE9zUVRrTHBndDJIa2JremFndHVOY3NvcXhkLVhmbXZnNU9QUG9ZVzFScEc0NjluamtqSTJM
2023-12-12 20:40:27 UTC	1379	IN	Data Raw: 7a 70 73 6f 43 44 4f 30 44 44 53 58 54 52 36 54 41 6a 6c 58 4e 64 41 31 6c 64 34 34 63 65 2d 50 6f 39 44 73 55 43 53 57 72 70 55 38 54 52 58 52 78 77 31 77 26 63 69 64 3d 43 41 51 53 4b 51 44 49 43 61 61 4e 5a 34 6d 56 77 35 6d 4a 34 46 45 37 38 70 68 4a 76 6f 6e 52 58 6f 62 46 39 7a 71 51 6c 5f 47 69 76 54 77 7a 63 32 63 2d 43 34 39 4e 5f 6c 51 71 47 41 45 27 3b 77 69 6e 64 6f 77 2e 64 76 33 55 74 77 20 3d 20 7b 75 3a 20 75 2c 77 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 73 63 72 69 70 74 20 73 72 63 3d 5c 22 27 20 2b 20 75 20 2b 20 27 26 66 6c 62 3d 31 5c 22 3e 3c 2f 73 27 20 2b 20 27 63 72 69 70 74 3e 27 29 3b 7d 7d 3b 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 5c 22 Data Ascii: zpsoCDO0DDSXTR6TAjlXNdA1ld44ce-Po9DsUCSWrpU8TRXRxw1w&cid=CAQSKQDICaaNZ4mVw5mJ4FE78phJvonRXobF9zqQl_GivTwzc2c-C49N_lQqGAE';window.dv3Utw = {u: u,w: function() {document.write('<script src=\"' + u + '&flb=1\"></s' + 'cript>');}};})();</script><script src=\"
2023-12-12 20:40:27 UTC	16384	IN	Data Raw: 4f 6c 68 72 65 35 74 41 6a 64 33 52 52 6c 4b 6d 65 53 7a 52 68 58 45 73 76 65 79 4a 54 56 43 48 38 69 31 35 42 61 52 5f 47 52 7a 76 6a 4f 79 2d 78 71 49 74 77 43 39 43 6e 48 6f 65 4a 56 63 33 33 70 38 37 4a 46 44 44 62 49 46 42 6f 62 33 55 4e 2d 42 7a 6e 4e 4d 45 4b 6c 76 4f 72 4e 43 52 36 41 5f 6b 55 51 63 58 47 62 5f 35 6e 6e 30 76 33 79 61 39 48 6a 43 75 77 73 30 33 44 5f 69 70 37 50 69 68 59 51 31 30 76 66 46 54 47 32 32 69 74 35 6b 69 57 65 4b 37 6d 63 45 4d 46 35 47 48 61 6c 75 6f 64 6b 58 2d 4a 65 6b 4a 52 43 46 42 32 54 51 6c 36 37 42 64 46 72 4c 70 54 64 4e 47 75 33 77 50 64 63 51 4b 33 62 74 73 73 39 78 6a 36 54 34 76 37 5f 33 75 6e 2d 68 6c 6d 76 38 54 42 4d 70 6f 5a 68 79 36 61 41 52 6d 38 57 4c 77 6c 32 32 54 38 5f 52 59 57 64 30 78 65 6a 4c Data Ascii: Olhre5tAjd3RRlKmeSzRhXEsveyJTVCH8i15BaR_GRzvjOy-xqItwC9CnHoeJVc33p87JFDDbIFBob3UN-BznNMEKlvOrNCR6A_kUQcXGb_5nn0v3ya9HjCuws03D_ip7PihYQ10vfFTG22it5kiWeK7mcEMF5GHaluodkX-JekJRCFB2TQl67BdFrLpTdNGu3wPdcQK3btss9xj6T4v7_3un-hlmv8TBMpoZhy6aARm8WLwl22T8_RYWd0xejL
2023-12-12 20:40:27 UTC	10555	IN	Data Raw: 43 7a 58 6d 62 58 5a 61 51 4d 34 31 66 79 6b 5f 67 4a 4b 74 42 58 62 54 6a 4f 55 31 34 6f 2d 42 64 51 4a 73 62 54 46 4d 36 67 78 65 66 6f 43 6b 72 33 6c 4b 64 2d 56 39 74 4b 59 6d 59 30 50 34 79 69 67 55 47 32 64 6f 38 77 36 5a 46 6a 72 57 4c 68 6b 32 70 32 2d 62 6a 4c 47 64 65 33 44 4d 7a 75 6e 4b 54 66 34 31 51 54 78 68 79 4d 61 5f 54 50 34 4d 6d 68 4d 72 31 45 30 51 47 6e 79 75 79 70 4d 72 75 30 58 65 78 77 62 76 64 34 4e 6a 4f 4f 41 61 55 68 74 6d 76 4e 37 4f 7a 72 56 46 4f 6e 2d 32 35 41 65 75 64 77 59 54 45 67 33 67 4a 73 77 65 69 7a 6e 30 65 36 6b 6d 45 57 38 38 6a 57 62 73 75 34 42 46 36 75 6c 50 54 4b 53 61 43 47 53 49 67 49 72 44 5f 6f 4b 2d 59 45 61 4b 34 43 41 62 39 67 31 59 6d 69 64 36 6c 66 52 2d 32 38 68 36 71 5f 54 68 72 61 42 6a 43 43 61 Data Ascii: CzXmbXZaQM41fyk_gJKtBXbTjOU14o-BdQJsbTFM6gxefoCkr3lKd-V9tKYmY0P4yigUG2do8w6ZFjrWLhk2p2-bjLGde3DMzunKTf41QTxhyMa_TP4MmhMr1E0QGnyuypMru0Xexwbvd4NjOOAaUhtmvN7OzrVFOn-25AeudwYTEg3gJsweizn0e6kmEW88jWbsu4BF6ulPTKSaCGSIgIrD_oK-YEaK4CAb9g1Ymid6lfR-28h6q_ThraBjCCa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.22	50513	172.67.13.182	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	609	OUT	GET /?zdid=1332&zcluid=872da16551953746 HTTP/1.1 Host: spl.zeotap.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:26 UTC	1124	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://ads.pubmatic.com location: https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=d42897f0-a063-4fda-61c7-d26e083018c0&reqId=5fbdcb44-72f5-48d1-760d-8a08aed6c5f8&zcluid=872da16551953746&zdid=1332 set-cookie: zc=d42897f0-a063-4fda-61c7-d26e083018c0; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure set-cookie: zsc=a%B7%E6X%17%87g%A94%D2G2c%06%FFP%24%DE4%CE%15%C2.%95%3FN%C3w%81%09b%BA%C8N%5CF%E4%E6%C8%80%C8%1Fyj%1E%17%C0%89M%5D%2C%97%82%01%95%1F4%5E%CB%B3%A7%F6%FAX%06%9EO%A4e%EB%E9%9C%23~%A3%7Cs%DF%ADb3%5DK; Path=/; Domain=.zeotap.com; Max-Age=86400; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8348c84aac8e6dcb-MIA
2023-12-12 20:40:26 UTC	287	IN	Data Raw: 31 31 38 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6f 74 61 70 5f 64 64 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 7a 70 61 72 74 6e 65 72 69 64 3d 31 26 61 6d 70 3b 65 6e 76 3d 6d 57 65 62 26 61 6d 70 3b 65 76 65 6e 74 54 79 70 65 3d 6d 61 70 26 61 6d 70 3b 69 64 5f 6d 69 64 5f 34 3d 64 34 32 38 39 37 66 30 2d 61 30 36 33 2d 34 66 64 61 2d 36 31 63 37 2d 64 32 36 65 30 38 33 30 31 38 63 30 26 61 6d 70 3b 72 65 71 49 64 3d 35 66 62 64 63 62 34 34 2d 37 32 66 35 2d 34 38 64 31 2d 37 36 30 64 2d 38 61 30 38 61 65 64 36 63 35 66 38 26 61 6d 70 3b 7a 63 6c 75 69 64 3d 38 37 32 64 61 31 36 35 35 31 39 35 33 37 Data Ascii: 118<a href="https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=d42897f0-a063-4fda-61c7-d26e083018c0&reqId=5fbdcb44-72f5-48d1-760d-8a08aed6c5f8&zcluid=872da165519537
2023-12-12 20:40:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.22	50514	192.178.50.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:25 UTC	825	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 69faac858c5d4dd1fe516cd03a7ff5a4.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:26 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Tue, 12 Dec 2023 20:40:26 GMT Expires: Wed, 11 Dec 2024 20:40:26 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:26 UTC	545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2023-12-12 20:40:26 UTC	1252	IN	Data Raw: 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 Data Ascii: .createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=functi
2023-12-12 20:40:26 UTC	1252	IN	Data Raw: 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 Data Ascii: this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"st
2023-12-12 20:40:26 UTC	1252	IN	Data Raw: 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c Data Ascii: ();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),
2023-12-12 20:40:26 UTC	1252	IN	Data Raw: 5b 32 5d 2c 45 3d 43 5b 33 5d 3b 69 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c Data Ascii: [2],E=C[3];if(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hl
2023-12-12 20:40:26 UTC	609	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b Data Ascii: .location.href,!1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.22	50515	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	2111	OUT	GET /pagead/interaction/?ai=Cfqd-LMV4ZalW49uP7w_vsYqACoGOj9904Maj77ASmcDNkqsOEAEg1LGHJGDJhoCA3KPcEKABocCY8SjIAQmpAkYQa7Dps4I-4AIAqAMByAPLBKoE4AJP0Pzi09AkutJTCevWVdxkV1vkNW0S9Krb-Vs-HCbA4HhEJ75k0zazhxTtQKYqJ5R9QmilI0QjaU8_0E2M111yZS-qNyWS5p-QGYbtRG2S_r4oHeZ3ZtjgS63RyQDxX0nbdOCXdSe2DTHIS4Zaq4U7wbALqP7YlRmwApHdLAGK7PiN_id9bB8Rm266tFa_M6zWhbuh9I5f7AQox3zqCoFdTXgp5lFvtSgyfDhkOLAVlpU8dkfFIPu85qNGigxmXSSR72bjJYiJG_aEMZKOO0_jA24KYpNt_2Idf_DVZF_hryuzYvekW5eRlpWBjw_s7RtY4cqvQBmwsZqViPuYD5jIL1fVxpcE-lkEc_nBxIFERG8H4cYJbPElyTTLQNLDF3M9hzDbS82C7hyK01XlbGdH8Lmn7KagA_GJSzD2fbYmu3Od3miUV4CL0iZEFRhTQJiQQYPt63gnVxUVzlkkLOaxwATHhsKKzATgBAGIBcKWlZVNoAYugAfw6umSBKgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcA0ggfCIBhEAEYHTICigI6BIBAgEBIvf3BOljwgOn04IqDA_IIG2FkeC1zdWJzeW4tMzcxOTc3MTI4ODI3NzI2MbEJseZQRL5pMiyACgOYCwHICwGADAGiDBwqGgoY5LSxAu61sQK1uLEC5LSxAu61sQK7u7EC2gwRCgsQkIjXlZ_C65WzARICAQOqDQJVU8gNAeINEwjRuOn04IqDAxXj7eMHHe-YAqDYEwugFOvayN2qnIPsE6AUlNuT-5Dou83CAaAU7aTTzIHdzaGSAaAU1pObvb2g7s_xAaAU9MGtwcjJ1LMHoBTZ6tvVraqzv9sBoBSAgvqZwP3Tpv8BoBTT3efB3s3pqPMB0BUB-BYBgBcB&sigh=0Z3OCUy4kKo&cid=CAQSTQAvHhf_RhMZvVTJZzJDxVtKbwjEMCcgpuLyeteHPEifzmLygz2ZC93-sZNCpqoTCn_ZxQjsWpXXg3p09btofr9A16QbohAPSz9oO6rM&label=window_focus&gqid&qqid=CKmc6_TgioMDFePt4wcd75gCoA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:26 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Dec 2023 20:40:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.22	50517	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	3333	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=8152669554817989381 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; SPugT=1702413621; KRTBCOOKIE_1323=23480-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23485-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23524-OPUb5d1f3b8746f478f8bbe11a7db7b8734; KRTBCOOKIE_27=16735-uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab; KRTBCOOKIE_904=16787-lD1EGcujD9GlzdZxN8V4ZQ; PugT=1702379067; KRTBCOOKIE_594=17105-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005&KRTB&17107-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005
2023-12-12 20:40:26 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 11:05:44 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:05:44 GMT; path=/ Set-Cookie: PugT=1702379144; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 11:05:44 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.22	50518	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	731	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=FB697C20CE040E9A
2023-12-12 20:40:26 UTC	581	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 15 Set-Cookie: SEUNCY=FB697C20CE040E9A; Expires=Wed, 11 Dec 2024 20:40:26 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2023-12-12 20:40:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.22	50521	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	1064	OUT	GET /match?bidder_id=45&external_user_id=c2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553&ts=1702413622&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D6120f800-992e-11ee-8a65-3f15d911ca60%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:26 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:26 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:26 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.22	50519	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	1397	OUT	GET /usersync/redirect?partner=huddled_masses&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=77ed72d2-2d26-4504-96ec-f9c2a46444c1 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:26 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.22	50520	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	1379	OUT	GET /usersync/redirect?partner=triplelift&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3571062816453612499566 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:26 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.22	50522	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	1395	OUT	GET /usersync/redirect?partner=pubmatic&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:26 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.22	50523	34.199.75.211	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	723	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-fhwftuctXCl5NbsUxOmWvuZclHy6ltjSMWIT1w HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CggKBgjdARDbFg; lidid=83a0af49-8fc8-48d1-8f90-ce801edd9fe1
2023-12-12 20:40:26 UTC	590	IN	HTTP/1.1 303 See Other Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Length: 0 Connection: close Location: https://i6.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-fhwftuctXCl5NbsUxOmWvuZclHy6ltjSMWIT1w Set-Cookie: _li_ss=ChMKBgjdARDbFgoJCP____8HEOUW; Max-Age=2592000; Expires=Thu, 11 Jan 2024 20:40:26 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=83a0af49-8fc8-48d1-8f90-ce801edd9fe1; Max-Age=63072000; Expires=Thu, 11 Dec 2025 20:40:26 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 5 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.22	50526	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	723	OUT	GET /362588.gif?partner_uid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CLaK46sGEgYIwuoBEAA=; rlas3=cnLy2OqyO55opO3FtitlJp/Bhyt0rrFWvUk+bF1wm9I=
2023-12-12 20:40:26 UTC	612	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=d96I85+BpE1opO3FtitlJp/Bhyt0rrFWvUk+bF1wm9I=; Path=/; Domain=rlcdn.com; Expires=Wed, 11 Dec 2024 20:40:26 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLaK46sGEgYIwuoBEAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 10 Feb 2024 20:40:26 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.22	50528	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	815	OUT	GET /w/1.0/sd?val=AAB3wk7K8YkAABTAD88gJQ&id=537125688 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg
2023-12-12 20:40:26 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.22	50524	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	1289	OUT	GET /usersync/redirect?partner=mediagrid&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:26 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.22	50525	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	920	OUT	GET /pixel?google_nid=ar101281&google_hm=Z2hoaGxMS2Y4T21UakNxMXgtT2JWTTFtdw==&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%253D%253D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:26 UTC	704	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%3D%3D&gdpr=0&gdpr_consent= Date: Tue, 12 Dec 2023 20:40:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 339 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:26 UTC	339	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 64 64 70 3f 72 65 64 3d 65 79 4a 31 49 6a 6f 69 61 48 52 30 63 48 4d 36 4c 79 39 68 4c 6d 46 31 5a 48 4a 30 5a 53 35 6a 62 32 30 36 4e 44 51 7a 4c 33 41 69 4c 43 4a 6b 49 6a 70 62 65 79 4a 75 59 57 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.22	50516	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	1975	OUT	GET /pagead/interaction/?ai=CNLR6KsV4ZZCNBf_70_wPivqMcP-6zdJz7LO05N8QofGzzcQ4EAEg1LGHJGDJhoCA3KPcEKABnO-AwgLIAQGpAioyK9LIwEk-4AIAqAMByAPLBKoE3gJP0ElGcDcsHUniv7DhRhxvb_muXNqE5HDu99oiv72IyiCApmzQwsdPB7l6NFbKPtFtfP4ZyAoOV8F1nhAervwm8SuFyJA9iUmv47oDKNHpa90gQdYNRFjinkXjwi0omOIpJKO-Z20Z28oWRSXK42kcYEs8RMBeYPDARYr0ufG1azMCgQB5J1bkJMCV4UH165Pa4v15XpH66V-jrqGtNVzvl-UV4brKU8QiC0zSp3ebyqj62bf0VoMngUI3XhJemfpUsgdhBKk34GjdenKg1dpcUs1qoDxGRp01X02N7GdaW5yU40Wg6udX5dJPR8yxrtPHvuxeuZ0IwBzpzEYjaMBuYcAQeFd7tiJ9IGL6V9qA2Kp0gUy_o7rceGQyHOuYRTxtDROewBdm12bTt7YUTpDQoQyx64GZhwR0joIQnNrDSo2RZmdjDCsJBqMxUyrqkXPEoffWG3dYws569JWp5cAEqI64p58E4AQBiAX2kJn6SIAHzJD_vQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHTICigI6BIBAgEBIvf3BOlj79vPz4IqDA_IIG2FkeC1zdWJzeW4tMzcxOTc3MTI4ODI3NzI2MbEJSrzMqb6fuPKACgOYCwHICwGiDBQqEgoQ5LSxAu61sQK1uLECu7uxAtoMEQoLEKC-iPvNp-am6wESAgEDqg0CVVPIDQHiDRMInan08-CKgwMV__2UCR0KPQMO2BMCiBQH0BUB-BYBgBcB&sigh=Mj_62OByYyg&cid=CAQSTQAvHhf_irivc2k7iCP4UVmgA07GvR0JSS0MfjvVpPwcmIn8H6IMznE1faWDMxGeeHVlGQGmYiB4qAqZpLwM119dbrX-pccDmmgImKA5&label=window_focus&gqid&qqid=CJDK9fPgioMDFf_9lAkdCj0DDg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://0694d7e9da0410216317ce2efc8c3391.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:26 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Dec 2023 20:40:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.22	50527	141.94.171.215	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	724	OUT	GET /?partner=104&icm&cver&mapped=a31bb17c5a71a653e40698b548c9c280&gdpr=0 HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: done_redirects104=1; done_redirects219=1; cookie=f269c62134f650ff
2023-12-12 20:40:26 UTC	438	IN	HTTP/1.1 302 Found set-cookie: cookie=f269c62134f650ff; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:26 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects147=1; Max-Age=86400; Expires=Wed, 13 Dec 2023 20:40:26 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.22	50531	54.163.159.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	798	OUT	GET /ping_match.gif?ei=RUBICON&rurl=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4210%26nid%3D1523%26put%3D_wfivefivec_%26expires%3D30 HTTP/1.1 Host: i.w55c.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; matchopenx=5; matchpubmatic=5; matchgoogle=5
2023-12-12 20:40:26 UTC	714	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Tue, 12 Dec 2023 20:40:25 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pixel.rubiconproject.com/tap.php?v=4210&nid=1523&put=ViN9mkBO1Rd9xZ5&expires=30 Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0f1e963e5cb8c9589@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; Domain=.w55c.net; Expires=Sun, 12-Jan-2025 20:40:26 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchrubicon=5; Domain=.w55c.net; Expires=Thu, 11-Jan-2024 20:40:26 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.22	50532	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	1410	OUT	GET /usersync/redirect?partner=yieldmo&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=3zzUbmittUiV3rjzJy9H&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:26 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.22	50533	68.67.160.186	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	869	OUT	GET /async_usersync?cbfn=queuePixels HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acdn.adnxs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353; anj=dTM7k!M4/YDunaTF']wIg2Il]g0G:u!]tbP6j2F-.aDE7BAf@@gm4K$irqLdY0RJjGe!qfQhRXjFGXt9jGEOGdD1J%q)3RK#-s; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIzNTcxMDYyODE2NDUzNjEyNDk5NTY2IiwiZXhwaXJlcyI6IjIwMjQtMDMtMTFUMjA6NDA6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMTJUMjA6NDA6MTZaIn0=
2023-12-12 20:40:26 UTC	858	IN	HTTP/1.1 200 OK Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: de666dab-7659-420b-8d40-78b57eb4917f Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:26 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.22	50534	3.213.9.240	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	752	OUT	GET /rb.gif HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=0d2b585e-dbe9-4680-8c70-3d0a0e81332d; ss=gwj8BFqd9vc8Lv34sjKLtX1Q0cqMbuwuCxzU%2BIiAvoi%2Bbuo4mnEBQaekNmkdft1MkQwlZjyDivgzDHUmQ2vpog%3D%3D
2023-12-12 20:40:26 UTC	654	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://pixel.rubiconproject.com/tap.php?v=711370&nid=5504&put=0d2b585e-dbe9-4680-8c70-3d0a0e81332d&expires=365&next=https%3A%2F%2Fbeacon.lynx.cognitivlabs.com%2Fpixel%3Ftype%3Dsync%26source%3Drubicon%26inventory_source%3D0 Set-Cookie: UID=0d2b585e-dbe9-4680-8c70-3d0a0e81332d; expires=Thu, 12 Dec 2024 20:40:26 GMT; path=/; secure; samesite=none Set-Cookie: ss=wlpwcamuiTrQFV3yHhO%2BjG7c5nCCtpk2yvR4MGY2sf4RLhoC8PQ9HV0Uyy4aQpfsrhzvHiH36KRmbPI8bbABaQ%3D%3D; expires=Thu, 12 Dec 2024 20:40:26 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.22	50535	18.164.124.115	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	786	OUT	GET /ct/cms-2c-rubicon.html HTTP/1.1 Host: cti.w55c.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; matchopenx=5; matchpubmatic=5; matchgoogle=5
2023-12-12 20:40:27 UTC	667	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 53668 Connection: close Date: Wed, 06 Dec 2023 23:50:25 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 17 Sep 2021 21:17:39 GMT ETag: "7549d51888f0142460ac70be66758bc9" x-amz-version-id: eM8rKv5bLrMqGrCvH619GCOhuiLqCbex Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 65cf746d404c73d4aef0b35e7fcab946.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: ZIKvH6AuZ9b-msbDKm3R7bh72UEmHRiF8MKt8X5VVm3ZHa7EopAITA== Age: 507002 Strict-Transport-Security: max-age=2592000; includeSubDomains Cache-Control: must-revalidate
2023-12-12 20:40:27 UTC	15717	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 27 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 20 73 28 69 2c 63 2c 75 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 69 66 28 21 63 5b 74 5d 29 7b 69 66 28 21 69 5b 74 5d 29 7b 76 61 72 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 65 26 26 6e 29 72 65 74 75 72 6e 20 6e 28 74 2c 21 30 29 3b 69 66 28 64 29 72 65 Data Ascii: <html><head><meta http-equiv='Content-Type' content='text/html;charset=utf-8'></head><body><script type="text/javascript">!function s(i,c,u){function a(t,e){if(!c[t]){if(!i[t]){var n="function"==typeof require&&require;if(!e&&n)return n(t,!0);if(d)re
2023-12-12 20:40:27 UTC	16384	IN	Data Raw: 68 69 73 2e 76 65 72 73 69 6f 6e 5f 3d 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 53 65 72 76 69 63 65 53 70 65 63 69 66 69 63 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 53 65 72 76 69 63 65 53 70 65 63 69 66 69 63 5f 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 69 73 53 65 72 76 69 63 65 53 70 65 63 69 66 69 63 5f 3d 65 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 Data Ascii: his.version_=parseInt(e,10)},enumerable:!0,configurable:!0}),Object.defineProperty(e.prototype,"isServiceSpecific",{get:function(){return this.isServiceSpecific_},set:function(e){this.isServiceSpecific_=e},enumerable:!0,configurable:!0}),Object.defineProp
2023-12-12 20:40:27 UTC	16384	IN	Data Raw: 26 28 6e 2e 68 61 73 28 74 2b 31 29 3f 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 73 2e 70 75 73 68 28 74 29 2c 61 2b 3d 66 2e 42 69 74 4c 65 6e 67 74 68 2e 73 69 6e 67 6c 65 4f 72 52 61 6e 67 65 2c 61 2b 3d 66 2e 42 69 74 4c 65 6e 67 74 68 2e 76 65 6e 64 6f 72 49 64 29 3a 28 73 2e 70 75 73 68 28 74 29 2c 61 2b 3d 66 2e 42 69 74 4c 65 6e 67 74 68 2e 76 65 6e 64 6f 72 49 64 2c 6f 2e 70 75 73 68 28 73 29 2c 73 3d 5b 5d 29 29 7d 29 2c 72 3f 28 65 2b 3d 79 2e 56 65 63 74 6f 72 45 6e 63 6f 64 69 6e 67 54 79 70 65 2e 52 41 4e 47 45 2b 22 22 2c 65 2b 3d 74 68 69 73 2e 62 75 69 6c 64 52 61 6e 67 65 45 6e 63 6f 64 69 6e 67 28 6f 29 29 3a 28 65 2b 3d 79 2e 56 65 63 74 6f 72 45 6e 63 6f 64 69 6e 67 54 79 70 65 2e 46 49 45 4c 44 2b 22 22 2c 65 2b 3d 69 29 2c 65 7d Data Ascii: &(n.has(t+1)?0===s.length&&(s.push(t),a+=f.BitLength.singleOrRange,a+=f.BitLength.vendorId):(s.push(t),a+=f.BitLength.vendorId,o.push(s),s=[]))}),r?(e+=y.VectorEncodingType.RANGE+"",e+=this.buildRangeEncoding(o)):(e+=y.VectorEncodingType.FIELD+"",e+=i),e}
2023-12-12 20:40:27 UTC	5183	IN	Data Raw: 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 28 72 3d 6e 2e 53 65 67 6d 65 6e 74 7c 7c 28 6e 2e 53 65 67 6d 65 6e 74 3d 7b 7d 29 29 2e 43 4f 52 45 3d 22 63 6f 72 65 22 2c 72 2e 56 45 4e 44 4f 52 53 5f 44 49 53 43 4c 4f 53 45 44 3d 22 76 65 6e 64 6f 72 73 44 69 73 63 6c 6f 73 65 64 22 2c 72 2e 56 45 4e 44 4f 52 53 5f 41 4c 4c 4f 57 45 44 3d 22 76 65 6e 64 6f 72 73 41 6c 6c 6f 77 65 64 22 2c 72 2e 50 55 42 4c 49 53 48 45 52 5f 54 43 3d 22 70 75 62 6c 69 73 68 65 72 54 43 22 7d 2c 7b 7d 5d 2c 33 39 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 Data Ascii: ,{value:!0}),(r=n.Segment\|\|(n.Segment={})).CORE="core",r.VENDORS_DISCLOSED="vendorsDisclosed",r.VENDORS_ALLOWED="vendorsAllowed",r.PUBLISHER_TC="publisherTC"},{}],39:[function(e,t,n){"use strict";var r;Object.defineProperty(n,"__esModule",{value:!0});var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.22	50538	52.20.2.200	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	585	OUT	GET /um/rc HTTP/1.1 Host: um4.eqads.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:27 UTC	404	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Expires: 0 Location: https://pixel.rubiconproject.com/tap.php?v=11598&nid=2494&put=f5bf0279-831a-45ce-b69f-6c6ce68dc2b9&expires=30 Set-Cookie: EQUser=UID=f5bf0279-831a-45ce-b69f-6c6ce68dc2b9; Path=/; Domain=eqads.com; Expires=Tue, 12 Mar 2024 20:40:26 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.22	50539	13.225.214.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	602	OUT	GET /sync?sm_p=rbc&sm_r=rbc HTTP/1.1 Host: cm.smadex.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:27 UTC	837	IN	HTTP/1.1 302 Found Transfer-Encoding: chunked Connection: close Date: Tue, 12 Dec 2023 20:40:26 GMT Location: https://pixel.rubiconproject.com/tap.php?v=71194&nid=3636&put=3cecf81f-1809-4369-945d-0344bbb506fb&expires=30 set-cookie: smxtrack=3cecf81f-1809-4369-945d-0344bbb506fb; Expires=Fri, 06 Dec 2024 20:40:26 GMT; Path=/; Domain=.smadex.com; SameSite=None; Secure; set-cookie: smxtrack=3cecf81f-1809-4369-945d-0344bbb506fb; Expires=Fri, 06 Dec 2024 20:40:26 GMT; Path=/; Domain=.smadex.com; SameSite=None; Secure; set-cookie: smxrbc=1; Expires=Thu, 11 Jan 2024 20:40:26 GMT; Path=/; Domain=.smadex.com; SameSite=None; Secure; X-Cache: Miss from cloudfront Via: 1.1 aaf8cf6e639b571d00317b950854b0bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR50-C1 X-Amz-Cf-Id: lP8jB9nB6TAmTywMQWsA89EDsDMJBVDz9t9xeNo43SObRH4lOkuLMw==
2023-12-12 20:40:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.22	50536	51.222.39.186	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	596	OUT	GET /match/?int_id=4 HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:27 UTC	366	IN	HTTP/1.1 302 Found p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache location: https://pixel.rubiconproject.com/tap.php?v=223352&nid=4584&put= content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.22	50541	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	731	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=FB697C20CE040E9A
2023-12-12 20:40:27 UTC	581	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 15 Set-Cookie: SEUNCY=FB697C20CE040E9A; Expires=Wed, 11 Dec 2024 20:40:26 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2023-12-12 20:40:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.22	50542	8.28.7.83	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	3439	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; SPugT=1702413621; KRTBCOOKIE_1323=23480-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23485-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23524-OPUb5d1f3b8746f478f8bbe11a7db7b8734; KRTBCOOKIE_27=16735-uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab; KRTBCOOKIE_904=16787-lD1EGcujD9GlzdZxN8V4ZQ; KRTBCOOKIE_594=17105-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005&KRTB&17107-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; PugT=1702379144
2023-12-12 20:40:27 UTC	663	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:26 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_594=17105-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005&KRTB&17107-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; domain=pubmatic.com; SameSite=None; secure; expires=Mon, 11-Mar-2024 20:40:26 GMT; path=/ Set-Cookie: PugT=1702413626; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:26 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.22	50544	34.96.71.22	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	591	OUT	GET /s/rp HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:27 UTC	665	IN	HTTP/1.1 302 Found Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: *.rubiconproject.com Content-Type: text/html; charset=utf-8 Location: https://pixel.rubiconproject.com/tap.php?v=1181926&nid=5578&put=0a924a42-5e5c-4ca8-8fbf-1a43c456aedd Set-Cookie: tuuid=0a924a42-5e5c-4ca8-8fbf-1a43c456aedd; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1702413627\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Tue, 12 Dec 2023 20:40:27 GMT Content-Length: 131 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:27 UTC	131	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 31 31 38 31 39 32 36 26 61 6d 70 3b 6e 69 64 3d 35 35 37 38 26 61 6d 70 3b 70 75 74 3d 30 61 39 32 34 61 34 32 2d 35 65 35 63 2d 34 63 61 38 2d 38 66 62 66 2d 31 61 34 33 63 34 35 36 61 65 64 64 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pixel.rubiconproject.com/tap.php?v=1181926&nid=5578&put=0a924a42-5e5c-4ca8-8fbf-1a43c456aedd">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.22	50540	143.244.208.184	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	624	OUT	GET /ccm/729e4e94-63c3-438d-8ce4-184eb34e703f HTTP/1.1 Host: sid.storygize.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:27 UTC	399	IN	HTTP/1.1 302 Found location: /csr?r=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D1172318%26nid%3D5570%26put%3D2b132d12-3c69-4bff-8847-562869ba9a5a content-length: 0 set-cookie: U=2b132d12-3c69-4bff-8847-562869ba9a5a; Max-Age=63072000; Expires=Thu, 11 Dec 2025 20:40:27 GMT; Path=/; Domain=.storygize.net; SameSite=None; Secure date: Tue, 12 Dec 2023 20:40:27 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.22	50543	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:26 UTC	738	OUT	GET /match?gdpr=0&gdpr_consent=&p=M1717054901&uid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=ghhhlLKf8OmTjCq1x-ObVM1mw!20220908!1702413501136!ip#102.129.152.212
2023-12-12 20:40:27 UTC	823	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:27 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=ar101281&google_hm=Z2hoaGxMS2Y4T21UakNxMXgtT2JWTTFtdw==&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%253D%253D%26gdpr%3D0%26gdpr_consent%3D Server: nginx/1.22.1 Set-Cookie: arcki2_pubmatic=AE4A8C3D-1096-459A-B091-2BADD5009F52!20220908!1702413627373; Max-Age=1296000; Expires=Wed, 27 Dec 2023 20:40:27 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.22	50547	172.67.13.182	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	859	OUT	GET /?zdid=1332&zcluid=95cb27def9651c04 HTTP/1.1 Host: spl.zeotap.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=d42897f0-a063-4fda-61c7-d26e083018c0; zsc=a%B7%E6X%17%87g%A94%D2G2c%06%FFP%24%DE4%CE%15%C2.%95%3FN%C3w%81%09b%BA%C8N%5CF%E4%E6%C8%80%C8%1Fyj%1E%17%C0%89M%5D%2C%97%82%01%95%1F4%5E%CB%B3%A7%F6%FAX%06%9EO%A4e%EB%E9%9C%23~%A3%7Cs%DF%ADb3%5DK
2023-12-12 20:40:27 UTC	867	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:27 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://ads.pubmatic.com set-cookie: zc=d42897f0-a063-4fda-61c7-d26e083018c0; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure set-cookie: zsc=%5D%06-%EF%F0%02%7C%BA%D7%3A%2B%9A2%98f%9F.B%15%88%CF%BF%E5%99%24%09%06%AE%15%13%28%E7c%17%AFf%95%23%A0L%E3%D0L%D4%12.Md%A5%9CZ%B3%E1%5EjU%A1C%83%BBT%92-%D7%C9Ai%85%05%9A%84%ED%8B%E3%F6%B1Z%F2-D%D1%21R; Path=/; Domain=.zeotap.com; Max-Age=86400; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8348c8524e5ddb2d-MIA
2023-12-12 20:40:27 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.22	50546	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	872	OUT	GET /pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=d42897f0-a063-4fda-61c7-d26e083018c0&reqId=5fbdcb44-72f5-48d1-760d-8a08aed6c5f8&zcluid=872da16551953746&zdid=1332 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:27 UTC	810	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://mwzeom.zeotap.com/mw?google_gid=CAESEEXGtlFexyf217S5NTCGoG0&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=d42897f0-a063-4fda-61c7-d26e083018c0&reqId=5fbdcb44-72f5-48d1-760d-8a08aed6c5f8&zcluid=872da16551953746&zdid=1332 Date: Tue, 12 Dec 2023 20:40:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 469 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:27 UTC	442	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 77 7a 65 6f 6d 2e 7a 65 6f 74 61 70 2e 63 6f 6d 2f 6d 77 3f 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 45 58 47 74 6c 46 65 78 79 66 32 31 37 53 35 4e 54 43 47 6f 47 30 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 26 61 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://mwzeom.zeotap.com/mw?google_gid=CAESEEXGtlFexyf217S5NTCGoG0&google_cver=1&a
2023-12-12 20:40:27 UTC	27	IN	Data Raw: 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.22	50548	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	920	OUT	GET /pixel?google_nid=ar101281&google_hm=Z2hoaGxMS2Y4T21UakNxMXgtT2JWTTFtdw==&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%253D%253D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:27 UTC	704	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%3D%3D&gdpr=0&gdpr_consent= Date: Tue, 12 Dec 2023 20:40:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 339 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:27 UTC	339	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 64 64 70 3f 72 65 64 3d 65 79 4a 31 49 6a 6f 69 61 48 52 30 63 48 4d 36 4c 79 39 68 4c 6d 46 31 5a 48 4a 30 5a 53 35 6a 62 32 30 36 4e 44 51 7a 4c 33 41 69 4c 43 4a 6b 49 6a 70 62 65 79 4a 75 59 57 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.22	50551	18.173.219.84	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	881	OUT	GET /b?c1=2&c2=27053452&cs_it=b8&cv=4.0.0%2B2301240627&ns__t=1702413623594&ns_c=UTF-8&c7=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&c8=Polynomial%20Root-finding%20with%20the%20Jenkins-Traub%20Algorithm&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=199cfdd76753ef1245eedde1702413613
2023-12-12 20:40:27 UTC	457	IN	HTTP/1.1 204 No Content Connection: close Date: Tue, 12 Dec 2023 20:40:27 GMT set-cookie: UID=199cfdd76753ef1245eedde1702413613; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 73c72f4ba985fa512968a14b5bd2f576.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P1 X-Amz-Cf-Id: ExMtvQXWzCB20ypOLoVz1kTPWO3h3QBDd-OmuVu1d0yalYCrnBWWNw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.22	50545	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	847	OUT	GET /ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=ghhhlLKf8OmTjCq1x-ObVM1mw!20220908!1702413501136!ip#102.129.152.212; arcki2_pubmatic=AE4A8C3D-1096-459A-B091-2BADD5009F52!20220908!1702413626157
2023-12-12 20:40:27 UTC	672	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:27 GMT Location: https://dmp.adform.net/serving/cookie/match/?party=1003&r=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbXX0%3D&gdpr=0&gdpr_consent= Server: nginx/1.22.1 Set-Cookie: arcki2_ddp2=ghhhlLKf8OmTjCq1x-ObVM1mw!20220908!1702413627608; Max-Age=1296000; Expires=Wed, 27 Dec 2023 20:40:27 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.22	50549	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	700	OUT	GET /sync?dsp_id=452&ssp=themediagrid&user_id= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501
2023-12-12 20:40:27 UTC	187	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2023-12-12 20:40:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.22	50553	52.205.232.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	701	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-fhwftuctXCl5NbsUxOmWvuZclHy6ltjSMWIT1w HTTP/1.1 Host: i6.liadm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=83a0af49-8fc8-48d1-8f90-ce801edd9fe1
2023-12-12 20:40:27 UTC	226	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-12 20:40:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.22	50554	141.94.171.215	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	724	OUT	GET /?partner=104&icm&cver&mapped=a31bb17c5a71a653e40698b548c9c280&gdpr=0 HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: done_redirects104=1; done_redirects219=1; cookie=95cb27def9651c04
2023-12-12 20:40:27 UTC	438	IN	HTTP/1.1 302 Found set-cookie: cookie=95cb27def9651c04; Max-Age=31536000; Expires=Wed, 11 Dec 2024 20:40:27 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects147=1; Max-Age=86400; Expires=Wed, 13 Dec 2023 20:40:27 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.22	50557	34.102.243.38	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	1616	OUT	GET /tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%220.1.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Education%22%2C%22subcategory%22%3A%22Education%22%7D HTTP/1.1 Host: feed.pghub.io Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:27 UTC	1244	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:27 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Location: https://pandg.tapad.com/tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%220.1.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Education%22%2C%22subcategory%22%3A%22Education%22%7D Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.22	50556	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	731	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=E5721A91FA508ECA
2023-12-12 20:40:27 UTC	581	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 14 Set-Cookie: SEUNCY=E5721A91FA508ECA; Expires=Wed, 11 Dec 2024 20:40:27 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Tue, 12 Dec 2023 20:40:27 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2023-12-12 20:40:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.22	50558	142.250.189.132	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	758	OUT	GET /ads/measurement/l?ebcid=ALh7CaTsOx4dEkZAlPoFZTyLGLIxD43lnwnmKqg2JfEiyC4K9nLqwN6OmKqKgR8SbT8piZX6f7Bk61xyRtn3h_C6_Qnm6v1TjA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:27 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 12 Dec 2023 20:40:27 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.22	50164	162.248.18.37	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	3128	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=7558899468789434902&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; SPugT=1702413621; KRTBCOOKIE_1323=23480-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23485-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23524-OPUb5d1f3b8746f478f8bbe11a7db7b8734; KRTBCOOKIE_27=16735-uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab; KRTBCOOKIE_904=16787-lD1EGcujD9GlzdZxN8V4ZQ; KRTBCOOKIE_594=17105-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005&KRTB&17107-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; PugT=1702413626
2023-12-12 20:40:28 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:27 GMT; path=/ Set-Cookie: PugT=1702413627; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:27 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:28 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.22	50559	50.19.110.114	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:27 UTC	830	OUT	GET /pdmp/b4/v2/pixel.gif?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&ref=&tref=&tz=-1&screen=1280x1024x24&dcRegion=us-east-1&cmpstatus=notrequired&e=%5B%5D&fpid=223e362f-211b-485a-8f8e-b769f2bcebb9 HTTP/1.1 Host: pdmp.tagger.opecloud.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:28 UTC	202	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:27 GMT Content-Type: image/gif Content-Length: 35 Connection: close Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate
2023-12-12 20:40:28 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.22	50565	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:28 UTC	469	OUT	GET /usersync?b=sta&i=0-187fc9bc-38fc-5637-6fac-194e6af1e6a7$ip$102.129.152.212 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:28 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:28 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:28 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.22	50567	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	1395	OUT	GET /usersync/redirect?partner=pubmatic&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2023-12-12 20:40:29 UTC	239	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.22	50562	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	448	OUT	GET /usersync?b=opx&i=293b2f42-092f-04b7-0a33-f4e4b96c0202 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:29 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:29 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.22	50561	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	452	OUT	GET /usersync?b=oth&i=y-i5Vemz9E2pcAB3qsj5sq4a92wTUal4GhEbBQ~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:29 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:29 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.22	50571	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	514	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=90&external_user_id=2638779048715878353 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:29 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.22	50566	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	436	OUT	GET /usersync?b=dit&i=di_1296d48b0e654caba2d72 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:29 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:29 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.22	50570	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	2188	OUT	GET /merge?pid=86&3pid=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=sovrn&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; _ljtrtb_80=LQ2T1KDU-17-IBG6; _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; _ljtrtb_49=4trFhcvjylTg; _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW
2023-12-12 20:40:29 UTC	4194	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:29 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_49=4trFhcvjylTg; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.22	50612	162.248.18.37	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	3096	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=8152669554817989381 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; SPugT=1702413621; KRTBCOOKIE_1323=23480-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23485-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23524-OPUb5d1f3b8746f478f8bbe11a7db7b8734; KRTBCOOKIE_27=16735-uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab; KRTBCOOKIE_904=16787-lD1EGcujD9GlzdZxN8V4ZQ; KRTBCOOKIE_594=17105-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005&KRTB&17107-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; PugT=1702413626
2023-12-12 20:40:29 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:28 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:28 GMT; path=/ Set-Cookie: PugT=1702413628; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 20:40:28 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-12 20:40:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.22	50569	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	448	OUT	GET /usersync?b=vnt&i=8a323469-881a-408a-9858-5975924b765a HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b
2023-12-12 20:40:29 UTC	210	IN	HTTP/1.1 200 Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2023-12-12 20:40:29 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.22	50580	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	404	OUT	GET /avatar/f7f6fb5e9a83603612b1e39a984cb981?s=100&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:29 UTC	461	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/png Content-Length: 5399 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/f7f6fb5e9a83603612b1e39a984cb981?s=100&d=identicon&r=g>; rel="canonical" Access-Control-Allow-Origin: * Expires: Tue, 12 Dec 2023 20:45:29 GMT Cache-Control: max-age=300 X-nc: HIT mia 1 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2023-12-12 20:40:29 UTC	908	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 14 c9 49 44 41 54 78 9c dd 5d 79 70 13 57 9a ff 75 ab 75 b5 4f 39 86 29 c2 a4 76 13 4c 36 01 9c 40 0c a9 c9 c1 91 0c 21 09 39 30 0c 16 e0 61 92 60 02 18 b0 37 3b 3b a9 90 25 dc 24 ce d4 d4 d4 56 cd e2 70 1f 93 09 0b d8 49 c5 e1 88 19 98 22 31 a1 2a b5 33 c6 b3 a9 32 50 9b c5 ec 91 d9 24 35 5c 96 64 5b 92 65 a9 df fe 21 3f b9 d5 ea e3 b5 d4 12 c7 ef 3f f5 f1 ba d5 5f 7f ef 7b df f7 7e fd 7b dc 27 c1 7d 64 96 fb 15 64 0b 97 a2 17 d0 15 3d 87 8f 83 bb 71 59 fa ce f2 f6 f3 b8 02 cc 74 57 03 00 5a 43 07 d0 47 7a 2c bf c6 70 fe 4e cc 11 5f 45 99 30 0e a3 84 31 96 b7 4f 71 38 f4 5b 70 2f 5f 9b 4c Data Ascii: PNGIHDRddpTpHYs+IDATx]ypWuuO9)vL6@!90a`7;;%$VpI"1*32P$5\d[e!??_{~{'}dd=qYtWZCGz,pN_E01Oq8[p/_L
2023-12-12 20:40:29 UTC	1369	IN	Data Raw: 92 78 ec f8 82 f1 68 82 ae e8 05 34 07 b7 a3 23 72 1a 12 a4 94 b6 1a 02 75 18 2d 94 a3 4a 5c 86 0a c7 14 f0 c9 ef 90 21 24 48 e8 88 7c 81 0f 83 3b 52 de 6a 6a a4 8e c8 17 a8 70 4c 85 57 ac 45 99 30 06 2c c3 da 8e c8 17 19 c7 92 93 e1 66 f8 a4 6b 49 db 12 31 84 a2 90 f7 60 87 e7 24 5c 9c 3b ad 8b c8 63 07 85 5a 0c b9 14 bd 80 a6 e0 56 9c 8d 9c 06 01 49 d9 af 86 32 61 1c bc 62 2d 26 39 a6 31 1d df 1e 69 43 73 70 3b b3 07 70 e0 30 d1 31 15 f3 c4 15 aa 09 20 8d 21 14 99 c4 92 30 09 61 59 f7 0c 04 a4 ee a4 ed 82 f2 c0 80 d4 8d 13 e1 a6 b4 bc e4 52 f4 42 8a 31 94 e8 8a 9e 43 73 70 bb e1 71 5a e7 36 04 ea 30 4a 18 83 79 e2 0a 4c 74 4c 05 a7 78 9b 09 08 ce 46 4e a3 29 b8 15 97 a2 17 4c b5 4f 40 d0 1e 69 43 7b a4 0d 93 1c d3 06 3d 46 db 03 da 23 6d b8 14 bd 90 56 Data Ascii: xh4#ru-J\!$H\|;RjjpLWE0,fkI1`$\;cZVI2ab-&91iCsp;p01 !0aYRB1CspqZ60JyLtLxFN)LO@iC{=F#mV
2023-12-12 20:40:29 UTC	1369	IN	Data Raw: 3e 21 84 f4 48 7e d2 d4 b7 8d 44 49 34 2b ed c7 48 8c 9c 0a b5 90 25 d7 a6 93 f3 91 b3 a6 ce 65 f2 10 b5 cc 9a 25 63 36 0b 09 31 6c e9 59 8b b6 fe 23 18 2d 94 63 5d d1 0e c3 79 0c b3 e8 25 01 6c f2 2f c3 c5 68 27 a6 39 5f 44 7d c1 66 4b ef 5f 59 21 e0 61 d3 cd fc 95 d0 31 08 5b 66 9d 09 89 2d f9 cf 48 d8 d2 f3 16 da fa 8f 26 b6 95 09 e3 b0 a1 68 17 f2 b8 82 b4 db 95 a3 8f f4 60 83 7f 49 52 f2 38 cd f9 02 ea 0b de c9 f8 de 8d 2a 04 f1 5a 99 31 19 4f d5 20 b9 20 b1 c9 11 37 c6 1a b4 f5 1f 49 d9 37 5a 28 c7 fa a2 9d 19 1b a5 8f f4 60 a3 7f a9 ea 03 8b 7b ca db 69 19 c5 6a 32 5e 92 41 32 21 b1 51 98 2d 97 c7 bb a9 35 49 9e a1 44 99 30 0e eb 8b 76 a6 dd 7d f5 92 00 36 fa 97 ea 3e b4 b8 a7 bc cd d4 7d 65 42 c6 93 43 ad ec cf 11 42 48 b6 49 6c 5a 6f 5e 0c 31 34 Data Ascii: >!H~DI4+H%e%c61lY#-c]y%l/h'9_D}fK_Y!a1[f-H&h`IR8*Z1O 7I7Z(`{ij2^A2!Q-5ID0v}6>}eBCBHIlZo^14
2023-12-12 20:40:29 UTC	1369	IN	Data Raw: 26 f1 c7 81 43 01 5f ac fa b6 6b 41 ef d9 aa 7a 88 93 73 63 81 c8 26 8b 41 31 c5 39 13 a3 4c 8a d4 cf 74 57 6b 4e d4 28 e1 e1 87 e1 67 79 3f 37 d5 3e 00 fc 2c ef e7 f0 30 0a ea 8c 16 ca 13 4b 5f b0 62 94 30 16 53 9c 33 4d 9d b3 40 ac 83 53 43 f5 55 53 51 ee 29 d7 5c 66 ed 0f 07 e7 44 a5 bb 46 f3 cd d2 42 3e 57 88 75 45 3b 0c af 13 27 ca ed 49 6b 9e fd 2e db 28 6c 2a da 03 0f 5f aa 7b 5c 99 30 2e 2d 06 8a 57 ac 45 a5 bb 86 59 51 a8 4c 18 87 a7 5c 73 35 15 e5 52 0c e2 e0 9c a8 72 2f d3 95 ec 53 82 0a d7 4c 72 4c 33 2d 99 9a cf 15 62 43 d1 2e 4d 4f 89 13 e5 f6 65 44 07 fa a1 ed 1e 6c 2e da a7 e9 29 a3 85 72 6c 28 da 65 da 18 a3 84 31 98 e4 98 96 10 90 61 01 15 ae a9 72 2f 53 35 a2 ae a2 5c 85 63 b2 61 97 e2 e4 dc 78 d1 fd 52 e2 37 8b a2 9c 12 79 5c 01 d6 17 Data Ascii: &C_kAzsc&A19LtWkN(gy?7>,0K_b0S3M@SCUSQ)\fDFB>WuE;'Ik.(l*_{\0.-WEYQL\s5Rr/SLrL3-bC.MOeDl.)rl(e1ar/S5\caxR7y\
2023-12-12 20:40:29 UTC	384	IN	Data Raw: 1e 69 c3 2a 5f 35 6a bb 9f 41 43 a0 de 94 1c b9 a1 41 e8 ba 81 af fb bc 68 8f b4 81 80 a8 6e 63 81 1e 19 ef 41 fb 23 29 5e a2 47 c6 d3 a2 ac ea b1 3c d4 82 f5 7d f6 f1 78 d0 fe 88 ea f1 66 06 04 04 04 ed 91 36 bc ee f3 a2 21 50 87 ae e8 39 d5 6d 46 d0 34 c8 c5 68 27 1a 02 75 ba de 40 bd e6 0d df 7c b4 47 3e d7 ed ca 58 c8 78 0b c4 ba a4 87 69 44 c6 7b d0 fe 08 c6 da 27 26 7e 8f b5 4f d4 7c b8 40 6a b0 e6 c0 19 7e 98 64 34 20 88 af 10 fa 39 de f0 cd d7 f5 06 ea 35 0d 81 3a dd b9 fc 14 83 d0 b7 ff 4d df 42 b4 47 da 18 e2 c5 d0 b2 a8 d4 78 6a 65 71 16 32 de 03 f6 1f e1 7e fb 43 00 d8 c8 78 71 2f 19 1a 36 7b 55 62 87 12 f2 60 7d bf fd 21 3c 60 ff 91 ee f1 5a 03 02 ba 22 68 fc 21 d7 0f ae 1f af df 53 d0 e5 5d df f4 2d d4 f4 98 c1 5a 56 76 97 45 35 b3 bc eb 3c Data Ascii: i*_5jACAhncA#)^G<}xf6!P9mF4h'u@\|G>XxiD{'&~O\|@j~d4 95:MBGxjeq2~Cxq/6{Ub`}!<`Z"h!S]-ZVvE5<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.22	50586	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	403	OUT	GET /avatar/2dba0e1f37c50ff66849dc68c4e4816a?s=80&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:29 UTC	460	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/png Content-Length: 1348 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/2dba0e1f37c50ff66849dc68c4e4816a?s=80&d=identicon&r=g>; rel="canonical" Access-Control-Allow-Origin: * Expires: Tue, 12 Dec 2023 20:45:29 GMT Cache-Control: max-age=300 X-nc: HIT mia 1 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2023-12-12 20:40:29 UTC	909	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 f6 49 44 41 54 78 9c ed 9c 3d 6e 1b 31 10 85 1f 85 05 e4 22 ee 04 15 86 9a 24 45 0c b8 c9 15 74 0e b5 29 e3 22 17 70 e1 2b 38 65 5a 9d c3 57 48 63 c0 69 9c 46 50 21 b8 73 0a 09 30 c0 14 c2 c8 b2 bc 5c 3e 92 b3 5c ca d2 ab 0c 99 d8 a5 3e f1 6f e6 91 34 d6 5a 0b 42 57 f6 1e 73 2c bd e5 7e 99 af de 32 b7 78 c4 d4 ce bc e5 2e 70 0a 00 b8 c3 93 b7 ec c4 8c 30 c6 c0 5b ee 9b fd ed 2d 73 86 13 5c 9b 73 6f 39 00 e8 51 a5 14 15 02 ef d2 7c c2 a5 f9 b4 01 d9 a4 a9 9d e1 16 8f 1a 55 0c 52 56 80 a1 f0 2a 18 54 30 45 43 cc 06 30 06 9e a8 64 88 59 00 a6 c0 13 95 0a 31 0b c0 b9 f5 4f 3e 4d f0 44 21 10 Data Ascii: PNGIHDRPPpHYs+IDATx=n1"$Et)"p+8eZWHciFP!s0\>\>o4ZBWs,~2x.p0[-s\so9Q\|URV*T0EC0dY1O>MD!
2023-12-12 20:40:29 UTC	439	IN	Data Raw: c4 13 f1 29 c8 13 a9 11 03 65 6e 97 54 8a 6b 8c 01 7a ec 41 c0 36 67 ba 18 4f a4 69 8b 9a c6 0a 81 3d d0 d8 03 78 13 bd 0d 88 25 79 22 db 43 0d 6b b6 6f 26 11 d6 44 d7 84 58 92 27 52 37 4e 33 66 fb 9b 1d aa 53 3b a3 4c f4 94 2d b3 13 33 52 f1 44 80 97 2f 99 e2 89 f8 26 39 f9 b1 ea cc f6 da 2d be ac d7 91 02 51 cb 13 49 7d 16 bb 8c 72 31 a1 f6 48 37 a9 ab eb 46 34 a4 11 52 26 ef d2 4f 19 13 bb 94 56 3c ae 72 cc 61 df 20 6a 26 33 d4 ce 89 ec 0b 44 ed 4c 50 c5 dc 25 05 70 27 bd 25 84 ea e2 e8 3d a3 a9 9d d1 75 63 b9 74 76 52 29 b7 da 9a ec 3a 3d 2b 97 4b 7b 75 56 4e 54 0a c4 bd 3c ad 29 ea 1a e2 5e 9f 17 16 69 7b 2c a9 1e 86 b6 b2 5c bc a3 e5 b1 68 78 18 da 2a ee d6 0e 57 39 2d 0f 43 5b 45 de 1b b3 fb b9 a6 87 a1 ad ec 77 67 c5 78 2c 9a 1e 86 b6 e8 6c cc 4f Data Ascii: )enTkzA6gOi=x%y"Cko&DX'R7N3fS;L-3RD/&9-QI}r1H7F4R&OV<ra j&3DLP%p'%=uctvR):=+K{uVNT<)^i{,\hx*W9-C[Ewgx,lO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.22	50620	104.18.24.173	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	1106	OUT	GET /i.match?p=b6&u=CAESEHCCewI25ZU6x_gSD7iZ3Og&google_cver=1&google_push=AXcoOmS8U-mCw4GwijVyuN3KkrhhTJLkufULnCgFPEKiy10x4o2QDq1c4gk6dLWBJB_2Va8eYLsISoBbOQtab6dUFFJjbZbRfCm-&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmS8U-mCw4GwijVyuN3KkrhhTJLkufULnCgFPEKiy10x4o2QDq1c4gk6dLWBJB_2Va8eYLsISoBbOQtab6dUFFJjbZbRfCm-%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID_old=avnxY1tMPmFUTgUpyTVoqR4CLx92iB4gZcZcKmAyQjr9qFnhW7JhytAS1dE9Vb7FWslB5oPUXl5vVTtTETuJpjisGRRiBLbf5OeGeD5REjNXN9iXehpEMXUbWS38AW3pZdFUVG4Iso4; ANON_ID=aMnOnIR3YWj7UXuRudrpeW3sZd3ZaZaEDUMc996ZaVPNF05HAA5CvWXsu41TMg3VbGZbrVOVtCxta6WHZd1eiDb7iRlLjxRvjG60oWyuwOrZcW38a0PFwqR5YZcs5gICU4csZcyah5gNYDc8cpcCIo2rqAp8uWU3YLBhIZcZcWEaXGReiy0CZcQD
2023-12-12 20:40:29 UTC	979	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=afnNBGmge06ousnA6yvPB9Toh9eOUPPNsZbeSqwY4aAWaUQ0nUFSc06xAACU52tkEJNUojWTnstZcIHHPbK9ZaDTZbwv8133uevEEhtFTAb796D3UyVlUZct7s4yNPi8Zc0EqG4vTO35Y6ZcE6ZaoELwN4QEpVRZaWYBaeFwPbU2GvOYg8ets; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:20 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=afnNBGmge06ousnA6yvPB9Toh9eOUPPNsZbeSqwY4aAWaUQ0nUFSc06xAACU52tkEJNUojWTnstZcIHHPbK9ZaDTZbwv8133uevEEhtFTAb796D3UyVlUZct7s4yNPi8Zc0EqG4vTO35Y6ZcE6ZaoELwN4QEpVRZaWYBaeFwPbU2GvOYg8ets; path=/; domain=.tribalfusion.com; expires=Mon, 11-Mar-2024 20:40:20 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8348c85f58ba2583-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.22	50630	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	920	OUT	GET /pixel?google_nid=ar101281&google_hm=Z2hoaGxMS2Y4T21UakNxMXgtT2JWTTFtdw==&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%253D%253D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:29 UTC	704	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%3D%3D&gdpr=0&gdpr_consent= Date: Tue, 12 Dec 2023 20:40:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 339 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	339	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 64 64 70 3f 72 65 64 3d 65 79 4a 31 49 6a 6f 69 61 48 52 30 63 48 4d 36 4c 79 39 68 4c 6d 46 31 5a 48 4a 30 5a 53 35 6a 62 32 30 36 4e 44 51 7a 4c 33 41 69 4c 43 4a 6b 49 6a 70 62 65 79 4a 75 59 57 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.22	50564	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	524	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=2&external_user_id=ZXjEurXK3YbtORulaCkY0QAA%26633 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:29 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.22	50573	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	454	OUT	GET /xuid?mid=2662&xuid=y-JtLdWKpE2oRwLcdqEbEx_EYBPzStLf6GdRvCJtyUOA--~A&dongle=0883 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:29 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:29 GMT; Secure; SameSite=None
2023-12-12 20:40:29 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.22	50592	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	468	OUT	GET /xuid?mid=5989&xuid=CAESELGMgy-6umwNbd3_g9x-rnA&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:29 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:29 GMT; Secure; SameSite=None
2023-12-12 20:40:29 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.22	50608	74.119.119.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	758	OUT	GET /sid/json?origin=publishertagids&domain=mathblog.com&sn=ChromeSyncframe&so=3&topUrl=mathblog.com&bundle=onR1gl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkxFZWp5Sjh0THdhV3h6Z09Lalc5T1V3cSUyRkRvanhXekdLTGJCS1F4THRWcTdHZTBUQnlEZUlqeDhaZEdGJTJCcm1NRnVjUWM5Vko2elZzRzI0dGlnalduWVpUYUVlelR5JTJGRGVPZWhGNm5uMmFsVmpBZ2JFWEtWNXRudE9BJTJCemxDOHl3JTNEJTNE&cw=1&lsw=1&topicsavail=0&fledgeavail=0 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:29 UTC	350	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:40:28 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 1184458 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:40:29 UTC	440	IN	Data Raw: 31 41 43 0d 0a 7b 22 73 69 64 22 3a 6e 75 6c 6c 2c 22 72 65 6d 6f 76 65 53 69 64 22 3a 66 61 6c 73 65 2c 22 62 75 6e 64 6c 65 22 3a 22 44 46 4b 4b 6b 6c 39 6c 52 57 56 59 52 6a 46 4d 55 44 42 5a 61 53 55 79 52 6c 42 6f 56 55 78 53 52 47 31 6a 56 6b 63 78 4e 58 42 59 4e 6b 64 75 52 6a 46 34 51 6b 46 57 61 30 5a 54 61 44 68 79 62 46 5a 73 5a 7a 4a 4b 59 6d 31 70 61 32 56 51 51 31 56 48 63 45 52 6e 4d 31 4a 48 5a 44 5a 72 57 57 78 70 4d 55 30 6c 4d 6b 59 35 4d 31 42 36 55 46 52 33 54 6a 46 59 61 33 5a 57 4e 48 4a 77 56 45 6c 73 54 31 4a 58 53 47 63 6c 4d 6b 4a 6a 52 32 63 7a 57 58 70 79 4d 48 6f 32 53 7a 5a 4a 52 6d 74 4f 5a 30 35 69 4d 6b 4a 48 63 7a 56 52 5a 56 6c 53 4f 57 77 31 4a 54 4a 43 53 6c 70 51 59 6b 31 53 55 47 56 6c 63 48 64 42 54 45 78 4e 52 30 Data Ascii: 1AC{"sid":null,"removeSid":false,"bundle":"DFKKkl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkcxNXBYNkduRjF4QkFWa0ZTaDhybFZsZzJKYm1pa2VQQ1VHcERnM1JHZDZrWWxpMU0lMkY5M1B6UFR3TjFYa3ZWNHJwVElsT1JXSGclMkJjR2czWXpyMHo2SzZJRmtOZ05iMkJHczVRZVlSOWw1JTJCSlpQYk1SUGVlcHdBTExNR0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.22	50654	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	547	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:29 UTC	1095	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sat, 10 Feb 2024 20:40:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.22	50609	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	611	OUT	GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzU3MTA2MjgxNjQ1MzYxMjQ5OTU2Ng%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:29 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.22	50560	141.95.98.64	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	590	OUT	GET /i/175/9.gif HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:30 UTC	1267	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: id5=f6e1082c-305b-74e6-bd6f-d40929c649ba#1702413629432#1; Max-Age=300; Expires=Tue, 12-Dec-2023 20:45:29 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://id5-sync.com/c/175/0/2/1.gif?gdpr=0&gdpr_consent=&us_privacy= transfer-encoding: chunked date: Tue, 12 Dec 2023 20:40:28 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2023-12-12 20:40:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.22	50575	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	463	OUT	GET /xuid?mid=3658&xuid=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:30 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:29 GMT; Secure; SameSite=None
2023-12-12 20:40:30 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.22	50585	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	619	OUT	GET /w/1.0/sd?id=537146931&val=4c_dda4d101-97ce-4817-beb8-0a826215ec0d HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3.9\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg.wswcsTwgw7wHlkwB
2023-12-12 20:40:29 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.22	50594	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	615	OUT	GET /w/1.0/sd?id=540290843&val=d6.c5bd044156be4b89a58d19d2b5fdecfd HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3.9\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg.wswcsTwgw7wHlkwB
2023-12-12 20:40:29 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.22	50568	52.223.40.198	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	830	OUT	GET /track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUSFAoFdGFwYWQSCwigurmDk9e9PBAFEhcKCGxpdmVyYW1wEgsI3vH5npPXvTwQBRgBIAEoAjILCKzo_Mup1708EAU4AVoIbGl2ZXJhbXBgAg..
2023-12-12 20:40:29 UTC	638	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Length: 261 Connection: close server: Kestrel location: https://pixel.onaudience.com/?partner=147&mapped=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&icm&gdpr=0&gdpr_consent=&cver set-cookie: TDID=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; expires=Thu, 12 Dec 2024 20:40:29 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHc3Z4OXQ1MBILCIbU17aS1708EAUSFAoFdGFwYWQSCwigurmDk9e9PBAFEhcKCGxpdmVyYW1wEgsI3vH5npPXvTwQBRgBIAEoAjILCOiPlvSp1708EAU4AVoHeGtzdzlsYWAC; expires=Thu, 12 Dec 2024 20:40:29 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-12 20:40:29 UTC	261	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 31 34 37 26 6d 61 70 70 65 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 26 69 63 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 76 65 72 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 31 34 37 26 6d 61 70 70 65 64 3d 33 33 31 31 61 37 66 33 2d 63 34 34 63 2d 34 64 33 38 2d 38 31 39 36 2d 64 63 61 34 63 32 62 30 66 38 65 63 26 69 63 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 76 Data Ascii: Redirecting to: <a href="https://pixel.onaudience.com/?partner=147&mapped=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&icm&gdpr=0&gdpr_consent=&cver">https://pixel.onaudience.com/?partner=147&mapped=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&icm&gdpr=0&gdpr_consent=&cv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.22	50593	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	592	OUT	GET /w/1.0/sd?id=537123500&val=863968679737 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3.9\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg.wswcsTwgw7wHlkwB
2023-12-12 20:40:30 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.22	50604	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	639	OUT	GET /w/1.0/sd?id=537073053&val=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes&pi=openx&gdpr=0 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3.9\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg.wswcsTwgw7wHlkwB
2023-12-12 20:40:29 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.22	50577	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	403	OUT	GET /avatar/ba51f84bcae9a5f5db84699198452d64?s=80&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.22	50643	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	1507	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&ttd_puid=e31b8e0e-bea2-495f-8d27-c227ee82e054%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%2522%253A%252264%2522%252C%2522brands%2522%253A%255B%257B%2522brand%2522%253A%2522Not_A%2BBrand%2522%252C%2522version%2522%253A%252299%2522%257D%252C%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522109%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522109%2522%257D%255D%252C%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Not_A%2BBrand%2522%252C%2522version%2522%253A%252299.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522109.0.5414.120%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522109.0.5414.120%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%25220.1.0%2522%257D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:29 UTC	1101	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!8324;Expires=Sat, 10 Feb 2024 20:40:29 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.22	50600	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	2183	OUT	GET /merge?pid=26&3pid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; _ljtrtb_80=LQ2T1KDU-17-IBG6; _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; _ljtrtb_49=4trFhcvjylTg; _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW
2023-12-12 20:40:29 UTC	4187	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:29 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_49=4trFhcvjylTg; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.22	50588	52.71.16.59	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	588	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=AE4A8C3D-1096-459A-B091-2BADD5009F52&vxii_pid=12&vxii_pid1=10067&vxii_rcid=402a9937-9d5c-4b95-8106-4af28162991a HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6Ijk2MjI2MGFlLTIwMTctNDQ3OS04NGQyLWMyNjAxZmFhNjg3ZSIsImwiOjE3MDI0MTM2MjQzODUsInQiOjF9
2023-12-12 20:40:29 UTC	353	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6Ijk2MjI2MGFlLTIwMTctNDQ3OS04NGQyLWMyNjAxZmFhNjg3ZSIsImwiOjE3MDI0MTM2Mjk2NDAsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Sat, 29 Jun 2024 20:40:29 GMT; Secure; SameSite=None
2023-12-12 20:40:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.22	50631	38.98.69.175	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	491	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CA9_10D97F8E3_7A5609BE.1.6578C536000000006578C52E00000000000000006578C52700000000000000000000000000000000000000006578C52B
2023-12-12 20:40:30 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Tue, 12 Dec 2023 20:40:29 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-385418429; includeSubDomains
2023-12-12 20:40:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.22	50603	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	2138	OUT	GET /merge?pid=80&3pid=LQ2T1KDU-17-IBG6&gdpr=0 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; _ljtrtb_80=LQ2T1KDU-17-IBG6; _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; _ljtrtb_49=4trFhcvjylTg; _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW
2023-12-12 20:40:29 UTC	4167	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:29 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_49=4trFhcvjylTg; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:29 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.22	50655	18.215.67.38	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	421	OUT	GET /tag/?id=20909&user_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:29 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2023-12-12 20:40:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.22	50625	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	349	OUT	GET /dot.gif?gdpr=0 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:29 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 43 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 12 Dec 2023 03:23:43 GMT Expires: Wed, 13 Dec 2023 03:23:43 GMT Cache-Control: public, max-age=86400 Age: 62206 Last-Modified: Sun, 01 Feb 2009 08:00:00 GMT Content-Type: image/gif Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.22	50623	35.190.39.111	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	347	OUT	GET /encrypt HTTP/1.1 Host: esp.rtbhouse.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:29 UTC	311	IN	HTTP/1.1 405 Method Not Allowed content-type: application/json x-cloud-trace-context: a4bf7c6c92e451e6ced7db359b927ddc date: Tue, 12 Dec 2023 20:40:29 GMT server: Google Frontend Content-Length: 31 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.22	50619	18.164.124.115	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	653	OUT	GET /ct/cms-2-rubicon.min.js HTTP/1.1 Host: cti.w55c.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cti.w55c.net/ct/cms-2c-rubicon.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=ViN9mkBO1Rd9xZ5; matchopenx=5; matchpubmatic=5; matchgoogle=5; matchrubicon=5
2023-12-12 20:40:29 UTC	679	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7853 Connection: close Date: Thu, 07 Dec 2023 00:39:23 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 17 Sep 2021 21:17:39 GMT ETag: "d7ff0f4ef590b94bd79fc9b61a13ef4e" x-amz-version-id: 4wUy6FG8mI1tQq9b3POfj8uoA5V85xC6 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 edb4467fad6c19f876564012471f929a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: cE6nbw_NPCNSthpQNiSQRIbQc0kbh_0VnuitRepivce_qQcMxp0c4A== Age: 504067 Strict-Transport-Security: max-age=2592000; includeSubDomains Cache-Control: must-revalidate
2023-12-12 20:40:29 UTC	7853	IN	Data Raw: 76 61 72 20 44 41 54 41 58 55 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 22 77 66 69 76 65 66 69 76 65 63 22 2c 75 3d 22 6d 61 74 63 68 22 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 65 29 74 68 69 73 5b 63 5d 3d 65 5b 63 5d 3b 74 68 69 73 2e 65 78 63 6c 75 64 65 64 45 78 63 68 61 6e 67 65 73 3d 65 2e 65 78 63 6c 75 64 65 64 45 78 63 68 61 6e 67 65 73 7c 7c 5b 5d 2c 74 68 69 73 2e 65 78 63 6c 75 64 65 64 45 78 63 68 61 6e 67 65 73 2e 70 75 73 68 28 22 50 52 49 56 41 54 45 22 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 64 61 79 73 54 6f 4c 69 76 65 3a 33 30 7d 3b 76 61 72 20 73 3d 5b 6e 65 77 20 65 28 7b 76 65 6e 64 6f 72 5f 69 64 3a 30 2c 63 6f 6f 6b 69 65 53 75 66 66 69 78 3a 22 67 6f 6f 67 6c 65 22 Data Ascii: var DATAXU=function(){var c="wfivefivec",u="match",e=function(e){for(var c in e)this[c]=e[c];this.excludedExchanges=e.excludedExchanges\|\|[],this.excludedExchanges.push("PRIVATE")};e.prototype={daysToLive:30};var s=[new e({vendor_id:0,cookieSuffix:"google"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.22	50578	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	403	OUT	GET /avatar/8aa3206ec1e859b32f90e17f138f0450?s=80&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:29 UTC	539	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/png Content-Length: 12201 Connection: close Last-Modified: Fri, 07 Mar 2014 17:26:46 GMT Link: <https://gravatar.com/avatar/8aa3206ec1e859b32f90e17f138f0450?s=80&d=identicon&r=g>; rel="canonical" Content-Disposition: inline; filename="8aa3206ec1e859b32f90e17f138f0450.png" Access-Control-Allow-Origin: * Expires: Tue, 12 Dec 2023 20:45:29 GMT Cache-Control: max-age=300 X-nc: HIT mia 1 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2023-12-12 20:40:29 UTC	830	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 da 5d bc d9 af 65 59 72 de f7 8b b5 d6 de e7 9c 3b e4 cd a9 b2 06 16 bb d9 c5 16 87 26 5b 94 ba 41 da f4 04 01 96 01 59 36 0c 18 06 0c f8 c5 7e f2 df e3 67 bf da 06 08 01 84 24 43 80 20 40 30 04 8b a2 24 37 5b 1c ba c9 9e 87 1a ba 2a e7 bc c3 99 f6 de 6b ad 08 3f c4 da fb de ec 2c 24 b2 f2 d6 ad 73 cf 59 3b 56 c4 17 df f7 45 c8 0f ff e5 ff 6e 66 06 c0 fc 27 18 aa 4a 08 82 99 a1 ea ff 6d 1c 47 36 9b 35 a2 8a 99 d1 f7 2b f6 fb 3d 15 e3 78 28 a4 94 e8 3a 08 a6 58 30 08 1d 39 77 fc d1 1f fd 31 bf fe 9b bf ca ff f4 bf fc f7 dc 7f ef 11 5f fc f8 87 4c 37 d7 44 02 ef bf ff 3e Data Ascii: PNGIHDRPPpHYs+ IDATx]eYr;&[AY6~g$C @0$7[*k?,$sY;VEnf'JmG65+=x(:X09w1_L7D>
2023-12-12 20:40:29 UTC	1369	IN	Data Raw: bf 1c a0 5f d7 ea 3f 40 41 f0 03 54 ab 88 08 29 25 fa ae 03 ab 08 42 d7 77 3c 90 fb 18 81 61 18 10 11 ba ae 23 09 48 04 93 c4 7e a7 74 29 11 a3 a0 5a 31 ab 7e fd 24 12 52 84 10 c1 94 88 22 56 99 f2 c0 7e 38 50 62 64 ca 95 e7 97 5b ca ab 37 3c 7d 79 43 d0 8a 85 c8 37 37 0f 79 f7 03 23 c6 c8 66 bd 46 6b f5 07 6f 19 41 a8 f9 48 4a 42 c9 8a 6a 05 8c be ef 58 af d7 a4 94 08 c1 23 57 c4 a3 59 24 f8 03 35 3c 55 b4 52 70 b8 39 62 66 ac d7 6b 4a 29 64 2b a8 cd d1 58 30 53 d2 e5 e5 e5 f2 14 fc 00 b5 15 11 7f 12 a6 86 a2 c4 18 d9 ef f7 a4 2e 62 5a 08 41 e8 fb 15 37 37 37 04 e9 18 86 01 80 d5 6a 45 c4 90 00 2a 91 ed b6 50 6a 26 a5 40 ea 04 44 51 33 0c 41 09 54 13 4c 22 63 2e fc f0 67 3f e3 fb 3f fe 11 bb c3 91 ed ee 48 ad 95 f2 e2 15 b5 54 f6 bb 91 69 cc 9c 9e 6d f8 Data Ascii: _?@AT)%Bw<a#H~t)Z1~$R"V~8Pbd[7<}yC77y#fFkoAHJBjX#WY$5<URp9bfkJ)d+X0S.bZA777jE*Pj&@DQ3ATL"c.g??HTim
2023-12-12 20:40:29 UTC	1369	IN	Data Raw: 29 67 62 8c ad df 34 42 88 5c 5d ee 31 81 f5 7a c5 34 8e 7c fa f1 c7 1c 8e 47 30 63 9a 26 7f 9d d5 8a d8 41 ce 95 5c 0a 22 c2 f1 38 22 12 19 86 b1 01 5e a1 16 c3 2c 80 44 62 74 28 55 8a 27 76 31 25 4a c0 c4 f3 f6 76 b7 c7 aa 72 38 9b 88 5d c7 67 9f 7d ea b8 2f 24 04 cf 83 41 1a 1c 89 a1 81 e7 1e d5 42 4a 01 43 a9 a5 b2 b9 b7 21 b6 ee 26 48 d7 3a 80 da 5e cb 48 cf 9e 3e 45 82 a0 95 a5 a5 b2 3b 3d a2 00 54 25 ce 9d 48 d7 61 e6 c9 78 b5 5a 71 75 75 85 48 5c 0e a3 eb 3a 42 88 48 50 52 ec 78 f1 f2 25 41 84 94 3a 9e 3f 7f ce cb 97 2f 97 1c 94 52 42 44 28 0a c7 e1 d8 5a 47 41 44 e9 57 11 53 61 b5 ea 38 1c c2 12 f5 66 b4 7f af 54 35 94 4a 08 10 89 0d c7 19 42 20 1b ec 8f 23 d7 37 3b 24 76 7c f0 ab bf 4a c4 88 b1 c3 d4 73 bb 99 b5 56 b0 fa ed 53 a8 b5 80 54 4a c9 Data Ascii: )gb4B\]1z4\|G0c&A\"8"^,Dbt(U'v1%Jvr8]g}/$ABJC!&H:^H>E;=T%HaxZquuH\:BHPRx%A:?/RBD(ZGADWSa8fT5JB #7;$v\|JsVSTJ
2023-12-12 20:40:29 UTC	1369	IN	Data Raw: 7a fd 66 b9 9d 21 38 de f5 ff 07 b4 18 e9 d9 b3 17 a0 11 0b 3d d5 1c c4 86 d6 91 d0 0a 8b d6 ba 30 d2 9e 33 bc a0 d4 5a bd 07 36 65 38 1e c9 ed 9a a7 10 08 41 90 e8 9a 49 5c 29 22 95 cd fa 94 dd b6 f0 67 df fe 01 3f f8 e1 a7 6c 77 05 d5 95 73 6c ad 10 f9 d3 76 f8 b4 ea 3a ac 66 a4 2a 5d 8c ac 57 2b 50 e3 30 4c 64 81 eb ed 91 cb ab 81 be bb e6 ec 6c cd 83 8b 33 4e 36 3d ab 14 b8 39 4c bc be da 13 62 c4 2c f0 ee 93 77 d1 3a 21 c1 9c e8 68 c5 63 ce f5 21 04 a8 b6 44 fd 6e bb 23 c6 15 9b cd 86 bb a2 9b dc 15 52 14 d2 3b 8f 9f 20 74 a8 74 8d c5 ab 4b bf e7 67 68 a0 ca e1 70 e0 c9 93 27 0b 98 4d 29 2d 07 08 2c 84 6a d7 25 52 90 a6 89 6c d8 6c 36 ac cf 9d 8d f9 e9 4f 3e e1 ff fb d3 bf e1 cd a5 93 04 41 03 2d 79 d0 0b 54 6a 53 60 8c 14 03 a1 4c 44 33 ce 4f 36 98 Data Ascii: zf!8=03Z6e8AI\)"g?lwslv:f*]W+P0Ldl3N6=9Lb,w:!hc!Dn#R; ttKghp'M)-,j%Rll6O>A-yTjS`LD3O6
2023-12-12 20:40:29 UTC	1369	IN	Data Raw: 90 b0 45 0b a8 19 eb f5 86 2e 46 42 84 3a 4c 74 51 78 78 ff d4 d3 42 e8 79 ff 83 c7 bc ff ee 03 ba 02 fb 61 a4 33 25 56 a5 93 48 77 ba a1 d6 ee 56 c3 11 e8 a2 90 52 f0 f7 ad 81 8a 50 aa 31 35 6a ac 4b 91 2e 14 9e 3c 7e cc f9 f9 b9 03 61 51 02 ee a1 59 78 00 ab ad 8d 4b 98 0a 37 37 db b7 0a a9 aa a2 2d 02 4d 5d f2 55 55 d2 c9 c9 66 a9 bc 22 ee 4e 9a 5b 96 39 79 62 bc 95 54 ab e6 46 ed 2b 5d df a3 08 39 e7 85 20 48 29 12 44 89 31 35 74 2f 48 88 08 91 10 3a 4c 95 be 4b 68 df 31 1d 8e 44 53 de 7b 78 4e 08 c2 26 56 12 0a 66 1c f6 3b ea 34 12 c4 10 75 61 6b bd ee 1b 14 a9 ae 69 a0 04 a9 6e a5 91 40 ae c6 58 94 21 17 b7 5e 04 78 78 71 c6 6f fc fa 57 00 7f 8d be 5f 13 24 3a 44 6b 07 14 53 b8 73 80 6e 3b 79 f8 f0 e1 72 88 e2 ca 6c f3 0c 39 77 6a 28 e9 38 1c 90 66 Data Ascii: E.FB:LtQxxBya3%VHwVRP15jK.<~aQYxK77-M]UUf"N[9ybTF+]9 H)D15t/H:LKh1DS{xN&Vf;4uakin@X!^xxqoW_$:DkSsn;yrl9wj(8f
2023-12-12 20:40:29 UTC	994	IN	Data Raw: b1 bc d5 07 ce d5 38 e7 f6 bd 56 9a f9 48 17 d6 7a 16 6b 16 f7 67 90 85 94 78 f3 fa 9a e7 2f de 50 70 18 91 10 a4 1c dc 32 16 0a cf 76 03 47 83 d8 af c9 a5 30 66 48 fd 09 17 27 e7 0e 7b a6 89 22 81 10 a0 96 c2 c1 8c 67 87 cc 18 47 14 e5 a0 c6 a1 0a 83 09 d9 00 2a 20 bc f7 e4 31 7f ef bf f8 cf f8 d2 87 1f 70 71 6f e3 b7 67 36 91 4b 24 49 77 ab 46 de 81 45 97 97 6f d8 9c 9c 12 53 3f b7 67 68 ad 2e 78 6a a5 b6 42 53 6b 26 9d 9e 9c 2e 56 8e bb 4f e3 ad 4e a4 e5 c0 d5 6a 85 99 a2 d5 cd 38 10 50 63 c1 91 77 1b 6e 66 a3 77 93 3b 6f 76 47 c6 ea 39 e8 98 a1 33 78 b3 9f 38 0e 03 d7 e3 44 58 75 ac d7 1d 31 1b bb ab 3d 26 91 92 3d df 99 15 b4 14 14 41 62 c4 10 b6 35 10 b2 22 28 87 52 39 aa 30 9a 50 71 2e b1 8b 91 55 d7 31 0d 47 c6 e3 91 2d a5 11 05 dc 82 7b 8b 2d 78 Data Ascii: 8VHzkgx/Pp2vG0fH'{"gG* 1pqog6K$IwFEoS?gh.xjBSk&.VONj8Pcwnfw;ovG93x8DXu1=&=Ab5"(R90Pq.U1G-{-x
2023-12-12 20:40:29 UTC	1369	IN	Data Raw: a7 ca 54 9d 79 e9 52 42 ab 11 53 4f 29 85 17 8d 4e 2a 56 29 56 a8 62 54 22 07 e0 68 46 55 90 10 6e a1 45 53 10 dd 31 71 db e2 19 81 fd 7e 60 18 27 fe e9 3f ff 7f 39 3b bf e0 3f fe c6 d7 88 96 5d 4e 6d 03 17 86 51 2a 68 85 e9 38 b1 59 9d 92 8b 47 dc 74 3c b4 82 58 a9 a5 cd cc 69 25 6b 21 7d f8 e1 af b6 36 2c dd c9 83 f2 16 17 56 cd b8 ba be e2 e3 4f 3f e5 df 7f eb 5b dc bf ff 98 8b 8b 73 de ff e0 3d de 7b ef 5d 6e 76 5b 5e 3c 7b c6 f6 70 43 ae 19 54 18 72 66 18 2b a5 18 10 99 c6 8a 49 65 aa 85 a2 ea d5 3b 76 fe f4 45 a8 21 70 a8 95 21 4f e4 69 a2 12 db 21 40 97 02 29 1a 43 c9 0c c5 c8 ea 38 6e 7e 6f aa da a6 8c 6e 3b 28 d3 ea d1 92 02 51 23 b9 28 2f de 6c f9 3f ff e8 8f f9 f8 e7 bf c7 1f 7c f3 eb 3e dc 43 25 50 dc 40 16 3b 52 ec 19 a6 81 61 1a 88 31 b0 5a Data Ascii: TyRBSO)NV)VbT"hFUnES1q~`'?9;?]NmQh8YGt<Xi%k!}6,VO?[s={]nv[^<{pCTrf+Ie;vE!p!Oi!@)C8n~on;(Q#(/l?\|>C%P@;Ra1Z
2023-12-12 20:40:29 UTC	1369	IN	Data Raw: fa ef f9 e9 4f 3f e6 6f 7d f4 6b 9c 6e 36 8b dd 2f 44 48 cf 9f 7d d1 ee 88 52 ad b0 1b 8f ec c6 81 69 72 db da f5 e5 81 e3 be 32 1e 0b 29 26 4c 95 e3 b0 27 76 f7 e8 fa 0d c7 61 04 15 d4 84 61 ca f4 7d 62 1a 26 42 17 59 ad 3a ba 14 08 4d 9c 17 f1 e9 74 93 c8 54 bc cf 34 13 8a 66 42 0c 6d d4 de 5a 4d 9e c5 ec 30 bf bd 65 9a c0 2d b6 ce 90 cc 32 ec 1c 82 29 b9 e6 0c f3 30 4c 68 10 aa 4d 99 ab 47 b2 99 3b fa d1 f9 76 28 21 18 48 46 2d 52 4b 73 d9 86 c8 58 e1 d3 a7 2f 99 a6 91 df ff e6 37 79 f2 e4 11 56 33 45 2b e9 e1 bd 35 16 23 85 ca 17 cf 9f f2 ea f2 0d a5 ed 19 d8 ef 0e 6c b7 07 a6 71 42 c4 35 8f d5 2a 32 8e 99 eb 9b 2b 2e 1e 3c c2 e9 35 ef 26 b4 7a 82 47 22 bb dd 9e be 7f 40 df f5 84 30 62 56 5b 13 1e 17 13 a5 de 99 7c d4 3b 8e f9 db 7f b8 35 84 eb 5d e3 Data Ascii: O?o}kn6/DH}Rir2)&L'vaa}b&BY:MtT4fBmZM0e-2)0LhMG;v(!HF-RKsX/7yV3E+5#lqB5*2+.<5&zG"@0bV[\|;5]
2023-12-12 20:40:29 UTC	1369	IN	Data Raw: 58 ab d8 d7 57 37 e4 ec 42 fc 3c 05 9f 97 69 20 cf 81 29 f9 cd a8 55 d1 8c f7 eb 72 77 a6 59 96 bf 3b ae 6c 8c 92 de 91 66 db 6c b0 04 ee e8 d9 b7 d8 53 1a 7d bf 30 37 77 b4 a0 d9 cd 60 55 bd bc 5b 23 2e 0c d2 b3 67 97 a8 1a c3 30 51 72 f1 ad 69 d6 00 6c 9b 1c da 4f 23 d8 c0 6a bd 46 6b 4f 94 88 89 32 1c 47 9f 13 31 37 59 76 31 92 db 4e 2c 97 46 5b 5b 45 c5 d4 e8 bb 8e 43 99 98 b2 b2 3f ec 19 8e 23 46 20 26 d7 51 ac ad 0e 90 e0 bd ab 9b 7d 62 6b df 9c 34 30 35 b4 08 31 d9 22 8a df 05 d8 f3 a8 86 3f 94 b4 7c 4d a5 4d 10 84 c8 dd 8e 3b 04 97 6c 53 8c 8b bc b9 8c 72 2d 52 6d ff d6 cf 99 cf c7 54 48 79 2a 4d 69 9a 40 8c 7e e5 4b 23 dc 89 30 61 16 61 f2 45 0d c7 c3 c4 38 64 8e fb 84 c4 c8 38 1a 5a dd c4 58 4b b9 bd 32 ed 87 a8 9a 5f 9b 30 3b 9f bc 6a de dc ec Data Ascii: XW7B<i )UrwY;lflS}07w`U[#.g0QrilO#jFkO2G17Yv1N,F[[EC?#F &Q}bk4051"?\|MM;lSr-RmTHy*Mi@~K#0aaE8d8ZXK2_0;j
2023-12-12 20:40:29 UTC	794	IN	Data Raw: 35 63 9a 6a db 34 e9 0f d2 af 62 7b 28 c6 32 50 e4 cb 70 6b 7b bf 2c 3d b5 a2 0d ee 08 92 bc 20 0d c3 d8 96 4b 26 67 b5 a3 6f 36 09 fb c3 1e 02 74 ab 44 ea dd c1 19 63 b7 4c 23 9a 41 ce 99 e3 70 e4 38 8e 4e 7b 35 a7 a6 6f fd 6e 06 f5 a6 4d d4 e6 21 0e 31 b6 c9 46 77 b8 62 be 7a ae 6d 68 69 c9 b4 59 24 5a f7 a0 6d 39 b6 b4 6b e8 7a 44 f0 b1 86 b6 61 72 39 f3 05 3e b5 72 3d f7 dd d5 f5 0d 6f 27 e7 61 73 45 16 45 99 96 03 1b 01 b1 10 11 d2 3e 87 f3 84 26 42 ec 9d e2 1f 1b ce 9c cd a7 21 26 44 12 58 20 c5 28 94 32 21 22 6c 36 1b ef 20 8a 92 73 f5 27 2d 10 aa f7 96 a5 14 b7 75 15 ef 53 63 8a 8d 16 92 c5 e9 3f 27 fb bb 53 4e a1 2d ef 49 f4 8b 71 49 24 d0 75 1d c3 e0 45 a6 5b 36 08 bd 7d 6d 45 9a cd 64 de 6f a0 fe f4 c3 9d 1c 26 e2 a4 ab 9a 51 da 03 8c 29 b5 d5 Data Ascii: 5cj4b{(2Ppk{,= K&go6tDcL#Ap8N{5onM!1FwbzmhiY$Zm9kzDar9>r=o'asEE>&B!&DX (2!"l6 s'-uSc?'SN-IqI$uE[6}mEdo&Q)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.22	50614	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	580	OUT	GET /pixel?google_nid=lijit_dbm&google_hm=SHozMmhMWkhCRkt4czN4clFVcXJ3MFFi&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:29 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:29 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.22	50615	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	670	OUT	GET /pixel?google_nid=rp&google_hm=TFEyVDFLRFUtMTctSUJHNg==&google_push=AXcoOmQZAqWr5dyrQJpkgAEcs-hHckVChMpfoE5lOENz-K8IrVugBkhsQ2FLgwEPRBrx41oawA1j0zZe0CHqHxq_5UDeAcPm2IU HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:30 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 12 Dec 2023 20:40:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:30 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.22	50652	3.93.99.238	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	607	OUT	GET /qmap?c=240&tp=PUBM&tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=a31bb17c5a71a653e40698b548c9c280; _cc_cc="ACZ4XmNQSDQ2TEoyNE82TTQ3TDQzNU41MTCztEgyNbFItkw2sjBgAILUiqN6IBoKAEyRCk4%3D"; _cc_aud="ABR4XmNgYGBIrTiqB6SgAAAW5gHR"
2023-12-12 20:40:29 UTC	314	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.8.193 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-12 20:40:29 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.22	50640	18.67.39.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	482	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:29 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 39d0b6c3836d173e719889fc86d67ce8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: YTO50-P2 X-Amz-Cf-Id: 5-VyNRUPUgjuvQM4uR9nW9QqFIj0_Jg8JlhWwEZqXshYSsaua-DpBw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.22	50622	68.67.181.211	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	750	OUT	GET /prebid/setuid?bidder=triplelift_native&gdpr=0&gdpr_consent=&uid=3571062816453612499566 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=2638779048715878353; anj=dTM7k!M4/YDunaTF']wIg2Il]g0G:u!]tbP6j2F-.aDE7BAf@@gm4K$irqLdY0RJjGe!qfQhRXjFGXt9jGEOGdD1J%q)3RK#-s; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIzNTcxMDYyODE2NDUzNjEyNDk5NTY2IiwiZXhwaXJlcyI6IjIwMjQtMDMtMTFUMjA6NDA6MTZaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMTJUMjA6NDA6MTZaIn0=
2023-12-12 20:40:30 UTC	1398	IN	HTTP/1.1 200 OK Server: nginx/1.21.3 Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: fc7995c3-7613-4458-ace7-c82860b27e72 Set-Cookie: anj=dTM7k!M4/YDunaTF']wIg2Il]g0G:u!]tcZ8bhzs#DNA_<'.OaUcK'[a^7WFSgOOxQ8igNXtp51Z8bqRcyz9:]7af<QEVk`!17pav_%Xw; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:29 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIzNTcxMDYyODE2NDUzNjEyNDk5NTY2IiwiZXhwaXJlcyI6IjIwMjQtMDMtMTFUMjA6NDA6MjlaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMTJUMjA6NDA6MTZaIn0=; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:29 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=2638779048715878353; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 11-Mar-2024 20:40:29 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.212; 102.129.152.212; 584.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2023-12-12 20:40:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.22	50621	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	847	OUT	GET /ddp?red=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn1dfQ%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=ghhhlLKf8OmTjCq1x-ObVM1mw!20220908!1702413501136!ip#102.129.152.212; arcki2_pubmatic=AE4A8C3D-1096-459A-B091-2BADD5009F52!20220908!1702413626157
2023-12-12 20:40:29 UTC	672	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Tue, 12 Dec 2023 20:40:29 GMT Location: https://dmp.adform.net/serving/cookie/match/?party=1003&r=eyJ1IjoiaHR0cHM6Ly9hLmF1ZHJ0ZS5jb206NDQzL3AiLCJkIjpbXX0%3D&gdpr=0&gdpr_consent= Server: nginx/1.22.1 Set-Cookie: arcki2_ddp2=ghhhlLKf8OmTjCq1x-ObVM1mw!20220908!1702413629826; Max-Age=1296000; Expires=Wed, 27 Dec 2023 20:40:29 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.22	50665	74.119.119.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	728	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fmathblog.com%2F&domain=mathblog.com&bundle=dcB8OF9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVkN4WWpVZU5jWEpuTURtakpjdGlFUlglMkZ2aDd0Q0F6NDloMlZ2Q2cwS05yMEJEbzJIeDZ3cnFydGRtcDNVeFIlMkIzR0VCWFhSakxPNHpxQ1VxcTZjQWxMbThsQ0xzMjVrJTJCUlpwNWF6N0k4eE1CbDlLaWJjRnRJQ2w5MHFId3FUQTdHQSUzRCUzRA&cw=1&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31
2023-12-12 20:40:29 UTC	350	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Tue, 12 Dec 2023 20:40:29 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 4263925 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-12 20:40:29 UTC	430	IN	Data Raw: 31 41 37 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 56 74 42 79 74 6c 39 6c 52 57 56 59 52 6a 46 4d 55 44 42 5a 61 53 55 79 52 6c 42 6f 56 55 78 53 52 47 31 6a 56 6b 35 61 55 6e 4a 76 5a 32 4e 42 65 6e 67 34 54 47 31 43 56 54 52 44 63 44 6c 61 59 33 6c 7a 52 31 5a 30 56 45 46 71 4e 48 4e 48 55 57 38 79 64 6c 6c 52 54 6e 42 4a 64 6a 52 59 56 45 39 35 55 31 55 78 54 33 4d 35 54 44 4a 6c 5a 58 45 32 55 46 56 30 51 7a 46 45 4d 6a 4e 57 55 58 52 46 4f 45 31 4a 4d 30 74 74 54 6d 4e 47 64 47 4a 4a 55 58 6c 48 53 55 74 6b 53 6a 46 79 5a 32 70 76 4a 54 4a 47 52 6d 6c 36 65 57 6c 61 65 44 56 4e 4e 58 41 79 55 48 70 52 61 48 6c 4e 61 46 5a 57 56 44 52 32 51 58 70 71 5a 6a 5a 43 4e 55 46 52 4a 54 4e 45 4a 54 4e 45 22 2c 22 62 69 64 49 64 22 3a 22 45 66 71 76 6a 56 38 6c Data Ascii: 1A7{"bundle":"VtBytl9lRWVYRjFMUDBZaSUyRlBoVUxSRG1jVk5aUnJvZ2NBeng4TG1CVTRDcDlaY3lzR1Z0VEFqNHNHUW8ydllRTnBJdjRYVE95U1UxT3M5TDJlZXE2UFV0QzFEMjNWUXRFOE1JM0ttTmNGdGJJUXlHSUtkSjFyZ2pvJTJGRml6eWlaeDVNNXAyUHpRaHlNaFZWVDR2QXpqZjZCNUFRJTNEJTNE","bidId":"EfqvjV8l
2023-12-12 20:40:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.22	50591	162.248.18.37	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	3126	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=AE4A8C3D-1096-459A-B091-2BADD5009F52; KRTBCOOKIE_57=22776-8216955376890449583&KRTB&23339-8216955376890449583; KRTBCOOKIE_377=6810-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22918-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&22926-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec&KRTB&23031-3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; KRTBCOOKIE_80=22987-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23025-CAESEFcZYvZrLd3rzdzlSqdT4SY&KRTB&23386-CAESEFcZYvZrLd3rzdzlSqdT4SY; KRTBCOOKIE_699=22727-AAB3wk7K8YkAABTAD88gJQ; KRTBCOOKIE_153=1923-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&19420-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&22979-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG&KRTB&23462-r6EtcPqgeCy0oi5wr_A3Lq72KXq0pCIqqqKBBAWG; KRTBCOOKIE_107=1471-uid:ViN9mkBO1Rd9xZ5&KRTB&23421-uid:ViN9mkBO1Rd9xZ5; KRTBCOOKIE_860=16335-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23334-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23417-GH_JvDj8VjdvrBlOavHmp2aBmNQ&KRTB&23426-GH_JvDj8VjdvrBlOavHmp2aBmNQ; KRTBCOOKIE_1003=22761-a54b90ee-992e-11ee-aedd-513fc3dc3f08&KRTB&23275-a54b90ee-992e-11ee-aedd-513fc3dc3f08; KRTBCOOKIE_22=14911-7558899468789434902&KRTB&23150-7558899468789434902&KRTB&23527-7558899468789434902; KRTBCOOKIE_188=3189-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553&KRTB&23418-fbcc988d-4d2f-4c3e-bb0a-4622107fcfcc-6578c527-5553; KRTBCOOKIE_466=16530-f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; KRTBCOOKIE_52=22772-R35CA9_10D97F8E3_7A5609BE&KRTB&23092-R35CA9_10D97F8E3_7A5609BE; SyncRTB3=1703548800%3A96_56_71_21_176_234_46_55_214_231_264_249_238_178_3_54_250_166_22_8_104_48_7_165_240_5_13_233_220_243_99_81%7C1702944000%3A15_38_223_2%7C1703635200%3A35%7C1704931200%3A224%7C1703203200%3A63%7C1707523200%3A69; chkChromeAb67Sec=5; KRTBCOOKIE_469=8273-863968679737&KRTB&23428-863968679737; KRTBCOOKIE_18=22947-968625794546145592; pi=137711:4; DPSync3=1702944000%3A252_253_265%7C1703376000%3A257%7C1702425600%3A255_248%7C1703548800%3A258_263_226_260_262_236_245_228_219_201_256_261_259_235; KRTBCOOKIE_1278=23329-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23340-0d2b585e-dbe9-4680-8c70-3d0a0e81332d&KRTB&23498-0d2b585e-dbe9-4680-8c70-3d0a0e81332d; KRTBCOOKIE_391=22924-8152669554817989381&KRTB&23263-8152669554817989381&KRTB&23481-8152669554817989381; SPugT=1702413621; KRTBCOOKIE_1323=23480-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23485-OPUb5d1f3b8746f478f8bbe11a7db7b8734&KRTB&23524-OPUb5d1f3b8746f478f8bbe11a7db7b8734; KRTBCOOKIE_27=16735-uid:dd3f6578-c536-4100-b21a-6e3bd7e898ab; KRTBCOOKIE_904=16787-lD1EGcujD9GlzdZxN8V4ZQ; KRTBCOOKIE_594=17105-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005&KRTB&17107-RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; PugT=1702413626

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.22	50598	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	479	OUT	GET /xuid?mid=2711&xuid=689a6ff4-78f4-4af8-ab92-a06c49bdaa31&dongle=013b&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566
2023-12-12 20:40:29 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=3571062816453612499566; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Mon, 11 Mar 2024 20:40:29 GMT; Secure; SameSite=None
2023-12-12 20:40:29 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.22	50679	108.157.162.121	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	625	OUT	GET /c/?dspId=1001989&dspCookie=LQ2T1KDU-17-IBG6 HTTP/1.1 Host: s.ad.smaato.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:30 UTC	757	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Server: CloudFront Date: Tue, 12 Dec 2023 20:40:30 GMT Cache-Control: no-cache, must-revalidate Set-Cookie: SCM=76225de3cf; Max-Age=1814400; Domain=.smaato.net; SameSite=None; Path=/; Secure Set-Cookie: SCMv=76225de3cf; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Set-Cookie: SCM1001989=76225de3cf; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Location: https://cs.lkqd.net/cs?partnerId=109&partnerUserId=76225de3cf&gdpr=0&gdpr_consent= X-Cache: Miss from cloudfront Via: 1.1 0e5dc4b468ce7c5a81892e8e1aff5e18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P3 X-Amz-Cf-Id: VTs0NNAwG1SjFPGVTe0bRuS6oz_kKa-B_5nTPSqjGVRIY13N1vxbPw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.22	50663	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	425	OUT	GET /openrtb/pbjs?s=502649 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633
2023-12-12 20:40:29 UTC	610	IN	HTTP/1.1 204 No Content Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: application/json Connection: close CF-Ray: 8348c86298c87424-MIA CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=im18roXGEcIsiJ9oSt%2BYAOehs4ia6VwRnIJTcC%2BYp1uh66QqHCtwwJqsCtrVj813GU0161gFs%2FPIC0KD1cs0e37YB%2BGbibGzrxtoDIypj64TAl1Ghe79nCU%2FvLDUPqpSVscZ1Igi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.22	50672	18.160.65.3	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	2231	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=OGvIOOwZEX0AX&cb=0&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:30 UTC	493	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 23 Connection: close Server: Server Date: Tue, 12 Dec 2023 20:40:30 GMT x-amz-rid: 1YV9N4P8R2JH78MJVSZ8 Strict-Transport-Security: max-age=47474747; includeSubDomains; preload Vary: Accept-Encoding,User-Agent X-Cache: Miss from cloudfront Via: 1.1 339161fcedc527e4835cc6e81141de5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P1 X-Amz-Cf-Id: TtHRX15sdb15CO5VxLoXjdWcVdCE8_O_xDiEmmQzj0bs-0v64xGygQ==
2023-12-12 20:40:30 UTC	23	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.22	50641	3.233.79.191	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	607	OUT	GET /map/c=14701/tp=MTAI/tpid=AE4A8C3D-1096-459A-B091-2BADD5009F52/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=a31bb17c5a71a653e40698b548c9c280; _cc_cc="ACZ4XmNQSDQ2TEoyNE82TTQ3TDQzNU41MTCztEgyNbFItkw2sjBgAILUiqN6IBoKAEyRCk4%3D"; _cc_aud="ABR4XmNgYGBIrTiqB6SgAAAW5gHR"
2023-12-12 20:40:30 UTC	314	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.10.38 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-12 20:40:30 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.22	50675	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	943	OUT	GET /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.22	50688	34.235.7.99	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	597	OUT	GET /pdmp/b4/v2/pixel.gif?url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&ref=&tref=&tz=-1&screen=1280x1024x24&dcRegion=us-east-1&cmpstatus=notrequired&e=%5B%5D&fpid=223e362f-211b-485a-8f8e-b769f2bcebb9 HTTP/1.1 Host: pdmp.tagger.opecloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-12 20:40:30 UTC	202	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 35 Connection: close Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate
2023-12-12 20:40:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.22	50645	142.250.64.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	535	OUT	GET /pagead/drt/si?st=NO_DATA HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA
2023-12-12 20:40:30 UTC	664	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 12 Dec 2023 20:40:29 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: DSID=NO_DATA; expires=Tue, 12-Dec-2023 21:40:29 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Tue, 12 Dec 2023 20:40:29 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.22	50687	104.22.24.87	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	628	OUT	GET /?zdid=1332&zcluid=95cb27def9651c04 HTTP/1.1 Host: spl.zeotap.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=d42897f0-a063-4fda-61c7-d26e083018c0; zsc=%5D%06-%EF%F0%02%7C%BA%D7%3A%2B%9A2%98f%9F.B%15%88%CF%BF%E5%99%24%09%06%AE%15%13%28%E7c%17%AFf%95%23%A0L%E3%D0L%D4%12.Md%A5%9CZ%B3%E1%5EjU%A1C%83%BBT%92-%D7%C9Ai%85%05%9A%84%ED%8B%E3%F6%B1Z%F2-D%D1%21R
2023-12-12 20:40:30 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:30 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: * set-cookie: zc=d42897f0-a063-4fda-61c7-d26e083018c0; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure set-cookie: zsc=C%0B8%A0%AAr%BB%FCf%7C%B2%9E%28H%E9%F3%11%8D%99z1z%C9%96%EF%9D%22.%BE%EDO%93%07c%F3%DC%F0%B3%F93%E0B%E7%E2%DF%04G%D3%DDd%98%8Dz%3AXim%84%3Fe%8A%81%F4K%27_%FF%A6%95%21F%C7%1De%C9%B2%05%26%1B%8F%00q%05; Path=/; Domain=.zeotap.com; Max-Age=86400; SameSite=None; Secure via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8348c86319d431ec-MIA
2023-12-12 20:40:30 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.22	50671	34.117.239.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	583	OUT	GET /match?bidder_id=45&external_user_id=c2de9d03-71b9-4aab-a691-2cd3acac0faf-6578c528-5553&ts=1702413622&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234
2023-12-12 20:40:30 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Tue, 12 Dec 2023 20:40:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:30 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.22	50595	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	619	OUT	GET /w/1.0/sd?id=537146931&val=4c_0f2fd50c-4ce9-46bf-8fbf-4c75ac6b55dc HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3.9\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg.wswcsTwgw7wHlkwB
2023-12-12 20:40:30 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Tue, 12 Dec 2023 20:40:29 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.22	50642	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	547	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=AE4A8C3D-1096-459A-B091-2BADD5009F52&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=
2023-12-12 20:40:30 UTC	1095	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:30 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1702413499915;Expires=Sat, 10 Feb 2024 20:40:30 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054;Expires=Sat, 10 Feb 2024 20:40:30 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Sat, 10 Feb 2024 20:40:30 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-12 20:40:30 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.22	50601	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	2164	OUT	GET /merge?pid=94&3pid=6578C52BA3E5B7861049C694BLIS&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; _ljtrtb_80=LQ2T1KDU-17-IBG6; _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; _ljtrtb_49=4trFhcvjylTg; _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW
2023-12-12 20:40:30 UTC	4179	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:30 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_49=4trFhcvjylTg; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:30 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:30 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:30 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:30 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.22	50581	52.46.151.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	454	OUT	GET /ecm3?ex=gg.com&id=u_7e6a3c6e-ec64-4272-b12b-1fd3ed3a237b HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4
2023-12-12 20:40:30 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 12 Dec 2023 20:40:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: PK42QD7PVEZCVMDT6GXK Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-12 20:40:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.22	50617	3.213.9.240	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	793	OUT	GET /pixel?type=sync&source=rubicon&inventory_source=0 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=0d2b585e-dbe9-4680-8c70-3d0a0e81332d; ss=wlpwcamuiTrQFV3yHhO%2BjG7c5nCCtpk2yvR4MGY2sf4RLhoC8PQ9HV0Uyy4aQpfsrhzvHiH36KRmbPI8bbABaQ%3D%3D
2023-12-12 20:40:30 UTC	525	IN	HTTP/1.1 302 Found Date: Tue, 12 Dec 2023 20:40:30 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://pixel.rubiconproject.com/token?pid=49038&puid=0d2b585e-dbe9-4680-8c70-3d0a0e81332d Set-Cookie: UID=0d2b585e-dbe9-4680-8c70-3d0a0e81332d; expires=Thu, 12 Dec 2024 20:40:30 GMT; path=/; secure; samesite=none Set-Cookie: ss=sAv%2FYkYGcwk5cPCflcgbP5GS29tHj22tTHV7lW6%2FtiYVRKHXTneJgGy3Hx0eJWqQBO4R6DYVTbaLrOAN%2BftN7A%3D%3D; expires=Thu, 12 Dec 2024 20:40:30 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.22	50634	172.67.164.44	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	396	OUT	GET /update?cats=687,687,687,687,687 HTTP/1.1 Host: sda.fyi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_sda=2023-12-12_687_35
2023-12-12 20:40:30 UTC	752	IN	HTTP/1.1 200 OK Date: Tue, 12 Dec 2023 20:40:30 GMT Content-Type: application/json Content-Length: 25 Connection: close Access-Control-Allow-Origin: * Set-Cookie: mv_sda=2023-12-12_687_40; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QAmph5ewZlZoHnuyZUGWdUBGXVUCFyk4TA1mJFneKUCW0Va7shXzK2Cu%2FhgLkz7pfb0WnafGhU4PWqBStvF57JQvl3CniAVm8nqAhd796lQjztzrbZtvzXUR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8348c8638fac7486-MIA alt-svc: h3=":443"; ma=86400
2023-12-12 20:40:30 UTC	25	IN	Data Raw: 7b 22 32 30 32 33 2d 31 32 2d 31 32 22 3a 7b 22 36 38 37 22 3a 34 30 7d 7d Data Ascii: {"2023-12-12":{"687":40}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.22	50607	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:29 UTC	2186	OUT	GET /merge?pid=16&3pid=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; _ljtrtb_92=2638779048715878353; _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; _ljtrtb_83=LQ2T1KDU-17-IBG6; _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; _ljtrtb_80=LQ2T1KDU-17-IBG6; _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; _ljtrtb_49=4trFhcvjylTg; _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW
2023-12-12 20:40:30 UTC	4201	IN	HTTP/1.1 200 OK Connection: close Date: Tue, 12 Dec 2023 20:40:30 GMT Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_92=2638779048715878353; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_58=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_26=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_27=3311a7f3-c44c-4d38-8196-dca4c2b0f8ec; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_49=4trFhcvjylTg; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_71=AE4A8C3D-1096-459A-B091-2BADD5009F52; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_83=LQ2T1KDU-17-IBG6; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_94=6578C52BA3E5B7861049C694BLIS; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_84=ZXjFKB8auyNdakE1Q8hBrAGq; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_2=EAF92472013E4E6D9A751C1DA567BFFF; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_85=AAB3wk7K8YkAABTAD88gJQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_97=RX-dc8a4e66-3282-40f7-a857-c1764dd8a43b-005; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_86=rWaaguc9OQEXi5Sll6uKbJjGey9a2IaBRWfK96Edhes; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_76=b2e855f2-cb8e-06ec-2af4-52af098d3c16; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_43=jjy_Cts96laVP7wKjm2lVI9ruwCVObBQiz_yNqt7; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_87=55927f38-2b7b-4f3f-958e-daf09ffe771c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: _ljtrtb_103=OPU757f221e63b64927b1c7a11275bcba2c; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyNUstuGzEM%2FBefS0CiRJHqbde7GzgOkjjNq70EeqySOO4hTtzALfrvlXov0IsgUDMczlC%2FFiSLz4tutJ0szQBaeQeWfAe98hqw74aBlPIT4eLTAl3FFsSEnANQ0BpsMBnERITgijIFXU4uV6xuWEmpVowDk1wCO4cMwSQLxeLsPCZXkMARSyIUICJTmdZXpn3fT0%2Fpx%2Fa4u35sylxrxmgduBhI1tZu2QiIrvPmFGzCqIrMqWErdOwmj5ZRaTPa0Q2%2BY9JLPXTkuJ%2BmqQ2oTAVeXN4wcfWkZ2eisx456sTVGjLFFAO2lqIq9GyD13o93IBmWPUnrtZ906oGhdkrK6xJWMxfF6z%2FP1cx%2F2hva73Fs6TKMCP1LE4r65fO2%2F5s9aVxG%2Bbb%2FXZa9xIOx%2FMcXka9kad%2B3528tndqc3S9%2BXjhtXx9qdfrbhB5PN00hZbr1X2NUIKdXV0UCoJVhSEIMSTNzuZcH00Epag1bIvd34XweEj%2BYjPeP9OX3c4d1vF0ezIffcBV6K%2Fuytq7MT%2FNb22jzd92e3xYvr95twu3l%2Fyx3n7H3e3K7w8fy9uL2G%2Befz4cz1%2FfuWXXJCLOQlQQUpQZlJsTYCgWqJ7KSzZJt4ykOSCqeyv1P2DkCLaYAp4qKzdoKTOzTovffwCqAbxW; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:30 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_16=8ccf2636-3c6c-4ead-a3c4-f42e692c6f25-6578c528-5553; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:30 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljtrtbexp=eJxd0EsOwCAIBNC7uHYBKL9erendW6Npwrh7SgbkbuntYqdhMoS8N6k0%2B02ZvTFBgXM106gXE%2BwnkTjmcuYZQZS%2Bs28CQq06CHokvEPPmGAFYz4uBfJk18tUi2WNanH4IywtyzzPC8cCS8U%3D; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:30 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Hz32hLZHBFKxs3xrQUqrw0Qb; Path=/; Domain=.lijit.com; Expires=Wed, 11-Dec-2024 20:40:30 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Content-Type: image/gif Content-Length: 43 X-Sovrn-Pod: ad_ap1dca1
2023-12-12 20:40:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.22	50682	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	494	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=AE4A8C3D-1096-459A-B091-2BADD5009F52&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=E5721A91FA508ECA
2023-12-12 20:40:30 UTC	581	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 14 Set-Cookie: SEUNCY=E5721A91FA508ECA; Expires=Wed, 11 Dec 2024 20:40:30 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Tue, 12 Dec 2023 20:40:30 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2023-12-12 20:40:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.22	50633	34.102.243.38	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	1717	OUT	GET /tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Not_A%20Brand%22%2C%22version%22%3A%2299.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22109.0.5414.120%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22109.0.5414.120%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%220.1.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Education%22%2C%22subcategory%22%3A%22Education%22%7D HTTP/1.1 Host: pandg.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mathblog.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1702413499915; TapAd_DID=e31b8e0e-bea2-495f-8d27-c227ee82e054; TapAd_3WAY_SYNCS=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.22	50576	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	400	OUT	GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.22	50685	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	506	OUT	GET /396846.gif?served_by=evergreen&partner_uid=8bc0f454-ec7d-0a81-3231-64fa48a7629c HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CLaK46sGEgYIwuoBEAA=; rlas3=d96I85+BpE1opO3FtitlJp/Bhyt0rrFWvUk+bF1wm9I=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.22	50605	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	617	OUT	GET /w/1.0/sd?id=540394477&val=2527372694113908282&gdpr=0&gdpr_consent= HTTP/1.1 Host: u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=0daab46b-88bd-0316-379e-2ce1151b30b9\|1702413498; pd=v2\|1702413498.3.1.102.3.2.4.3.9\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8wI.g6wvfYwDwtmKvJvuvRwi.hMhAn8lwvZnof4csvUoq.s7vswwvDvE.t1rZtpsvv5.eD.jg.wswcsTwgw7wHlkwB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.22	50667	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	1056	OUT	GET /usersync/redirect?partner=mediagrid&uuid=6120f800-992e-11ee-8a65-3f15d911ca60&s2sVersion=production&partnerId=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.22	50669	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	425	OUT	GET /openrtb/pbjs?s=179872 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZXjEurXK3YbtORulaCkY0QAA; CMPS=633; CMPRO=633

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.22	50589	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	693	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODE1MjY2OTU1NDgxNzk4OTM4MQ&google_push=AXcoOmTNdrdX0hYNjh7c4KjxmH-URiNlWl24f2m5pl719bowU6SFBqXHt9mhAbGdqCQ_eE4n18Fmxh5kaT5VKkZ4Z0XRwr5ve-E HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.22	50587	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	403	OUT	GET /avatar/6351d5c8c991067a7c217f9548f3760e?s=80&d=identicon&r=g HTTP/1.1 Host: secure.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.22	50590	35.244.193.51	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	502	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&src=esp&ver=1.2.0&us_privacy=1--- HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212377533762873%3As1%3D1702413498234%3Ats%3D1702413498234

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.22	50611	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	724	OUT	GET /pixel?google_nid=9675309&google_hm=VmlOOW1rQk8xUmQ5eFo1&google_gid=CAESEMGa8_lDPgEhdzWBcQgeXns&google_cver=1&google_push=AXcoOmQyCI2_46bKneXmQ0PypwJXrLUdUcaOG63RqnwUSbuQOCRmNPwVZtpIXht2_VQ25gObLB87X6MJo0LhKM5eQQDUOmC-d4M HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.22	50668	18.160.65.3	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	2192	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%23blog&pid=OGvIOOwZEX0AX&cb=1&ws=1280x913&v=23.1129.2055&t=2000&slots=%5B%7B%22sd%22%3A%22sidebar_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%2C%7B%22sd%22%3A%22content_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A12%7D%5D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Math%20Blog%22%2C%22domain%22%3A%22mathblog.com%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22sectioncat%22%3A%5B%22IAB5%22%5D%2C%22pagecat%22%3A%5B%22IAB5%22%5D%2C%22page%22%3A%22https%3A%2F%2Fmathblog.com%2Fpolynomial-root-finding-with-the-jenkins-traub-algorithm%2F%22%2C%22ref%22%3A%22%22%2C%22keywords%22%3A%22polynomial%20root-finding%2Calgorithm%2Cpolynomial%20root%2Cvalue%2Cequation%2Csolution%2Cinterval%2Cstage%2Cproblem%2Cfunction%2Cfield%2Ccase%2Copposite%20sign%2Ctechnique%2Canalytical%20method%22%2C%22privacypolicy%22%3A1%2C%22mobile%22%3A1%2C%22content%22%3A%7B%22language%22%3A%22en%22%2C%22cat%22%3A%5B%22IAB5%22%5D%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%7B%22id%22%3A%22596%22%7D%2C%7B%22id%22%3A%22597%22%7D%2C%7B%22id%22%3A%22631%22%7D%2C%7B%22id%22%3A%22599%22%7D%2C%7B%22id%22%3A%22602%22%7D%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%2C%22user%22%3A%7B%22id%22%3A%226120f800-992e-11ee-8a65-3f15d911ca60%22%2C%22geo%22%3A%7B%22region%22%3A%22FL%22%2C%22country%22%3A%22US%22%7D%2C%22ext%22%3A%7B%22eids%22%3A%5B%5D%7D%7D%7D%7D&schain=1.0%2C1!mediavine.com%2C10c1efb0bab1f9a810dff3b025a837e4%2C1%2C%2C%2C&gpp=DBABzw~1---~BqgAAAAAAgA&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A1rhKsjaRkteiTTzE0HaIE4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.22	50677	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	467	OUT	GET /sync?dsp_id=452&ssp=themediagrid&user_id= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.22	50658	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	685	OUT	GET /sync?ssp=rubicon HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1702413499; tuuid=f22c27da-5a11-4a3d-83b2-a6f03f26dc6d; tuuid_lu=1702413501

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.22	50647	142.250.64.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	1690	OUT	GET /pagead/interaction/?ai=CNLR6KsV4ZZCNBf_70_wPivqMcP-6zdJz7LO05N8QofGzzcQ4EAEg1LGHJGDJhoCA3KPcEKABnO-AwgLIAQGpAioyK9LIwEk-4AIAqAMByAPLBKoE3gJP0ElGcDcsHUniv7DhRhxvb_muXNqE5HDu99oiv72IyiCApmzQwsdPB7l6NFbKPtFtfP4ZyAoOV8F1nhAervwm8SuFyJA9iUmv47oDKNHpa90gQdYNRFjinkXjwi0omOIpJKO-Z20Z28oWRSXK42kcYEs8RMBeYPDARYr0ufG1azMCgQB5J1bkJMCV4UH165Pa4v15XpH66V-jrqGtNVzvl-UV4brKU8QiC0zSp3ebyqj62bf0VoMngUI3XhJemfpUsgdhBKk34GjdenKg1dpcUs1qoDxGRp01X02N7GdaW5yU40Wg6udX5dJPR8yxrtPHvuxeuZ0IwBzpzEYjaMBuYcAQeFd7tiJ9IGL6V9qA2Kp0gUy_o7rceGQyHOuYRTxtDROewBdm12bTt7YUTpDQoQyx64GZhwR0joIQnNrDSo2RZmdjDCsJBqMxUyrqkXPEoffWG3dYws569JWp5cAEqI64p58E4AQBiAX2kJn6SIAHzJD_vQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHTICigI6BIBAgEBIvf3BOlj79vPz4IqDA_IIG2FkeC1zdWJzeW4tMzcxOTc3MTI4ODI3NzI2MbEJSrzMqb6fuPKACgOYCwHICwGiDBQqEgoQ5LSxAu61sQK1uLECu7uxAtoMEQoLEKC-iPvNp-am6wESAgEDqg0CVVPIDQHiDRMInan08-CKgwMV__2UCR0KPQMO2BMCiBQH0BUB-BYBgBcB&sigh=Mj_62OByYyg&cid=CAQSTQAvHhf_irivc2k7iCP4UVmgA07GvR0JSS0MfjvVpPwcmIn8H6IMznE1faWDMxGeeHVlGQGmYiB4qAqZpLwM119dbrX-pccDmmgImKA5&label=window_focus&gqid&qqid=CJDK9fPgioMDFf_9lAkdCj0DDg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIa2yQEIorbJAQipncoBCKj3ygEIkqHLAQiFoM0BCLjIzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmta_vo-HWD8zvMKTytTyfDFGIvalfMni-OLo_rFUtLPtrwtLiUF8kKz4lHsr0; DSID=NO_DATA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.22	50657	211.120.53.202	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	639	OUT	GET /rtb/sync?proto=rubicon HTTP/1.1 Host: tg.socdm.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SOC=ZXjEvcCo5tEAAK927qYAAAAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.22	50648	3.161.188.91	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	462	OUT	GET /adscores/g.pixel?sid=9212308278&puid=AE4A8C3D-1096-459A-B091-2BADD5009F52 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3AoPQryju%2FgTlRr8tI2Uhlow2gmPUueMTE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.22	50616	143.244.208.184	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	758	OUT	GET /csr?r=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D1172318%26nid%3D5570%26put%3D2b132d12-3c69-4bff-8847-562869ba9a5a HTTP/1.1 Host: sid.storygize.net Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: U=2b132d12-3c69-4bff-8847-562869ba9a5a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.22	50574	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-12 20:40:30 UTC	446	OUT	GET /xuid?mid=3335&xuid=2638779048715878353&dongle=4d58&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3571062816453612499566

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.22	50706	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.22	50618	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.22	50646	142.250.64.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.22	50683	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.22	50613	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.22	50699	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.22	50692	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.22	50582	172.67.187.225	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.22	50659	162.248.18.37	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.22	50653	104.22.24.87	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.22	50686	52.45.234.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.22	50674	3.213.224.199	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.22	50583	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.22	50656	142.250.64.130	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.22	50690	37.18.24.16	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.22	50579	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.22	50698	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.22	50651	34.96.105.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.22	50711	192.0.73.2	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.22	50700	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.22	50721	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.22	50597	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.22	50714	18.67.39.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.22	50717	3.233.79.191	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.22	50691	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.22	50709	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.22	50716	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.22	50684	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.22	50708	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.22	50695	54.92.250.61	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.22	50707	162.248.18.37	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.22	50689	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.22	50637	172.105.232.22	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.22	50537	45.137.176.88	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.22	50712	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.22	50662	44.206.51.132	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.22	50703	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.22	50694	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.22	50702	35.244.159.8	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.22	50715	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.22	50723	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.22	50697	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.22	50720	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.22	50718	172.64.151.101	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.22	50710	141.94.171.215	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.22	50733	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.22	50731	3.161.188.91	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.22	50727	69.20.43.192	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.22	50737	69.20.43.192	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.22	50724	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.22	50713	63.251.86.49	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.22	50736	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.22	50739	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.22	50732	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.22	50726	141.95.98.64	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.22	50744	34.98.64.218	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.22	50729	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.22	50722	38.98.69.175	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.22	50747	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.22	50728	142.250.64.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.22	50738	35.211.233.246	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.22	50753	18.67.39.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.22	50743	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.22	50730	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.22	50754	104.22.24.87	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.22	50749	18.173.219.5	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.22	50758	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.22	50750	3.233.79.191	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.22	50757	44.206.51.132	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.22	50740	162.248.18.37	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.22	50741	52.9.147.99	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.22	50751	68.67.160.186	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.22	50752	54.152.252.123	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.22	50765	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.22	50755	162.248.18.37	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.22	50767	3.161.188.91	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.22	50769	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.22	50761	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.22	50764	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.22	50771	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.22	50766	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.22	50768	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.22	50772	69.20.43.192	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.22	50777	52.205.97.185	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.22	50773	141.94.171.215	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.22	50779	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.22	50776	35.211.233.246	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.22	50780	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.22	50786	3.233.79.191	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.22	50785	18.67.39.71	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.22	50782	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.22	50778	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.22	50792	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.22	50788	162.248.18.37	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.22	50789	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.22	50791	18.173.219.51	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.22	50795	54.162.157.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.22	50783	69.20.43.192	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.22	50793	68.67.160.186	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.22	50784	34.202.194.6	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.22	50799	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.22	50796	68.67.181.211	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.22	50787	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.22	50801	3.161.188.91	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.22	50803	172.64.151.101	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.22	50781	82.145.213.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.22	50794	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.22	50806	50.57.31.206	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.22	50805	52.9.147.99	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.22	50798	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.22	50804	69.20.43.192	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.22	50807	141.94.171.215	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.22	50811	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.22	50813	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.22	50812	68.67.160.186	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.22	50815	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.22	50817	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.22	50818	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.22	50808	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.22	50819	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.22	50816	54.152.252.123	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.22	50823	34.96.105.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.22	50825	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.22	50826	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.22	50827	34.98.64.218	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.22	50828	172.64.151.101	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.22	50821	44.195.133.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.22	50822	192.184.69.167	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.22	50735	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.22	50830	18.173.219.12	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.22	50829	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.22	50834	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.22	50835	68.67.181.211	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.22	50841	172.64.151.101	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.22	50839	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.22	50832	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.22	50844	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.22	50843	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.22	50842	23.105.12.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.22	50836	141.94.171.215	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.22	50840	54.152.252.123	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.22	50837	141.94.171.215	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.22	50845	74.119.119.139	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.22	50847	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.22	50848	198.148.27.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.22	50853	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.22	50855	74.119.119.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.22	50858	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.22	50859	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.22	50851	54.197.120.184	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.22	50860	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.22	50857	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.22	50863	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.22	50866	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.22	50865	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.22	50838	54.154.2.209	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.22	50867	3.228.157.65	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.22	50869	34.98.64.218	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.22	50868	54.159.220.191	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.22	50870	54.197.120.184	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.22	50864	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.22	50876	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.22	50879	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.22	50880	142.250.64.194	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.22	50873	69.166.1.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.22	50877	44.207.23.148	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.22	50882	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.22	50871	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.22	50872	141.94.171.215	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.22	50884	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.22	50887	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.22	50886	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.22	50896	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.22	50895	198.148.27.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.22	50890	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.22	50898	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.22	50734	142.250.64.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.22	50897	192.178.50.66	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.22	50894	74.119.119.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.22	50891	54.154.2.209	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.22	50902	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.22	50901	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.22	50900	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.22	50892	192.132.33.69	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.22	50907	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.22	50905	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.22	50909	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.22	50915	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.22	50916	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.22	50908	64.74.236.255	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.22	50910	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.22	50917	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.22	50918	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.22	50921	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.22	50920	3.213.9.240	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.22	50924	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.22	50925	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.22	50922	207.198.113.203	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.22	50913	34.251.97.118	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.22	50923	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.22	50929	52.46.151.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.22	50931	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.22	50933	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.22	50932	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.22	50927	54.154.2.209	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.22	50938	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.22	50939	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.22	50941	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.22	50946	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.22	50944	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.22	50940	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.22	50947	3.93.99.238	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.22	50948	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.22	50950	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.22	50945	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.22	50954	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.22	50956	52.46.151.131	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.22	50955	35.207.24.140	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.22	50957	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.22	50958	34.117.228.201	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.22	50959	34.117.228.201	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.22	50961	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.22	50962	34.202.175.95	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.22	50964	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.22	50966	34.111.113.62	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.22	50965	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.22	50963	54.154.2.209	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.22	50967	216.200.232.253	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.22	50968	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.22	50969	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.22	50970	34.202.175.95	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.22	50943	35.208.249.213	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.22	50971	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.22	50972	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.22	50973	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.22	50974	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.22	50975	52.223.22.214	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.22	50976	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.22	50977	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.22	50981	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.22	50982	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.22	50980	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.22	50979	52.5.77.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.22	50984	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.22	50983	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.22	50986	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.22	50987	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.22	50988	35.244.159.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.22	50993	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.22	50990	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.22	50989	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.22	50996	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.22	50994	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.22	50997	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.22	50995	44.215.44.5	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.22	51002	18.160.60.6	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.22	50998	34.117.228.201	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.22	51001	34.117.228.201	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.22	51000	34.117.228.201	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.22	50999	34.117.228.201	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.22	51010	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.22	51020	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.22	51004	52.5.77.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.22	51018	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.22	51007	74.119.119.150	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.22	51016	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.22	51013	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.22	51021	142.250.64.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.22	51015	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.22	51005	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.22	51019	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.22	51009	35.207.24.140	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.22	51014	52.223.40.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.22	51022	142.250.64.194	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.22	51023	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.22	51024	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.22	51008	64.74.236.255	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.22	51011	185.184.8.90	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.22	51017	35.71.139.29	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.22	51006	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.22	51027	69.194.240.13	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.22	51025	54.200.95.152	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.22	51029	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.22	50985	35.244.154.8	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.22	51028	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.22	51031	172.64.151.101	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.22	51035	3.163.87.30	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.22	51033	104.36.115.111	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.22	51036	35.172.99.217	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.22	51047	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.22	51050	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.22	51041	3.163.87.30	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.22	51038	172.64.151.101	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.22	51043	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.22	51044	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.22	51039	104.36.115.111	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.22	51046	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.22	51049	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.22	51052	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.22	51054	107.178.240.89	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.22	51040	3.231.136.235	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.22	51053	18.160.60.6	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.22	51045	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.22	51056	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.22	51037	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.22	51057	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.22	51051	192.184.69.167	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.22	51058	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.22	51060	142.250.64.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.22	51059	142.250.64.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.22	51062	34.117.228.201	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.22	51063	34.117.228.201	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.22	51066	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1374	192.168.2.22	51067	18.160.65.3	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1375	192.168.2.22	51069	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1376	192.168.2.22	51070	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1377	192.168.2.22	51072	107.178.240.89	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1378	192.168.2.22	51071	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1379	192.168.2.22	51073	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1380	192.168.2.22	51030	3.230.74.156	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1381	192.168.2.22	51075	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.22	51076	104.18.36.155	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1383	192.168.2.22	51078	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.22	51079	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1385	192.168.2.22	51080	18.160.65.3	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.22	51074	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1387	192.168.2.22	51084	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1388	192.168.2.22	51083	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1389	192.168.2.22	51086	44.206.51.132	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1390	192.168.2.22	51082	35.211.178.172	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1391	192.168.2.22	51091	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1392	192.168.2.22	51088	18.173.219.5	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1393	192.168.2.22	51092	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1394	192.168.2.22	51094	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.22	51090	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1396	192.168.2.22	51089	63.251.86.50	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1397	192.168.2.22	51095	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1398	192.168.2.22	51096	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.22	51097	192.178.50.66	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1400	192.168.2.22	51098	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1401	192.168.2.22	51099	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1402	192.168.2.22	51100	52.203.134.163	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.22	51101	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1404	192.168.2.22	51102	172.67.164.44	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1405	192.168.2.22	51103	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.22	51104	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1407	192.168.2.22	51105	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1408	192.168.2.22	51106	142.250.64.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1409	192.168.2.22	51108	18.173.219.12	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1410	192.168.2.22	51109	142.250.64.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1411	192.168.2.22	51110	142.250.64.130	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1412	192.168.2.22	51111	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1413	192.168.2.22	51112	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1414	192.168.2.22	51114	96.17.60.33	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1415	192.168.2.22	51117	172.67.164.44	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1416	192.168.2.22	51116	44.214.247.189	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.22	51118	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1418	192.168.2.22	51119	142.250.217.198	443	4840	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1419	192.168.2.22	51120	142.250.217.198	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1420	192.168.2.22	51121	142.250.217.198	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1421	192.168.2.22	51123	142.250.217.198	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1422	192.168.2.22	51130	192.178.50.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1423	192.168.2.22	51134	192.178.50.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1424	192.168.2.22	51136	192.178.50.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1425	192.168.2.22	51138	192.178.50.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1426	192.168.2.22	51137	192.178.50.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1427	192.168.2.22	51140	142.250.217.198	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1428	192.168.2.22	51143	192.178.50.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1429	192.168.2.22	51144	35.244.159.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1430	192.168.2.22	51148	142.250.64.130	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1431	192.168.2.22	51142	35.211.178.172	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1432	192.168.2.22	51152	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1433	192.168.2.22	51151	142.250.217.198	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1434	192.168.2.22	51153	35.244.159.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1435	192.168.2.22	51154	192.178.50.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1436	192.168.2.22	51155	142.250.64.130	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1437	192.168.2.22	51162	34.199.75.211	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1438	192.168.2.22	51167	192.178.50.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1439	192.168.2.22	51159	192.178.50.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1440	192.168.2.22	51160	52.46.151.131	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1441	192.168.2.22	51163	68.67.160.184	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1442	192.168.2.22	51170	142.250.64.130	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1443	192.168.2.22	51161	52.223.40.198	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1444	192.168.2.22	51166	64.74.236.255	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1445	192.168.2.22	51172	192.178.50.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1446	192.168.2.22	51175	35.244.159.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1447	192.168.2.22	51177	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1448	192.168.2.22	51176	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1449	192.168.2.22	51173	142.250.217.198	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1450	192.168.2.22	51174	142.250.64.194	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1451	192.168.2.22	51178	192.178.50.66	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1452	192.168.2.22	51181	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1453	192.168.2.22	51182	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1454	192.168.2.22	51180	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1455	192.168.2.22	51179	172.64.151.101	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1456	192.168.2.22	51183	142.250.64.194	443	3196	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1457	192.168.2.22	51184	52.46.151.131	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1458	192.168.2.22	51190	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1459	192.168.2.22	51191	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1460	192.168.2.22	51192	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1461	192.168.2.22	51193	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1462	192.168.2.22	51195	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1463	192.168.2.22	51196	104.18.36.155	443

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	21:37:26
Start date:	12/12/2023
Path:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
Imagebase:	0x13f3e0000
File size:	28'253'536 bytes
MD5 hash:	D53B85E21886D2AF9815C377537BCAC3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:37:56
Start date:	12/12/2023
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x13f280000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	21:37:58
Start date:	12/12/2023
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1412 --field-trial-handle=1224,i,2370678201779808397,14656861565329268167,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x13f280000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	21:38:01
Start date:	12/12/2023
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/
Imagebase:	0x13f280000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	21:38:22
Start date:	12/12/2023
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x13f280000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	21:38:24
Start date:	12/12/2023
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1428 --field-trial-handle=1236,i,12179144878932611703,17362965209824578044,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x13f280000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	21:38:54
Start date:	12/12/2023
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://mathblog.com/polynomial-root-finding-with-the-jenkins-traub-algorithm/
Imagebase:	0x13f280000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	21:38:54
Start date:	12/12/2023
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1464 --field-trial-handle=1236,i,10779558887364630857,15594323145333810207,131072 /prefetch:8
Imagebase:	0x13f280000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	21:39:51
Start date:	12/12/2023
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x13f160000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	21:39:51
Start date:	12/12/2023
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1448 --field-trial-handle=1320,i,17365852164750101580,5148545930953262033,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x13f160000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	21:39:53
Start date:	12/12/2023
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "http://www.interactiveds.com.au/
Imagebase:	0x13f160000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make a payload or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the device or in transit. This is common behavior that can be used across different platforms and the network to evade defenses. Payloads may be compressed, archived, or encrypted in order to avoid detection. These payloads may be used during Initial Access or later to mitigate detection. Portions of files can also be encoded to hide the plaintext strings that would otherwise help defenders with discovery. Payloads may also be split into separate, seemingly benign files that only reveal malicious functionality when reassembled.
Tactics:	Defense Evasion
Data Sources:
Platforms:	Android, iOS
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Polynomial.xlsb

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\397B408C.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\54A60F1D.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\659C1F40.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\6AA11641.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\6AAA91BF.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\787FCC33.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9C6280B4.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\B501B37B.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C1DC4125.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C565074E.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F049527A.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F6C10CE2.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\FAD4B098.png

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\FDA872F7.png

C:\Users\user\AppData\Local\Temp\2971.tmp

C:\Users\user\AppData\Local\Temp\~DF4D20A7F70007D9D2.TMP

C:\Users\user\AppData\Local\Temp\~DFE893A05C734ADDCC.TMP

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Polynomial.LNK

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat

C:\Users\user\Desktop\~$Polynomial.xlsb

Chrome Cache Entry: 400

Chrome Cache Entry: 401

Chrome Cache Entry: 402

Chrome Cache Entry: 403

Chrome Cache Entry: 404

Windows Analysis Report
Polynomial.xlsb